Problem with Netscreen 100

Archived from groups: comp.security.firewalls (More info?)

Hi,

i am running a netscreen 100 with 4.03 OS and i am seeing very wierd
stuff.
I created a bunch of trusted and untrusted hosts and then policys.
Some policys work and some dont. Also to mention i have setup some
group's where i have bound all smtp server as one group. For some
reason not all policy's work and it seems to matter in some cases
where the policy is located as far as order goes which i dont
understand why. If by default everything is blocked and i
have a policy that allos smtp for example and then 5 other policys
unrelated why can this effect another policy which allows anothe host
to use smtp..

hope anyone can point me in the right direction..

thanks

Alex

Archived from groups: comp.security.firewalls (More info?)

I understand if i deny something that that will impact the process but
in my case ist like

allow a to z
allow b to z
allow e to b
allow e to d
allow c to z

in this case c to z wont work until i move it up into the xx to z
group.
this does not make sence to me...

also what is the best way to log any traffic which is denied by the
firewall ?
i asume it would be a deny any any as the last policy

Alex






>
> - deny all mailservers
> - allow the ISP-Mailserver
>
> you will never reach the ISP-Mailserver.
>
> Greetings,
> Jens