Thank you for the support. It does make sense in disabling all protections on a SmartDefense profile.
Mailing list for discussion of Firewall-1 <[email protected]> wrote on 28/11/2008 11:05:31: > Felipe, > See SK #32668 to see if it helps you. The mentioned solution implies > installing HFA01 for NGX R65 systems for "Client 227 Intrusuion Attack" > error messages > > > On a side note, I've noticed also from experience that even when you select > Do not apply any Smart Defence profile to your gateway, this does not > completely remove all packet verifications. You should create a new > SmartDefence profile and explicitly disable ALL protections one by one and > then applying to your gateway (and push). > > > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf Of Felipe > Almeida > Sent: November-28-08 9:08 AM > To: [email protected] > Subject: [FW-1] Disable SmartDefense Completely > > Hi, > > This is my frist post on this list. I got a problem with SmartDefense. Some > weird stuff is happening with it. Even if I disable the SmartDefense on my > gateway, some rules are applied and I cannot have some basic services, such > as > FTP, working. > > The basic FTP through a text interface isn't workin anymore. I got a > messages > like: > > IP address mismatch in port/227 command - header IP different from command > IP > > The packet was modified due to a potential Client 227 Intrusion Attack > > Port/227 command missing a newline character > > There wasn't any significang changes on the firewall or SmartDefense. It > worked > before and suddenly it starts to happen. > > Is there a way to completely disable SmartDefense from my FW1 so I can check > if > the FTP will work? > > I'd appreciate some help on this. > > Thank you > > Felipe Almeida > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
