[FW1] Strange behaviour on our IP330

[Langa Kentane <LangaK@FW1-NOSPAMdiscoveryhealth.co.za>]

I am experiencing a strange problem with my Nokia IP 330.

First of all, I noticed that the thing core dumped this morning.  I noticed
this when I was trying to bounce the firewall due to a problem where users
could not access the internet. I then rebooted the firewall.

What happened next is that users still could not access the internet.  I
then put a rule above the auth rules to give my box full access.  Voila, no
problems.  Them I disabled the rule and removed the proxy settings from
internet explorer.  Vioala, no problems.

The problem that IE returns when you try to access the internet is a DNS
problem.  I tested DNS, works fine.

While trying to do a policy install, I got the following message:

Trying to fetch Security Policy from localhost:

Installing Security Policy Health on all.all@firewall
Jan  4 15:06:28 firewall last message repeated 3 times
Jan  4 15:07:09 firewall [LOG_CRIT] kernel: fw_lock: static_s is 80000000
Jan  4 15:07:09 firewall [LOG_CRIT] kernel: fw_lock: already locked. current
= fw_filter (out), previous = fwk_atomic_filter(2), level=2
Jan  4 15:07:09 firewall [LOG_CRIT] kernel: FW-1: panic(1): fw_lock
Jan  4 15:07:09 firewall [LOG_CRIT] kernel: fw_unlock: lock_level=-1 last
locker=fwchain_deliver_cookie
Jan  4 15:07:09 firewall [LOG_CRIT] kernel: FW-1: panic(1): fw_unlock
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: fw_unlock: static_s is -1
Jan  4 15:07:10 firewall last message repeated 5 times
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: fw_lock: already locked. current
= fw_filter (in), previous = fwk_atomic_filter(2), level=2
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: FW-1: panic(1): fw_lock
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: fw_unlock: lock_level=-1 last
locker=fwchain_deliver_cookie
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: FW-1: panic(1): fw_unlock
Jan  4 15:07:10 firewall [LOG_CRIT] kernel: fw_unlock: static_s is -1
Fetching Security Policy from localhost succeeded
firewall[admin]# Jan  4 15:07:10 firewall last message repeated 6 times

Any ideas?
__________________________________________________________
Langa Kentane		| TEL:Security Administrator	| Cell:DISCOVERY HEALTH		| http://www.discoveryhealth.co.za
__________________________________________________________________



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================