[FW1] fw_xlate errors with HIDE MODE NAT over 5400 connections!

[Josephine Stine <pezisgod@hotmail.com>]

We are running a Solaris 2.6 Ultra 2, with one legal IP address pointing 
to the outside world.  We're using hide mode NAT, hiding all of our 
internal addresses.  On some Internet-active days, like when there's a 
baseball game, or when there are NATO air strikes, our server spits out 
"fw_xlate" errors to the console - and the box refuses to accept new 
connections.  We've investigated and determined that when the box 
handles over 5400 simultaneous NAT'ed connections, it ceases to operate 
for about a minute - spitting out these errors.  How can we fix this???  
I've looked thru all the conf files for a variable but can't find 
anything......HELP!

Joey
Get Your Private, Free Email at http://www.hotmail.com



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================