Re: [FW-1] Strange messages @ fwstart & fwstop

Subject: Re: [FW-1] Strange messages @ fwstart & fwstop

From: Roland Pintal <[email protected]>

Date: Mon, 15 Apr 2002 16:01:02 -0400

Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Title: Strange messages @ fwstart & fwstop

I don't know if you got the first reply I did to this question but here I go again.

I have seen this problem on 4.1. It appears that some of the library files on the console go bad for some unknown reason.

What I did to fix it is to restore the lib directory from a backup previous to the start of the problem. Then proceed to overwrite all the file that show up in the error messages with the ones from the backup. Please make a full backup of you CP dir before doing this.

That will make it as a workaround but you should open a call with CP. Maybe there is a fix for it.

Later, RP.

-----Original Message-----
From: Brendan Laws [mailto:[email protected]]
Sent: Tuesday, April 09, 2002 3:51 AM
To: [email protected]
Subject: [FW-1] Strange messages @ fwstart & fwstop

Hi people, I am hoping someone may have seen this before and know a fix...

Nokia IP330 - IPSO3.4.1FCS10

I am unable to connect to the box to edit the fw policy via the GUI - it is unable to contact the server.

When I jump on the console and issue and fwstop or a fwstart I get this info on screen ...

FireWall-1: Starting fwd
FireWall-1: Starting fwm (Remote Management Server)

FireWall-1: Fetching Security Policy from localhost
Failed to load objects in setup.C:
"setup.C", line 26: ERROR: Cannot use <ClntAuthDefault::Auth>: Not in Scope

Failed to load objects in wellfleet.C:
"wellfleet.C", line 93: ERROR: Cannot use <::accept>: Not in Scope

Trying to fetch Security Policy from localhost:

Installing Security Policy fw01-270202-01 on all.all@fw01
Using external interface 'eth-s2p1c0'
FW-1: setting external interface to eth-s2p1c0
Apr 9 17:19:54 fw01 [LOG_CRIT] kernel: FW-1: setting external interface to eth-s2p1c0
Fetching Security Policy from localhost succeeded

FireWall-1: Starting cpmad (Malicious Activity Detection)
FireWall-1 started

From here the fw seems to start and traffic passes through it without a problem however I am unable to connect via the GUI to manage the box:(

Any ideas would be much welcomed!:)

Cheers

Brendan

-----
This message was scanned by AT&T Canada IES (Security Provisioning) for
viruses. This protection does not ensure this message is virus free, however
every precaution possible has been taken on our part.