Re: [FW-1] Strange messages @ fwstart & fwstop

Subject: Re: [FW-1] Strange messages @ fwstart & fwstop

From: Sherif Michel Nehma <[email protected]>

Date: Mon, 15 Apr 2002 17:48:16 -0400

Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Title: Strange messages @ fwstart & fwstop

I had the same issue on a PDS appliance, running a hardened version of RedHat... the same sort of procedure worked for me! I cant say this way fixes the problem for permanently, but it seems to have worked for me - i only downloaded (via scp) a fresh copy of the objects.C file from the management server, overwriting the current, and upon restarting the FW, it fetched the policy without these errors (i got the exact same ones - it seems more to me like a Checkpoint bug)... and the error hasnt shown up since!

BTW, Thanks RP !

smn

----- Original Message -----

From: Roland Pintal

To: [email protected]

Sent: Monday, April 15, 2002 4:01 PM

Subject: Re: [FW-1] Strange messages @ fwstart & fwstop

I don't know if you got the first reply I did to this question but here I go again.

I have seen this problem on 4.1. It appears that some of the library files on the console go bad for some unknown reason.

What I did to fix it is to restore the lib directory from a backup previous to the start of the problem. Then proceed to overwrite all the file that show up in the error messages with the ones from the backup. Please make a full backup of you CP dir before doing this.

That will make it as a workaround but you should open a call with CP. Maybe there is a fix for it.

Later, RP.

-----Original Message----
From: Brendan Laws [mailto:[email protected]]
Sent: Tuesday, April 09, 2002 3:51 AM
To: [email protected]
Subject: [FW-1] Strange messages @ fwstart & fwstop

Hi people, I am hoping someone may have seen this before and know a fix...

Nokia IP330 - IPSO3.4.1FCS10

I am unable to connect to the box to edit the fw policy via the GUI - it is unable to contact the server.

When I jump on the console and issue and fwstop or a fwstart I get this info on screen ...

FireWall-1: Starting fwd
FireWall-1: Starting fwm (Remote Management Server)

FireWall-1: Fetching Security Policy from localhost
Failed to load objects in setup.C:
"setup.C", line 26: ERROR: Cannot use <ClntAuthDefault::Auth>: Not in Scope

Failed to load objects in wellfleet.C:
"wellfleet.C", line 93: ERROR: Cannot use <::accept>: Not in Scope

Trying to fetch Security Policy from localhost:

Installing Security Policy fw01-270202-01 on all.all@fw01
Using external interface 'eth-s2p1c0'
FW-1: setting external interface to eth-s2p1c0
Apr 9 17:19:54 fw01 [LOG_CRIT] kernel: FW-1: setting external interface to eth-s2p1c0
Fetching Security Policy from localhost succeeded

FireWall-1: Starting cpmad (Malicious Activity Detection)
FireWall-1 started

From here the fw seems to start and traffic passes through it without a problem however I am unable to connect via the GUI to manage the box:(

Any ideas would be much welcomed!:)

Cheers

Brendan
----- This message was scanned by AT&T Canada IES (Security Provisioning) for viruses. This protection does not ensure this message is virus free, however every precaution possible has been taken on our part.