Re: [FW-1] dropped by fwhold_expires - reason - held chain expires

2012-11-07 Thread pkc_mls

Le 06/11/2012 5:47, pkc_mls a écrit :

Hi,

I have the following error on my firewall module when I try to connect 
to ssh to a remote server, (it used to work until this afternoon, and 
I didn't modify anything except license).


;[cpu_0];[fw_2];fw_log_drop: Packet proto=6 10.20.30.40:51042 - 
10.100.15.1:22 dropped by fwhold_expires Reason: held chain expired;
;[cpu_1];[fw_2];fw_log_drop: Packet proto=6 10.20.30.40:51042 - 
10.100.15.1:22 dropped by fw_handle_first_packet Reason: Rulebase drop 
- rule 15;


Does anyone know where this message comes from and how to get rid of it ?


I found the error.
I added the internalnet object by mistake in the group used as source 
in the rule 15.

The error disappeared when the internalnet was removed from the group.

=
To set vacation, Out-Of-Office, or away messages,
send an email to lists...@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
=


[FW-1] dropped by fwhold_expires - reason - held chain expires

2012-11-06 Thread pkc_mls

Hi,

I have the following error on my firewall module when I try to connect 
to ssh to a remote server, (it used to work until this afternoon, and I 
didn't modify anything except license).


;[cpu_0];[fw_2];fw_log_drop: Packet proto=6 10.20.30.40:51042 - 
10.100.15.1:22 dropped by fwhold_expires Reason: held chain expired;
;[cpu_1];[fw_2];fw_log_drop: Packet proto=6 10.20.30.40:51042 - 
10.100.15.1:22 dropped by fw_handle_first_packet Reason: Rulebase drop - 
rule 15;


Does anyone know where this message comes from and how to get rid of it ?

thanks.

=
To set vacation, Out-Of-Office, or away messages,
send an email to lists...@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=
If you have any questions on how to change your
subscription options, email
fw-1-ow...@ts.checkpoint.com
=