Re: Error: h_slink: table is full !

>From the knowledge base

For each real connection table entry, eight symbolic links
(SLINKS) will be added. The error message appears when the
system tries to add new entries, but the maximum number of
SLINK entries has been added to the table.

This problem was fixed in R55 HFA18 

I suggest you sign up for an account

JP




-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Reinhard Stich
Sent: Tuesday, 31 July 2007 8:57 AM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: Re: [FW-1] AW: [FW-1] Error: h_slink: table is full
!

hi,

I think it's

fw tab -t connections -s

br
reinhard

At 00:38 31.07.2007, you wrote:
>Thanks a lot,
>
>Is there a way to know which is the current number of
the state-table ?
>
>Regards
>----- Original Message ----- From: "Reinhard
Stich" 
><r.stichINTERNET-SECURITY.AT>
>To: <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
>Sent: Monday, July 30, 2007 4:47 PM
>Subject: [FW-1] AW: [FW-1] Error: h_slink: table is full
!
>
>
>>hello,
>>
>>check the state-table size in the
>>capacity-options of your gateway's object and raise
the number or connections.
>>
>>br
>>reinhard
>>--
>>Reinhard Stich, Internet Security AG
>>Mobile email powered by Nokia Intellisync
-----Ursprüngliche 
>>Nachricht-----
>>Von: Edouard Zorrilla
>>Gesendet: 30.07.2007 23:05:03
>>An: Edouard Zorrilla;FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
>>Betreff: [FW-1] Error: h_slink: table is full !
>>
>>
>>Environment: multiple Checkpoint NG-AI firewall
modules with active 
>>smart defense on Sun Solaris 9 clustered with SBFC.
Today one of my 
>>firewall modules slowed to a stop with these errors
in the syslog.
>>
>>h_slink: table is full
>>h_slink: table is full
>>h_slink: table is full
>>h_slink: table is full
>>h_slink: table is full
>>
>>I had had to restart the modules in order to
overcome the problem, not 
>>traffic thru the modules FW's. Do any one knows how
to solve this so 
>>that can not appear again ?
>>
>>Thanks alot,
>>
>>Regards
>>
>>
>>=================================================
>>To set vacation, Out-Of-Office, or away messages,
send an email to 
>>LISTSERVamadeus.us.checkpoint.com
>>in the BODY of the email add:
>>set fw-1-mailinglist nomail
>>=================================================
>>To unsubscribe from this mailing list, please see
the instructions at 
>>http:
//www.checkpoint.com/services/mailing.html
>>=================================================
>>If you have any questions on how to change your
subscription options, 
>>email fw-1-ownerts.checkpoint.com 
>>=================================================
>>
>>=================================================
>>To set vacation, Out-Of-Office, or away messages,
send an email to 
>>LISTSERVamadeus.us.checkpoint.com
>>in the BODY of the email add:
>>set fw-1-mailinglist nomail
>>=================================================
>>To unsubscribe from this mailing list, please see
the instructions at 
>>http:
//www.checkpoint.com/services/mailing.html
>>=================================================
>>If you have any questions on how to change your
subscription options, 
>>email fw-1-ownerts.checkpoint.com 
>>=================================================
>>
>
>=================================================
>To set vacation, Out-Of-Office, or away messages, send
an email to 
>LISTSERVamadeus.us.checkpoint.com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http:
//www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your
subscription options, 
>email fw-1-ownerts.checkpoint.com 
>=================================================

-- 
Reinhard Stich          r.stichinternet-security.at
Internet Security AG,      1150 Wien, Johnstrasse 29
Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 

=================================================
To set vacation, Out-Of-Office, or away messages, send an
email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription
options, email fw-1-ownerts.checkpoint.com
=================================================
############################################################
#########################
Important: This electronic message and attachments (if any)
are confidential
and may be legally privileged. If you are not the intended
recipient do not
copy, disclose or use the contents in any way. Please let us
know by return
e-mail immediately and then destroy this message.
############################################################
#########################

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

It means that it has not solution under R54 ? I mean I have
a R54 and this 
problem never happened before until I reinstalled all the
modules and the 
SMART Console. What a but luck... I am running my way to
update the last HF 
for the R54 and to rise the number of connections under the
capacity-options 
of my gw's object in order so solve this problem.

Besides, the work around says you can overcome this w/o the
HFA18 doing:

  1.. In SmartDashboard, check all UDP services to see if
"Accept replies 
from any port" is selected in the Advanced UDP Service
Properties window. 
(The only UDP service for which this option is selected, by
default , is 
tftp.)

  2.. Deselect this option for all other UDP services.

  3.. Select 'Policy > Global Properties > Stateful
Inspection'. In the 
Stateful UDP section, deselect the option "Accept
stateful UDP replies from 
any port for unknown services" and reinstall the
Security Policy.
So, does it means it works for R54 ?

Regards

----- Original Message ----- 
From: "Jean-Paul Baillon"
<jean-paul.baillonSAFECOM.CO.NZ>
To: <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
Sent: Monday, July 30, 2007 7:14 PM
Subject: Re: [FW-1] AW: [FW-1] Error: h_slink: table is full
!


