NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] cannot get address of host <hostname>



Found it.

These messages are generated when a rule has 'Install on' value which does not
match the firewall the rule-set gets installed on.  e.g. when some object has
NAT properties which only apply to 1 firewall, the NAT rules will show up in all
rule-sets on this management server.

Nico

On Wed, Jun 12, 2002 at 05:02:25PM +0200, Nico De Ranter wrote:
> Hi,
>
> I'm running NG FP1 on Solaris (Sparc). I have a number of firewalls
> which are all managed from the same management server. When I try to
> install a policy on a server (called 'caffreys') I get messages like:
>
> ruleset-1.W: Security Policy Script generated into ruleset-1.pf
> ruleset-1:
> "/opt/CPfw1-50/conf/ruleset-1.pf", line 3696: WARNING: cannot get address of host <charon>
> "/opt/CPfw1-50/conf/ruleset-1.pf", line 3696: WARNING: will not create a value table for <target_list25>
> "/opt/CPfw1-50/conf/ruleset-1.pf", line 3697: WARNING: cannot get address of host <budweiser>
> "/opt/CPfw1-50/conf/ruleset-1.pf", line 3697: WARNING: will not create a value table for <target_list26>
> Compiled OK.
>
> 'charon' and 'budweiser' are also firewalls.
> Installing on different firewalls gives different 'cannot get address of host ...'
> messages.
>
> All firewalls have objects on the management server with the correct
> ip-address and names. I checked /etc/hosts on the firewall to make sure
> they others are listed with the proper ip-addresses.
>
> Any idea why this message is generated and what I can do about it (does it
> harm anything?)
>
> Nico
>
>
> ---------------------------------------------------------
>  "It has been said that there are only two businesses that
>   refer to customers as users: illegal drug trade and
>                the computer industry."
> ---------------------------------------------------------
> Nico De Ranter
> Senior System Administrator
> Sony Service Center (SDCE/VPE-B)
> Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
> 1130 Brussel (Bruxelles), Belgium, Europe, Earth
> Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
> e-mail: [email protected]
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
---------------------------------------------------------
 "It has been said that there are only two businesses that
  refer to customers as users: illegal drug trade and
               the computer industry."
---------------------------------------------------------
Nico De Ranter
Senior System Administrator
Sony Service Center (SDCE/VPE-B)
Sint Stevens Woluwestraat 55 (Rue de Woluwe-Saint-Etienne)
1130 Brussel (Bruxelles), Belgium, Europe, Earth
Telephone: +32 2 724 86 41 Telefax: +32 2 726 26 86
e-mail: [email protected]

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.