Hows about unchecking the "allow rip" in policy properties, and make your
own rule that logs RIP packets. 
There is an entry in 4.1 that will log implied policies, but I do not know
of one in v4.0 or v3.0.
Your setup with running RIP through the firewall scares me. Is there not a
better solution?

Thomas Poole

-----Original Message-----
From: Daniel Kieng [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 30, 2000 9:21 AM
To: Fw-1-Mailinglist@Lists. Us. Checkpoint. Com (E-mail)
Subject: [FW1] Fw-1 RIP



Hi all,
I would like to know if CP FW-1 log displays rip traffic, by default
firewall-1 Property "accepting RIP" is checked but it does not log rip
traffic in the log viewer.  I have an incident that CP firewall-1 box does
not forward RIP version1 table to the next hop device.  I sniffed the wire
between the router and the firewall I can see RIP packets coming out the
router but did not see RIP packets coming out the firewall box.  Please
Help!!

> Daniel Kieng
> Sr. Network Security Engineer
> 
> PlatinumNetworks
> 4501-B Forbes Blvd.
> Lanham, MD  20706
> Toll Free:    877.429.3349 
> Corp HQ:    301.429.3349 x464
> Fax:           301.429.3357 
> 
> 


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to