|> From: tsanghan @
contact .
com .
sg (Wong Tsang Han)
|>
|> I have client send us a portion of their /var/adm/messages,
|>
|> Jun 15 23:50:13 fw unix: FW-1: fw_rejwct: packet is too small 0
|>
|> This same line repeated for at least 2 pages of A4 paper.
|>
|> I believe they are running FireWall-1 3.0 on a Solaris 2.5.
|>
|> Any one have any idea what is this 'packet is too small' business??
|>
|> Funny thing is, it seems there is a pattern in the timing, in a hour there
|> will be six line logged at the following mimutes of an hour,
|>
|> 7, 10, 27, 30, 47, 50
|>
Hello Tsang-han,
You have encountered a FW-1 bug. I found that out when I executed with
both of the following kernel parameters:
prompt# ndd -set /dev/ip ip_forward_src_routed 0
prompt# ndd -set /dev/ip ip_forwarding 0
Confirm it out with your Checkpoint reseller.
Hopt this helps,
Drexx.
#include <std.h>
#ifndef DISCLAIMER
#define DISCLAIMER The_opinions_expressed_are_my_own_and_not_from_my_company
#endif
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
______
/_____/\ DEXTER D. LAGGUI
/_____\\ \ Systems Engineer, CSD-TSR
/_____\ \\ / PHILIPPINE SYSTEMS PRODUCTS INC.
/_____/ \/ / / Penthouse, Corporate Business Center
/_____/ / \//\ 150 Paseo de Roxas Ave., Legaspi Village
\_____\//\ / / Makati City, Philippines
\_____/ / /\ /
\_____/ \\ \ Phone: (++ 63-2) 813-6453 to 55 loc. 222
\_____\ \\ Fax : (++ 63-2) 813-3516
\_____\/ Email: drexx @
pspi .
com .
ph
Pager: (++ 63-2) 1277-33615
~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~
|
|
