[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW1] securemote vpn and windows hosts file
Joerg, Your right. The file is modified. I've never had a problem with this, so I've not noticed. I've started looking into this. I have noticed that it's upon the bootup or when SR is updated. Not when SR starts or stops. I turned on the logging/debugger for SR(kill SR, create a zero byte file called Fwenc.log on the root of c: & start SR) and I'm currently looking through it. I did notice a new file(Fwenchosts) show up in the same directory as the hosts file. This may be coincidental, but while updating SR site, I killed SR. I was hoping to find some temp files. The file Fwenchosts appeared. This is a copy of my hosts file. It may have to do with Split DNS, which I just recently added. The log/debug file is interesting to read. I'll see what I find out. Robert >>> Joerg Haverkamp <[email protected]> 12/12/00 1:53:19 PM >>> >Robert MacDonald wrote: >> >> Joerg, >> >> You must have a process somewhere that is >> modifying/copying the file. Do you use Novell's >> NAL or have login processes that run each time? >> >> Robert >> >> >>> Joerg Haverkamp <[email protected]> 12/8/00 12:01:08 PM >>> >> > >> >Hi all, >> > >> >we got trouble with some windows nt clients (sp6, french language). On >> >most systems after rebooting the "hosts" file has time/date of boot >> >time and sometimes this file is _empty_ after booting. We tried to set >> >the file read only (mission specific parameters inside!), but after >> >booting there is a "copy of hosts". >> > >> >AFAIK nt systems only READ the host file and doesn't WRITE it? >> > >> >So, how could we protect this file? > >Robert, > >they use the normal (local) nt login process and these clients never >join any nt domain. They also had no virus scanner. I've checked the >problem on my win95 system and on this notebook, the same: always the >hosts file has time/date of boot time. On other windows nt clients, >who has no vpn-1 securemote installed, the hosts file is over 6 months >old (time/date of last change). >It seems that securemote (ver 4.1, sp1, build 4153) also writes this >file. >But why? ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|