Hi Olivier,
if the entry in gui-clients is correct and the GUI may connect to the
Firewall - there seems after your description only one question: Is the
fwm running? If not, try to start it with the fwstart command and have
a look into the syslog. After a successful start you can unload the loaded
rulebase with "fw unload localhost".
You can also load a policy "by hand" using the command
fw load "rulebasename" localhost (rulebasename
may be .pf or .W)
This command you can execute remotely using ssh (better not with telnet
;-) or directly at the console.
Hope it helps,
best regards,
Matthias
http://www.fw-1.de
Olivier GUILLEMIN wrote:
Hi Matthias,firstly
thanks for your answer...we
are not using a distributed architecture, the management module and the
firewall are on the same machine (we work with the Nokia solution)We
tried to uninstall the policy from this firewall with the "fw unload" command
but we got a message telling that we do not have the permission to do it...can
this command only be entered remotely or is it necesary to be conected
by console to the firewall?Do
you think that it's possible to start the firewall without any rules using
the command mode.Thanks.Best
Regards
--
AERAsec Network Services and Security GmbH
Wagenberger Straße 1
D-85662 Hohenbrunn, Germany
http://www.aerasec.de
|