Re: [FW1] Firewall-1 cp2000 on soalris 8

["Frank D'Urso" <fdurso@FW1-NOSPAMlinus.aaxion.com>]

Good Morning;

I have some entry level questions and comments to add to this thread.....

Firebird wrote:
>   So first, why did you install the graphical environment ? This has to be a
Firewalling station, or not ?
>  Firewalls don't need graphical environment.

But Xlibraries are still needed correct? (in order to display FW GUI) So if he
already has CDE installed
and doesnt mind the performance hit with it running there should not be a problem,
security wise, correct?

>
> When you install a station you intend to become a firewalling station, you
> just have to take as less packages as possible, to reduce the possibilities
> of errors. There's a "beta" doc out there... On Lance's page, which
> describes the installation procedure for a standard SUN with Solaris 8. I
> changed it for SPARCserver 20 and SPARCstation 5 station since I got those
> old machines here.
>     Try to remove all the packages which are not necessary... Then you'll
> see more clearer what's going on there.

As a new comer can you point us to Lance and his page? Howzabout a link to this Doc?

I had asked last week for information about the minimal packages needed and I'm
thinking this
document would be very useful for my situation.

Meanwhile about the start up problem, look into the possibility of placing a SU in
the rc file so that
whatever environmental variables that you need are associated with the session as
opposed to naked boot time root.

Volume Manager will have already started and mounted your mirrored volumes at that
point in the startup scripts.

Frank D'Urso

> ----- Original Message -----
> From: "Yaw Yee Chong" <ycyaw@abs.com.my>
> Sent: Wednesday, November 15, 2000 2:44 AM
> Subject: Re: [FW1] Firewall-1 cp2000 on soalris 8
>
> > Hi All,
> >     Actually, my scenario is the firewall could work perfectly after i
> start it
> > manually.(fwstart or using the /etc/rc3.d/S99firewall1). However, it just
> can't
> > start automatically when the OS reboot. My server is actually running
> Volume Manager
> > for disk mirroring. At the booting process, i receive the messages(core
> dump,
> > firewall failed to start). Could it be cause by any unfinish services? but
> i have
> > try to make the fwd to delay start up at booting but it still give the
> same error.
> > But once I login as root, at the CDE environment, i could start it without
> any error
> > at all. Any idea?
> >
> > regards,
> > Yee Chong
> >
> > Firebird wrote:
> >
> > >     Hello Aylton,
> > >
> > >     Yes, it is
> > >
> > >     So long,
> > >         Firebird
> > >
> > > ----- Original Message -----
> > > From: "Aylton Souza, CISSP" <asouza@modulo.com.br>
> > > To: "Firebird" <firebird@chez.com>; "Oliver Ehrmann" <oehrmann@gmx.de>;
> "Yaw
> > > Yee Chong" <ycyaw@abs.com.my>;
> <fw-1-mailinglist@lists.us.checkpoint.com>
> > > Sent: Tuesday, November 14, 2000 5:12 PM
> > > Subject: RES: [FW1] Firewall-1 cp2000 on soalris 8
> > >
> > > > Is it running in 32 bit mode?
> > > >
> > > > -----Mensagem original-----
> > > > De: owner-fw-1-mailinglist@lists.us.checkpoint.com
> > > > [mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]Em nome de
> > > > Firebird
> > > > Enviada em: Tuesday, November 14, 2000 12:23 PM
> > > > Para: Oliver Ehrmann; Yaw Yee Chong;
> > > > fw-1-mailinglist@lists.us.checkpoint.com
> > > > Assunto: Re: [FW1] Firewall-1 cp2000 on soalris 8
> > > >
> > > >
> > > >
> > > >     Hello Oliver,
> > > >
> > > >     It runs quite fine on my side, thought there're problem with
> support
> > > of
> > > > the service packs. So even if you get it to work on a Sol8 station,
> you
> > > > won't be able to patch it correctly !
> > > >
> > > >     So long,
> > > >         Frebird
> > > >
> > > > ----- Original Message -----
> > > > From: "Oliver Ehrmann" <oehrmann@gmx.de>
> > > > To: "Yaw Yee Chong" <ycyaw@abs.com.my>;
> > > > <fw-1-mailinglist@lists.us.checkpoint.com>
> > > > Sent: Tuesday, November 14, 2000 3:24 PM
> > > > Subject: Re: [FW1] Firewall-1 cp2000 on soalris 8
> > > >
> > > >
> > > > >
> > > > > Hi,
> > > > >
> > > > > yes, you are using the wrong Solaris version. Checkpoint only
> supports
> > > > > Solaris up to version 7. When
> > > > > I tried to run Firewall-1 on Solaris 8 my fwd crashed all the time.
> > > > >
> > > > > Regards,
> > > > >
> > > > > Oliver
> > > > >
> > > > >
> > > > > ----- Original Message -----
> > > > > From: "Yaw Yee Chong" <ycyaw@abs.com.my>
> > > > > To: <fw-1-mailinglist@lists.us.checkpoint.com>
> > > > > Sent: Tuesday, November 14, 2000 5:15 AM
> > > > > Subject: [FW1] Firewall-1 cp2000 on soalris 8
> > > > >
> > > > >
> > > > > >
> > > > > > HI all,
> > > > > >     I am currently installed a firewall-1 v41 on Solaris 8 (32bit)
> at
> > > > > > one of the E10K doamin. Everything work fine except the firewall
> > > deamon
> > > > > > can not be start up automatically from the /etc/rc3.d/S99firewall1
> > > > > > script. Every times when the machines reboot, i received a core
> dump
> > > > > > when the os try to start the firewall. But i can start the
> firewall
> > > > > > manually after i logon, either using the S99firewall script or the
> > > > > > fwstart command. Any idea, what 's wrong?
> > > > > >
> > > > > > regards,
> > > > > > Yee Chong



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================