NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Recovering empty rulebase from policy file



The policy file is probably no help.  However, a copy of the working files
is saved on the firewall as part of the policy install.  You MIGHT be able
to get an adequate copy of the pre-upgrade objects from
$FWDIR/database/objects.C.

See http://www.phoneboy.com/fw1/faq/0149.html for more about fw confmerge


Tim
 
-- 
Timothy Frost			mailto:[email protected]
EDS New Zealand			Fax: +64-4-495-0473
8 Gilmer Terrace			Phone: +64-4-495-0504
P O Box 3647
Wellington
New Zealand

> -----Original Message-----
> From:	Hero Idema [SMTP:[email protected]]
> Sent:	Tuesday, December 19, 2000 4:13 AM
> To:	[email protected]
> Subject:	[FW1] Recovering empty rulebase from policy file
> 
> 
> Hello,
> 
> recently I upgraded my firewall (FW-1 4.0 on Solaris 2.6) to SP7. The only
> problem is that I lost my objects.C during the process. My rulebase is
> empty. I have the rulebase.W file but when using fwm -g rulebase.W it
> cannot find my objects.
> It seems that it didn't merge the objects.C file but just overwrote it.
> And (yes blame me for being stupid) I didn't have a backup of the
> Objects.C file so I can't merge it by hand.
> 
> I do however have a working policy file (.pf) which the filewall is using
> now. Is it possible to regenerate a rule base (or a least and objects.C
> file) with the policy file? 
> 
> The most frustrating is that I can see and open the current policy the
> firewall is using now by clicking on the 'show policy' button in the GUI
> at file->open. But I cannot modify it or save it.
> 
> Any ideas?
> 
> Regards,
> Hero Idema
> [email protected]
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.