Troubleshooting guide

Appendix B: Object.C Properties in VPN-1/FireWall-1 4.0 The Properties section of the $FWDIR/conf/objects.C file
Advanced Technical Reference Guide 4.1 • June 2000 179
Property Property always
appears in object.C ?
(1=yes,0=userhas
to add entry)
Explanation Default Value
domain_tcp_p 1 Where in the policy to allow domain_tcp (first, last
or before last)
first
domain_tcp_router 1 Allow domain-tcp in access lists (true) or not
(false)
TRUE
domain_tcp_router_p 1 This property is no longer used first
domain_udp 1 Allow domain-udp (true) or not (false) TRUE
domain_udp_p 1 Where in the policy to allow domain_udp (first, last
or before last)
first
domain_udp_router 1 Allow domain-udp in access lists (true) or not
(false)
TRUE
domain_udp_router_p 1 This property is no longer used first
enable_fastpath 1 Pass established packets without checking them
against the rulebase (true) or check them (false)
FALSE
enable_objects_check 1 This property is no longer used TRUE
enable_tcprpc 1 Enable RPC over TCP (true) or not (false) FALSE
encryption_kernel_logging 1 Log encryption kernel events (true) or not (false) TRUE
established 1 This property is no longer used TRUE
established_p 1 This property is no longer used first
established_router 1 Accept established TCP connections in access
lists (true) or check them against the list (false)
TRUE
established_router_p 1 This property is no longer used first
exportableskip 1 Generate 512-bit SKIP keys in addition to 1024-bit
SKIP keys (true) or not (false)
FALSE
ftp_allowed_cmds 1 Allowed FTP commands, in a quoted string,
separated by blanks
"ABOR ACCT ALLO
APPE BYE BYTE
CDUP CWD DELE
FIND FW1C HELP
LIST MACB MAIL
MDTM MKD MLFL
MODE MRCP MRSQ
MSAM MSND MSOM
NLST NOOP PASS
PASV PORT PWD
QUIT REIN REST
RETR RMD RNFR
RNTO SITE SIZE
SOCK STOR STOU
STRU SYST TYPE
USER XCUP XCWD
XMD5 XMKD XPWD
XRMD"
ftp_dont_accept_site_on_l
ogin
0 Pass SITE command(true) or not (false) FALSE
ftp_dont_check_random_p
ort
0 Allow using TCP service ports in FTP data
connections (true) or not (false)
FALSE