Brock,
These come from stations that are either DHCP or
BOOTP enabled. You can narrow down where they
come from by sticking a sniffer in the 'Source' network.
This network is the one listed in the log file. The log tells
you which interface the firewall saw it on too. How many
stations are on the networks, directly attached to the fw?
How many entries do you get?
If you don't want to see these, you can create an ws object
of that network and mask, then silently drop them. I've not
done this myself, but others have.
Search www.securepoint.com/fw1.
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> Brock Bruner <[EMAIL PROTECTED]> 10/31/00 3:35:14 PM >>>
>
>I am seeing a lot of bootp entries in my logs and I don't know where they
>are coming from. Can someone please help? I am running Checkpoint 4.1 SP1 on
>Windows NT Server 4.0 (SP6a).
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
