Felipe, See SK #32668 to see if it helps you. The mentioned solution implies installing HFA01 for NGX R65 systems for "Client 227 Intrusuion Attack" error messages
On a side note, I've noticed also from experience that even when you select Do not apply any Smart Defence profile to your gateway, this does not completely remove all packet verifications. You should create a new SmartDefence profile and explicitly disable ALL protections one by one and then applying to your gateway (and push). -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Felipe Almeida Sent: November-28-08 9:08 AM To: [email protected] Subject: [FW-1] Disable SmartDefense Completely Hi, This is my frist post on this list. I got a problem with SmartDefense. Some weird stuff is happening with it. Even if I disable the SmartDefense on my gateway, some rules are applied and I cannot have some basic services, such as FTP, working. The basic FTP through a text interface isn't workin anymore. I got a messages like: IP address mismatch in port/227 command - header IP different from command IP The packet was modified due to a potential Client 227 Intrusion Attack Port/227 command missing a newline character There wasn't any significang changes on the firewall or SmartDefense. It worked before and suddenly it starts to happen. Is there a way to completely disable SmartDefense from my FW1 so I can check if the FTP will work? I'd appreciate some help on this. Thank you Felipe Almeida Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
