Re: [FW-1] Running Cron job on Secure Platform AI

[David Crowfoot <Crowfoot.David@FW1-NOSPAMEV.STATE.AZ.US>]

Look at the changes that I made to your script below:





** Backup Script **

#! /bin/bash
CPDIR=/opt/CPshrd-50-04         <--- Added
export CPDIR                    <--- Added
FWDIR=/opt/CPfw1-50-04          <--- Added
export FWDIR                    <--- Added

CPDATE=`/bin/date +%m%d%y-%H%M` <--- Changed
LOGSERVER="IP of log server"
CPLOG=/var/cplog/CPBACKUP.LOG
CPTEMP=/tmp/cptemp.log

# Stop firewall services
/bin/cpstop_start                               <--- Changed
echo Stop FW
# Create new/overwrite scratch log file
echo *** > $CPTEMP
echo Stopping FW services: `date` >> $CPTEMP

# Backup all
/bin/backup_start all $CPDATE-Full tftp $LOGSERVER
echo Send $CPDATE-Full to $LOGSERVER
echo Sent Backup file to $LOGSERVER >> $CPTEMP

# Backup logs
cd $FWDIR/log
tar -cvf $CPDATE-Logs.tar .
echo Log tarball is: $CPDATE-Logs.tar
#pwd

# Check size of log file
LOGSIZE="`ls -l $FWDIR/log/$CPDATE-Logs.tar | awk '{print $5}'`"
echo Log tarball size: $LOGSIZE
echo Log tarball size: $LOGSIZE >> $CPTEMP

# Send log archive to LOGSERVER
tftp $LOGSERVER <<EOF
bin
put $CPDATE-Logs.tar
quit
EOF
echo Backup of Logfiles sent to $LOGSERVER >> $CPTEMP
mv $CPDATE-Logs.tar /var/cplog

# Restart firewall services
/bin/cpstart_start                              <--- Changed
echo Restart FW services
echo Restarting FW services: `/bin/date`  >> $CPTEMP    <--- Changed

# Append scratch log to main log file
cat $CPTEMP >> $CPLOG

# Transfer rolling log to tftp server
cd /var/cplog
cp CPBACKUP.LOG $CPDATE-BackupLog.log
tftp $LOGSERVER <<EOF
put $CPDATE-BackupLog.log
quit
EOF

rm -f $CPDATE-BackupLog.log
echo Rolling backup log transferred to $LOGSERVER

=================================================


Hope this helps,

Dave Crowfoot



Dave Crowfoot
ITS
Az Dept of Environmental Quality(Voice)(Fax)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================