Re: [FW-1] Strange messages @ fwstart & fwstop

Subject: Re: [FW-1] Strange messages @ fwstart & fwstop

From: Roland Pintal <[email protected]>

Date: Tue, 9 Apr 2002 16:30:37 -0400

Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Title: Strange messages @ fwstart & fwstop

I saw this problem before and was unable to find the actual cause. I did find a way to fix it. You need to get the backup of your management console (You do have a backup?!), restore the content of the lib directory in a temporary spot. Whatever files are mentioned in the error message, replace them one by one with the ones from the restored backup. At one point the error will be gone and the firewall will be fine... For a while... This error had a tendency to come back.

This will allow you to get around the problem for now but you might want to open a ticket with CP on that.

Good luck.

-----Original Message-----
From: Brendan Laws [mailto:[email protected]]
Sent: Tuesday, April 09, 2002 3:51 AM
To: [email protected]
Subject: [FW-1] Strange messages @ fwstart & fwstop

Hi people, I am hoping someone may have seen this before and know a fix...

Nokia IP330 - IPSO3.4.1FCS10

I am unable to connect to the box to edit the fw policy via the GUI - it is unable to contact the server.

When I jump on the console and issue and fwstop or a fwstart I get this info on screen ...

FireWall-1: Starting fwd
FireWall-1: Starting fwm (Remote Management Server)

FireWall-1: Fetching Security Policy from localhost
Failed to load objects in setup.C:
"setup.C", line 26: ERROR: Cannot use <ClntAuthDefault::Auth>: Not in Scope

Failed to load objects in wellfleet.C:
"wellfleet.C", line 93: ERROR: Cannot use <::accept>: Not in Scope

Trying to fetch Security Policy from localhost:

Installing Security Policy fw01-270202-01 on all.all@fw01
Using external interface 'eth-s2p1c0'
FW-1: setting external interface to eth-s2p1c0
Apr 9 17:19:54 fw01 [LOG_CRIT] kernel: FW-1: setting external interface to eth-s2p1c0
Fetching Security Policy from localhost succeeded

FireWall-1: Starting cpmad (Malicious Activity Detection)
FireWall-1 started

From here the fw seems to start and traffic passes through it without a problem however I am unable to connect via the GUI to manage the box:(

Any ideas would be much welcomed!:)

Cheers

Brendan

-----
This message was scanned by AT&T Canada IES (Security Provisioning) for
viruses. This protection does not ensure this message is virus free, however
every precaution possible has been taken on our part.