Roberto,
Firewall objects first, local hosts file
second, then DNS. I'm not sure(not tested)
if FW-1 uses standard calls to resolve names
if they aren't found as an object. Based on this,
the system may resolve based on nsswitch
parameters(or the like).
For NT, it might be the same, unless WINS or
LMHOST(NETBIOS resolving) is adhered to.
Confused yet? ;) One of these days, I'll play
with this and know for sure. I would suggest
giving it try also.
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> "Roberto Bazzano" <[EMAIL PROTECTED]> 7/12/00 8:56:28 AM >>>
>
>Hi.
>I'm new to FW-1, so sorry if this is too simple...
>
>In my FW-1 4.1 SP1 log viewer, there are entries with source address like
>"MATRICOLE2" or "CENTRALE" or "OEMCOMPUTER" or "E0230605" and so on.
>Where does FW-1 take these names?
>Other source entries are ip addresses, or fully qualified domain names, so
>what are such addresses?
>And then, how can I track these addresses if there isn't an IP address or a
>domain name?
>
>Thank you.
>
>Roberto Bazzano
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
