I thought about this too, but it can't explain why it
is happening for different vendors and different
systems and different appplications (even plain ftp).
The only common point here is the 2 FW.
Anyway, I will see more clearly tomorrow with the
traces ...
Thanks,
-----Original Message-----
From: Valerie Harris [SMTP:[EMAIL PROTECTED]]
Sent: Tuesday, June 13, 2000 6:49 PM
To: Cisco Wave
Subject: Re: [FW1] More SYN Defender Problems
what about your tcp connection timeout? not
syndefender, but tcp connection time
out. looks like the time out are for your tcp
services.
Cisco Wave wrote:
> Dear All,
>
> I am defenitely interested if somebody can pinpoint
> something here.
> I am going to do some snooping on the FW tomorrow
> morning with some external vender, because a few
> applications are failing when SYNDef is set.
>
> I will let you know my findings, however, I will
> appreciate if you have more details in the future.
>
> Regards,
>
> Xavier
>
> -----Original Message-----
> From: Frank [SMTP:[EMAIL PROTECTED]]
> Sent: Monday, June 12, 2000 1:29 PM
> To: [EMAIL PROTECTED]
> Subject: [FW1] More SYN Defender Problems
>
> Thank you for all the suggestions.
>
> However, I set it to the max. timeout of 60 sec. and
> it's blocks so many
> of our applications. BigBrother, http, database all
> sorts of applications
> are getting blocked. Mostly communication between
> ethernet segments.
>
> I'm running 4.0 with SP 5. Various Solaris and Nokia
> firewalls. Mostly an
> NT network with a few Solaris servers for database.
>
> Passive and non-passive SYN gateway don't seem to
make
> any difference.
>
> Anything else I can do?
>
> Frank
>
> On Fri, 9 Jun 2000, Frank wrote:
>
> > Date: Fri, 9 Jun 2000 12:20:36 -0700 (PDT)
> > From: Frank <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: SYN Defender Problems
> >
> > I'm attempting to configure SYN Defender. It seem
> that any option I choose
> > appears to block access to our mail server (MS
> Exchange). I've tried all
> > the options and increased the timeout to 20.
> >
> > Any ideas?
> >
> >
>
>
================================================================================
> To unsubscribe from this mailing list, please
see
> the instructions at
>
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
>
> Thank you,
>
> =====
> We are NOT Cisco Inc.
>
> __________________________________________________
> Do You Yahoo!?
> Yahoo! Photos -- now, 100 FREE prints!
> http://photos.yahoo.com
>
>
================================================================================
> To unsubscribe from this mailing list, please
see the instructions at
>
http://www.checkpoint.com/services/mailing.html
>
================================================================================
=====
We are NOT Cisco Inc.
__________________________________________________
Do You Yahoo!?
Send online invitations with Yahoo! Invites.
http://invites.yahoo.com
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
