RE: [FW1] Rules changing....

[Chilton Tim <tim.chilton@FW1-NOSPAMcapco.com>]

You need to ensure that the policy editor is not running and you are
supposed to stop the firewall before you edit the file

I always do it slightly differently since I want to minimise the outage.

Quit the policy editor
Edit the file
fwstop
Save the file
fwstart
Load the policy editor
Install the policy

This works fine for me 

HTH

Regards

Tim

-----Original Message-----
From: Kelly, John [mailto:John.Kelly@xpedior.com]
Sent: 12 January 2001 14:40
To: 'fw-1-mailinglist@lists.us.checkpoint.com'
Subject: [FW1] Rules changing....



When I edit the /conf/objects.c and change these lines (after an fwstop)on
the management console:
:userc_NAT (true) 
:userc_IKE_NAT (true) 

I then fwstart and reinstall the rulebase. All is well until I modify an
object and reinstall the policy. After that policy change, the objects.c
file is changed back to the defaults of 
:userc_NAT (false) 
:userc_IKE_NAT (false)

My management console is 4.1 SP2 on Solaris and the Firewall is 4.1 on the
Nokia platform.

Anyone seen this behavior and know how to stop it?

TIA
John


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

************************************************************************
The information in this email is confidential and is intended solely
for the addressee(s).
Access to this email by anyone else is unauthorised. If you are not
an intended recipient, you must not read, use or disseminate the
information contained in the email.
Any views expressed in this message are those of the individual sender,
except where the sender specifically states them to be the views of
The Capital Markets Company.

http://www.capco.com
***********************************************************************