> From the knowledge base
>
> For each real connection table entry, eight symbolic
links (SLINKS) will 
> be added. The error message appears when the system
tries to add new 
> entries, but the maximum number of SLINK entries has
been added to the 
> table.
>
> This problem was fixed in R55 HFA18
>
> I suggest you sign up for an account
>
> JP
>
>
>
>
> -----Original Message-----
> From: Mailing list for discussion of Firewall-1 
> [mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Reinhard 
> Stich
> Sent: Tuesday, 31 July 2007 8:57 AM
> To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
> Subject: Re: [FW-1] AW: [FW-1] Error: h_slink: table is
full !
>
> hi,
>
> I think it's
>
> fw tab -t connections -s
>
> br
> reinhard
>
> At 00:38 31.07.2007, you wrote:
>>Thanks a lot,
>>
>>Is there a way to know which is the current number
of the state-table ?
>>
>>Regards
>>----- Original Message ----- From: "Reinhard
Stich"
>><r.stichINTERNET-SECURITY.AT>
>>To: <FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM>
>>Sent: Monday, July 30, 2007 4:47 PM
>>Subject: [FW-1] AW: [FW-1] Error: h_slink: table is
full !
>>
>>
>>>hello,
>>>
>>>check the state-table size in the
>>>capacity-options of your gateway's object and
raise the number or 
>>>connections.
>>>
>>>br
>>>reinhard
>>>--
>>>Reinhard Stich, Internet Security AG
>>>Mobile email powered by Nokia Intellisync
-----Ursprüngliche
>>>Nachricht-----
>>>Von: Edouard Zorrilla
>>>Gesendet: 30.07.2007 23:05:03
>>>An: Edouard Zorrilla;FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
>>>Betreff: [FW-1] Error: h_slink: table is full !
>>>
>>>
>>>Environment: multiple Checkpoint NG-AI firewall
modules with active
>>>smart defense on Sun Solaris 9 clustered with
SBFC. Today one of my
>>>firewall modules slowed to a stop with these
errors in the syslog.
>>>
>>>h_slink: table is full
>>>h_slink: table is full
>>>h_slink: table is full
>>>h_slink: table is full
>>>h_slink: table is full
>>>
>>>I had had to restart the modules in order to
overcome the problem, not
>>>traffic thru the modules FW's. Do any one knows
how to solve this so
>>>that can not appear again ?
>>>
>>>Thanks alot,
>>>
>>>Regards
>>>
>>>
>>>================================================
=
>>>To set vacation, Out-Of-Office, or away
messages, send an email to
>>>LISTSERVamadeus.us.checkpoint.com
>>>in the BODY of the email add:
>>>set fw-1-mailinglist nomail
>>>================================================
=
>>>To unsubscribe from this mailing list, please
see the instructions at
>>>http:
//www.checkpoint.com/services/mailing.html
>>>================================================
=
>>>If you have any questions on how to change your
subscription options,
>>>email fw-1-ownerts.checkpoint.com
>>>================================================
=
>>>
>>>================================================
=
>>>To set vacation, Out-Of-Office, or away
messages, send an email to
>>>LISTSERVamadeus.us.checkpoint.com
>>>in the BODY of the email add:
>>>set fw-1-mailinglist nomail
>>>================================================
=
>>>To unsubscribe from this mailing list, please
see the instructions at
>>>http:
//www.checkpoint.com/services/mailing.html
>>>================================================
=
>>>If you have any questions on how to change your
subscription options,
>>>email fw-1-ownerts.checkpoint.com
>>>================================================
=
>>>
>>
>>=================================================
>>To set vacation, Out-Of-Office, or away messages,
send an email to
>>LISTSERVamadeus.us.checkpoint.com
>>in the BODY of the email add:
>>set fw-1-mailinglist nomail
>>=================================================
>>To unsubscribe from this mailing list,
>>please see the instructions at
>>http:
//www.checkpoint.com/services/mailing.html
>>=================================================
>>If you have any questions on how to change your
subscription options,
>>email fw-1-ownerts.checkpoint.com
>>=================================================
>
> -- 
> Reinhard Stich          r.stichinternet-security.at
> Internet Security AG,      1150 Wien, Johnstrasse 29
> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
>
> =================================================
> To set vacation, Out-Of-Office, or away messages, send
an email to 
> LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
subscription options, 
> email fw-1-ownerts.checkpoint.com 
> =================================================
>
############################################################
#########################
> Important: This electronic message and attachments (if
any) are 
> confidential
> and may be legally privileged. If you are not the
intended recipient do 
> not
> copy, disclose or use the contents in any way. Please
let us know by 
> return
> e-mail immediately and then destroy this message.
>
############################################################
#########################
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERVamadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http:
//www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-ownerts.checkpoint.com
> =================================================
>
> 

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

On Mon, 30 Jul 2007, Edouard Zorrilla wrote:

> It means that it has not solution under R54 ? I mean I
have a R54 and this 
> problem never happened before until I reinstalled all
the modules and the 
> SMART Console. What a but luck... I am running my way
to update the last HF 
> for the R54 and to rise the number of connections under
the capacity-options 
> of my gw's object in order so solve this problem.

The Check Point support policy indicates that NG-AI support
means you run 
NG-AI R55 and not NG-AI R54.

Hugo.

-- 
 	hvdkooijvanderkooij.org	http://hugo.vanderkooij.
org/
 	    This message is using 100% recycled electrons.

 	Some men see computers as they are and say
"Windows"
 	I use computers with Linux and say "Why
Windows?"
 		(Thanks JFK, for the insight.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================