<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Firewall connections script in Scripts</title>
    <link>https://community.checkpoint.com/t5/Scripts/Firewall-connections-script/m-p/268236#M1352</link>
    <description>&lt;P&gt;Hey team,&lt;/P&gt;
&lt;P&gt;This script generates txt file with all the connections through the firewall. dos2unix and chmod 777 needed before running it.&lt;/P&gt;
&lt;P&gt;Example in my lab fw:&lt;/P&gt;
&lt;P&gt;[Expert@CP-GW:0]# ./connections.sh&lt;BR /&gt;Saved: /var/log/conndump/connections-CP-GW-conntab-20260122-082307.txt.gz&lt;BR /&gt;[Expert@CP-GW:0]# cd /var/log/conndump&lt;BR /&gt;[Expert@CP-GW:0]# more connections-CP-GW-conntab-20260122-082307.txt.gz&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;==== Check Point Connections Dump ====&lt;BR /&gt;Timestamp : 2026-01-22T08:23:07-0500&lt;BR /&gt;Host : CP-GW&lt;BR /&gt;Mode : conntab&lt;/P&gt;
&lt;P&gt;Command: fw ctl conntab&lt;BR /&gt;--------------------------------------&lt;BR /&gt;&amp;lt;(inbound, src=[0.0.0.0,68], dest=[255.255.255.255,67], UDP); 37/40, rule=10, service=bootp(329), Ifncin=1, conn modules: , Authentication, FG-1, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,35041], dest=[8.8.4.4,53], UDP); 38/40, rule=33554432, service=domain-udp(353), Ifnsin=1, Ifnsout=1, conn modules: , Authentication, FG-1, SynDoSDefender, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,49157], dest=[172.16.10.252,257], TCP); 2171/3600, rule=369098752, tcp state=TCP_ESTABLISHED, service=FW1_log(80), Ifnsin=1, Ifnsout=1, conn modules: Authentication, FG-1, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(inbound, src=[100.65.16.3,59110], dest=[172.16.10.249,22], TCP); 3598/3600, rule=8, tcp state=TCP_ESTABLISHED, service=ssh(507), Ifncin=1, Ifncout=1, conn modules: , Authentication, FG-1, ISP-Redundancy, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,47732], dest=[8.8.8.8,53], UDP); 38/40, rule=33554432, service=domain-udp(353), Ifnsin=1, Ifnsout=1, conn modules: , Authentication, FG-1, SynDoSDefender, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(inbound, src=[100.65.16.3,64238], dest=[172.16.10.249,22], TCP); 3578/3600, rule=8, tcp state=TCP_ESTABLISHED, service=ssh(507), Ifncin=1, Ifncout=1, conn modules: , Authentication, FG-1, ISP-Redundancy, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,57515], dest=[172.16.10.252,257], TCP); 3547/3600, rule=369098752, tcp state=TCP_ESTABLISHED, service=FW1_log(80), Ifnsin=1, Ifnsout=1, conn modules: , Authentication, FG-1, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(inbound, src=[172.16.10.252,40635], dest=[172.16.10.249,18192], TCP); 3595/3600, rule=301989888, tcp state=TCP_ESTABLISHED, service=CPD_amon(17), Ifncin=1, Ifncout=1, conn modules: , Authentication, FG-1, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,34031], dest=[172.16.10.252,257], TCP); 3580/3600, rule=369098752, tcp state=TCP_ESTABLISHED, service=FW1_log(80), Ifnsin=1, Ifnsout=1, conn modules: , Authentication, FG-1, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(inbound, src=[172.16.10.252,51045], dest=[172.16.10.249,18192], TCP); 3544/3600, rule=301989888, tcp state=TCP_ESTABLISHED, service=CPD_amon(17), Ifncin=1, Ifncout=1, conn modules: , Authentication, FG-1, ISP-Redundancy, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;lt;(outbound, src=[172.16.10.249,56643], dest=[1.1.1.1,53], UDP); 38/40, rule=33554432, service=domain-udp(353), Ifnsin=1, Ifnsout=1, conn modules: , Authentication, FG-1, SynDoSDefender, &amp;gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
    <pubDate>Fri, 06 Feb 2026 15:02:34 GMT</pubDate>
    <dc:creator>the_rock</dc:creator>
    <dc:date>2026-02-06T15:02:34Z</dc:date>
    <item>
      <title>Firewall connections script</title>
      <link>https://community.checkpoint.com/t5/Scripts/Firewall-connections-script/m-p/268236#M1352</link>
      <description>4</description>
      <pubDate>Fri, 06 Feb 2026 15:02:34 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/Scripts/Firewall-connections-script/m-p/268236#M1352</guid>
      <dc:creator>the_rock</dc:creator>
      <dc:date>2026-02-06T15:02:34Z</dc:date>
    </item>
  </channel>
</rss>

