Re: [FW-1] FW: NAVFW CVP Died...try mdq command

[Siegfried Delwiche <sdelwiche@FW1-NOSPAMWANADOO.BE>]

Same problem here with Trendmicro Viruswall on NT and NG on Linux.
Same solution: stand alone solution without CVP

For the mails in the queue, try to edit them as suggested and reboot.
Checkpoint has suppressed the "fw mdq" command and new mdq process is
something obscure! Reboot at least force the firewall to try again.

Siegfried
----- Original Message -----
From: "Robert Geller" <robg@SPORTSLINE.COM>
To: <FW-1-MAILINGLIST@beethoven.us.checkpoint.com>
Sent: Friday, March 29, 2002 9:26 PM
Subject: Re: [FW-1] FW: NAVFW CVP Died...try mdq command


> Not sure if this made it to the list already...I got failures for the
> listsrv...
>
> -Rob
> ===
> You can try the "mdq" command.... mdq is the checkpoint mail-dequerer...
> fwstop and fwstart may restart mdq or you can try just issuing it at a
> command prompt.
> We had lots of problems with CVP...we are now using a stand alone product
> without CVP.
>
> -Rob
>
> At 12:55 PM 3/29/02 -0500, Katsumi, Fred wrote:
> >I believe you can change the ip address to 0.0.0.0 and fw should pick
that
> >up and route to your mail server,
> >-----Original Message-----
> >From: McDuff, Malcolm [mailto:Malcolm.McDuff@INTERIORHEALTH.CA]
> >Sent: Friday, March 29, 2002 10:42 AM
> >To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> >Subject: [FW-1] FW: NAVFW CVP Died...have disabled, can't clear messages
> >in spool on firewall
> >
> >Hello...
> >
> >This afternoon we started receiving messages in our firewall logs that
all
> >SMTP traffic was being denied because the firewall couldn't establish a
> >connection to our Norton Anti-Virus for firewall server.
> >
> >We have not been able to isolate the problem, despite loading the most
> >recent patches to both NT and NAV, so we have edited our anti-virus
> >resources on the firewall so that the radio button on the CVP section of
> >Action 2 is now set to None.
> >
> >This has all new e-mails bypassing the CVP, however I have a number of
> >messages left on the fw1/spool directory.  I need to know what I can do
to
> >edit the AV header information to allow these files to be passed through
the
> >system now (right now all of the spool items will  be rejected because
the
> >cvp server cannot be processed).
> >
> >I have tried by comparing headers on successful messages vs. the stuck
ones
> >
> >  Changing AV_SETTING from "cure" to "none"
> >  Changing AV_PORT from 0 to 18181
> >  Changing COMPOUND from 0 to 1
> >
> >...so far no success.
> >
> >Are there any other suggestions for re-processing these files?
> >
> >Thanks for your time
> >
> >Malcolm McDuff
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================