[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Installing FW-1 on Linux
Title: RE: [FW1] Installing FW-1 on Linux
I had read the article about the Not in Scope message. Unfortunately the problem exists in some of the files in the Lib directory and have nothing to do with the rulebase because I get the same problem with the default rulebase. What I need to find out is what is calling these files. It would appear that FWSTOP and FWSTART are the scripts that want to use these files but I haven't had the chance to delve into either yet(I will probably do it tommorrow).
I have the option of simply recreating the objects.c and rulebase but given I have about 50 rules, 30 NATs, and 100+ objects including multiple VPN tunnell objects I am loathe to do this.
I am not even certain if this problem is specific to Linux or simply a problem of going from NT to *Nix.
-----Original Message-----
From: Robert MacDonald [mailto:[email protected]]
Sent: Tuesday, October 31, 2000 4:07 PM
To: [email protected]; [email protected]
Subject: RE: [FW1] Installing FW-1 on Linux
Now is when I wish I had many more boxes to test
with. I re-read your first post and below are some
links you may want to read through.
I recently had to reinstall on the same system,
and I used a backup copy of the files to replace
the generic ones. I ran into similar errors and by
editing the suspect files, I was able to get back to
where I left off.
Try this. Read the following as they may really help
you. Also, if they don't, you may have to do some
manual editing to finish. Don't give up!
http://www.phoneboy.com/fw1/faq/0120.html
http://www.phoneboy.com/fw1/faq/0196.html
Robert
>>> <[email protected]> 10/31/00 3:39:12 PM >>>
>Well I have tried it a number of ways. I first tried it by moving the
>entire conf directory. Then I tried just the objects file. Then I tried
>everything but the rules. Always the same error message.
>
>There really isn't much documentation available about porting a management
>station from one platform to another.
>
>> -----Original Message-----
>> From: Robert MacDonald [mailto:[email protected]]
>> Sent: Tuesday, October 31, 2000 2:08 PM
>> To: [email protected]; [email protected]
>> Subject: RE: [FW1] Installing FW-1 on Linux
>>
>>
>> Gibson,
>>
>> After the install on RH, what files are you porting? Other
>> than ripping out ^M's, what else are you doing? Are these
>> the only files it currently complaining about?
>>
>> Robert
>>
>> >>> <[email protected]> 10/31/00 1:50:25 PM >>>
>> >My NT Management station works fine. I can even get the
>> Linux box up using
>> >the default objects.C file. But once I change to my
>> objects.C file I get
>> >these error messages. What's weird is there is no reference
>> to wellfleet in
>> >the objects.C file.
>> >
>> >> -----Original Message-----
>> >> From: Robert MacDonald [mailto:[email protected]]
>> >> Sent: Tuesday, October 31, 2000 11:27 AM
>> >> To: [email protected]; [email protected]
>> >> Subject: Re: [FW1] Installing FW-1 on Linux
>> >>
>> >>
>> >>
>> >> Gibson,
>> >>
>> >> Can you get the firewall to work, before you port the
>> >> NT config's over? Make sure this works first, then
>> >> work on any porting issues.
>> >>
>> >> Robert
>> >> (p.s. Would this make you [email protected] ?)
>> >>
>> >> - -
>> >> Robert P. MacDonald, Network Engineer
>> >> e-Business Infrastructure
>> >> G o r d o n F o o d S e r v i c e
>> >> Voice:email: [email protected]
>> >>
>> >> >>> <[email protected]> 10/30/00 10:12:10 PM >>>
>> >> >I have been trying, in vain, to get FW-1 to run under RH
>> >> 6.2. Everything
>> >> >installs properly but when I start the FW daemon I get
>> messages about
>> >> >various scope problems in the Setup.C and Wellfleet.C files.
>> >> >
>> >> >Can anyone tell me what the heck is the problem? I am
>> >> porting the conf
>> >> >files from an NT install but the Setup.C file is in the Lib
>> >> directory which
>> >> >I did not touch. I did remove the ^M characters from the
>> >> Objects.C file and
>> >> >even did a conf merge to no avail.
>> >> >
>> >> >Any insight would be appreciated.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
***********************************************************************
Gruntal & Co., L.L.C.'s e-mail system is for business purposes only.
Messages are not confidential. All e-mail may be reviewed by
authorized supervisors, compliance or internal audit personnel.
E-mail will be archived for at least three years and may be produced
to regulatory agencies or others with a legal right to access such
information. Gruntal will not accept trade order instructions via
e-mail. Please telephone your Account Executive to place trade orders.
Gruntal & Co., L.L.C.
***********************************************************************
