{"id":24,"date":"2009-02-24T22:18:31","date_gmt":"2009-02-24T22:18:31","guid":{"rendered":"https:\/\/www.timk.de\/it-blog\/index.php\/2009\/02\/24\/problem-with-checkpoint-and-solaris-patch-114344\/"},"modified":"2009-02-24T22:18:31","modified_gmt":"2009-02-24T22:18:31","slug":"problem-with-checkpoint-and-solaris-patch-114344","status":"publish","type":"post","link":"https:\/\/www.timk.de\/it-blog\/problem-with-checkpoint-and-solaris-patch-114344\/","title":{"rendered":"Problem with CheckPoint and Solaris Patch 114344"},"content":{"rendered":"<p>After installing recommended Sun Solaris Patch 114344-25 or newer on CheckPoint Firewall based on Solaris 10 with JumpStart Architecture and Security Scripts (JASS) toolkit there are local problems at DNS lookups on the firewall node.<\/p>\n<p>  # nslookup www.ebay.com<br \/>\n  \u2026 Result was changing between timeout and right result  <\/p>\n<p>Resolution:<\/p>\n<p>Kernel Parameter \u201cip_strict_dst_multihoming\u201d is set to strict value (1) by JASS startup-script \/etc\/init.d\/nddconfig. By Solaris OS default the parameter is set to the unstrict value (0). You have to change the parameter back to the unstrict value (0).<\/p>\n<p>  # ndd \/dev\/ip ip_strict_dst_multihoming 0<\/p>\n<p>And change value from 1 to 0 in JASS startup-script or commented the setting of this Kernel Parameter out.<\/p>\n<p>Remark:<\/p>\n<p>The use of JASS is strictly recommended to harding the Solaris OS of the firewall node.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>After installing recommended Sun Solaris Patch 114344-25 or newer on CheckPoint Firewall based on Solaris 10 with JumpStart Architecture and Security Scripts (JASS) toolkit there are local problems at DNS lookups on the firewall node. # nslookup www.ebay.com \u2026 Result was changing between timeout and right result Resolution: Kernel Parameter \u201cip_strict_dst_multihoming\u201d is set to strict [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,9],"tags":[],"class_list":["post-24","post","type-post","status-publish","format-standard","hentry","category-checkpoint","category-solaris"],"_links":{"self":[{"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/posts\/24","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/comments?post=24"}],"version-history":[{"count":0,"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/posts\/24\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/media?parent=24"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/categories?post=24"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.timk.de\/it-blog\/wp-json\/wp\/v2\/tags?post=24"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}