> I still don't understand.  Do the packets travel trough the 
> firewall, which is also acting as router between 10.1.8.x and 
> 10.1.10.x?

While I am the firewall admin, I'm still trying to understand all of
this myself. Most of this was in place long before I got here. I know
the checkpoint side of it inside and out...it's the network side that
blows my mind. I believe the firewall simply acts as router between the
interfaces. There has never been a rule prohibiting or enabling
communication between these two boxes, and up until 2 weeks ago, they
were happy as clams.

> 
> I also still did not yet complete understand when you have 
> the timeout. Is it in the estimate phase or is it in the backup phase?

I guess that's part of what I'm asking. It appears as if it's in the
estimate phase...but I'm not really sure how to analyze the
amandad.*.debug logs. 

> 
> But maybe someone else did...

Only if they want to have their hands removed... :)