[FW1] Anti-Spoofing Problem

["Parker, Ian" <parker.ian@syncrude.com>]

Hello all,

I have a firewall with three interfaces (external, DMZ, internal). A DNS
server is on the DMZ. I have anti-spoofing for the external interface set to
"Others". Whenever the firewall host attempts to do a DNS lookup, I get an
anti-spoofing alert on the external interface i.e.

lan0 spoofalert proto udp src fw-host dst dns-server service domain-udp.

I have tried changing the anti-spoofing configuration to "Others+" and
adding the IP address of lan0 as an allowed source address, but I still get
the alert. How do I set up anti-spoofing such that the firewall can talk to
the DNS server?

Thanks in advance for any assistance you can offer.

Ian Parker, MCP

Senior Systems Analyst 
Syncrude Canada Ltd

(780)790-4631
parker.ian@syncrude.com



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================