RE: [FW1] Problems with centralized (any) logging

[Didier Arenzana <darenzana@FW1-NOSPAMyahoo.fr>]

Hi,

I saw this on the technical documentation section of checkpoint site:
if you preceed an IP address with the '+' symbol in the masters file,
logging will be directed to all addresses with a '+' symbol.
example masters file:
192.23.45.67
+192.4.67.89
192.34.56.78
+194.98.76.54

1. The Fw module will attempt to log both 192.45.67.89 and 194.98.76.54
2. If the fw modules fails to connect to both these addresses, it will
try 192.23.45.67
3. if this also fails, it will try 192.34.56.78
4. if this fails to, it will log to itself.


My 2 cents: look in the fwd.log file on the fw modules, and see if you
have some 'authentication failed for log on ' messages.

Hope this helps,
Didier ARENZANA.  

--- "Murphy, Paul" <Paul.Murphy@lloydstsb.co.uk> a écrit : 
> 
> 
> Did they say what the "+" is supposed to accomplish?  In other words,
> why
> would FW1 supposedly understand a masters IP address better if it has
> a plus
> on the front of it?			
> 
> -----Original Message-----
> From: Randall Kizer [mailto:randall@intelenet.net]
> Sent: 25 September 2000 22:35
> To: Jason Murray; 'FW-1 Mailing List'
> Subject: Re: [FW1] Problems with centralized (any) logging
> 
> 
> 
> I've opened a ticket with CP support regarding this very same item on
> a 
> Solaris 2.7, 4.1 SP2.
> 
> Their solution: put a + in front of the IP of the Management
> Station's IP 
> in FWDIR/conf/masters.
> 
> Problem: Their solution didn't work!
> 
> 
> At 04:57 PM 9/25/00 -0400, Jason Murray wrote:
> 
> >I have an installation with multiple firewall modules and one
> management
> >server. I would like all the modules to send their logging info back
> to the
> >management server. According the docs this should be the default
> action.
> >However it is not working.
> >
> >It's been so long since this worked I can't remember what I did to
> break
> it.
> >
> >Just recently I did a "fw putkey" on one of the modules and the
> management
> >server. Then I restarted the firewall process. This had no effect.
> >
> >I did pay a visit to phoneboy, but a quick search didn't reveal
> anything
> >helpful.
> >
> >Anyone have any ideas?
> >
> >Trouble shooting without logs is next to impossible.
> >
> >--
> >Jason Murray -- Mike 3588 -- Desk 4353
> >"...it is a wretched taste to be gratified with mediocrity when the
> >excellent lies before us.", Isaac D'Israeli
> >
> >
> >
>
>===========================================================================
> =====
> >      To unsubscribe from this mailing list, please see the
> instructions at
> >                http://www.checkpoint.com/services/mailing.html
>
>===========================================================================
> ===== 
> >
> 
> 
> 
> 
> 
> 
> 
> ---
> "It is better to be true to what you believe,
>   though it be wrong, than to be false to what
>   you believe, even if that belief is correct."
>                                   -- Anna Howard Shaw
> 
> 
> 
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the
> instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
---------------------------------------------------------------------------------
> This e-mail is intended only for the above addressee. It may contain
> privileged information. If you are not the addressee you must not
> copy,
> distribute, disclose or use any of the information in it. If you have
> received it in error please delete it and immediately notify the
> sender.
> 
> evolvebank.com is a division of Lloyds TSB Bank plc.
> Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS.  Registered
> in
> England, number 2065.  Telephone No: 020 7626 1500
> Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street,
> Edinburgh EH2 4LH. Registered in Scotland, number 95237.  Telephone
> No:> 
> Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the
> Personal Investment Authority and represent only the Scottish Widows
> and Lloyds TSB Marketing Group for life assurance, pensions and
> investment business.
> 
> Members of the UK Banking Ombudsman Scheme and signatories to the UK
> Banking Code.
>
----------------------------------------------------------------------------------
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please see the
> instructions at
>                http://www.checkpoint.com/services/mailing.html
>
================================================================================


___________________________________________________________
Do You Yahoo!? -- Pour dialoguer en direct avec vos amis, 
Yahoo! Messenger : http://fr.messenger.yahoo.com


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================