[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] always can't connect to fw after reboot! -update
Sorry.. I found the reason why my officer can't do fwstart at his site. It is because I am he using different shell with me in /etc/passwd. I changed it to the same to /bin/sh. # /sbin/sh # echo $FWDIR # more /etc/passwd root:x:0:1:Super-User:/:/sbin/sh simc:x:102:1::/simc:/bin/sh But still after rebooting, can't connect to the firewall again... please advice when you are free. Sim -----Original Message----- From: Sim, CT (Chee Tong) Sent: Wednesday, April 10, 2002 1:12 PM To: 'Mailing list for discussion of Firewall-1' Cc: '[email protected]'; 'Geoffrey Cheng' Subject: always can't connect to fw after reboot! Hi.. I just upgraded my firewall from Checkpoint 4.0 to Checkpoint 2000. Everything seems okay and I created a new rule and install it, it works. And I type "fw stat" it shows the policy name as well. HOST POLICY DATE localhost 2002-04-10-sim 10Apr2002 10:09:42 : [>hme0] [<hme0] [>hme1] [<hme1] But everytime after I reboot it. I can't connect to it again, either by telnet or via GUI client? As I am administer it remotely, I asked my officer to type "fw stat" at the console using "defaultfilter" only. Why? I thought it should used the old rule 2002-04-10-sim. And I asked him to type fwstart after fwstop, it gave the error and wont start. "You must setenv FWDIR before starting FireWall-1". Why I thought I have added in .profile and .cshrc. But if I type fwstart with my telnet session, there is no problem. I will sure he is using root account as me. Why he can fwstop but can't fwstart but I can do both here-- I saw a msg from Jayme Hoburn as follow.. What is mean by "have to push your policy from your management station"? What command to do it? >After the reboot you will have to push your policy from the management >station before you will be able >to telnet in again. Thanks Sim -----Original Message----- From: Jayme Hoburn [mailto:[email protected]] Sent: Tuesday, April 09, 2002 10:23 PM To: [email protected] Subject: Re: [FW-1] SOS!!. can't telnet after upgrading!! you should be able to have them run #fwstop then you should be able to telnet in and install your license, then reboot. After the reboot you will have to push your policy from the management station before you will be able to telnet in again. -----Original Message----- From: Sim, CT (Chee Tong) [mailto:[email protected]] Sent: Tuesday, April 09, 2002 2:45 AM To: [email protected] Subject: [FW-1] SOS!!. can't telnet after upgrading!! Hi.. I just upgraded remotely my remote branch checkpoint firewall from checkpoint 4.0 to 2000. First I fwstop the firewall, then I change the external IP which the license that tied to. Then I just perform the Upgrade using InstallU but I didn't install the license before reboot. After I reboot the interface come up, as I found I can ping the internal interface again. But I can't telnet !!!!!!!!!! What happen? It states could not open a connection to host: Connect Fail. Why? What is the reason causing from your experience? I thought the fw policy won't start before you install license?? I am not at the city and can't look at the console, can only ask people help to type command ================================================================== De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. ================================================================== The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. ================================================================== ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================================== De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. ================================================================== The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents herein and notify the sender immediately by return e-mail. ================================================================== ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|