RE: Altavista Firewall98 SP3 broken on DU40D

[Carl Friedberg <friedberg () exs esb com>]

For what it's worth, if I were installing a new firewall, AVFW98 would not
be my choice. Axent, I'll bet, is going to put it into "declining" status,
if they haven't already. After Digital changed it's mind about spinning off
AltaVista a few years ago, things started getting problematic.

Then, when Compaq acquired Digital, they sold off all of Alta Vista except
the firewall and tunnel, which ended up at Axent. The available support for
the nt version has not been great; and the AVFW just has a slew of problems.
Right now, I'm having a client with a problem relating to blacklisting not
functioning properly (even though it says it is blacklisting a client, it
doesn't). I don't want to enumerate, it's too much of a pain. Good luck.

-----Original Message-----
From: Van Bemmel, Berend [mailto:VanBemmel.Berend () kpmg nl]
Sent: Wednesday, December 15, 1999 6:08 AM
To: firewall-wizards () nfr net
Subject: Altavista Firewall98 SP3 broken on DU40D


Hello,

I have made a test install of Altavista Firewall 98 on a DU40D box (with and
without digital patch kit 5). After I install the firewall SP3 the screen
function on the ethernet devices is broken. The following message is shown
during boot:

  ioctl (SIOCSREENON): Operation not supported on socket
  Cannot set Screen Mode ON

This means that after aplying this service pack the machine no longer does
screening (packet filtering) and might even be acting as a router now since
the forwarding on the firewall is (and should be?) on. This is fatal for
security afcourse!

Regular support through compaq and axent gave no help at all on this issue
so far (altough is looks pretty serious to me). Has anybody else seen this
and/or solved it?

btw. I need SP3 because in SP2 the generic proxies are broken in a very bad
way (among some other stuff).

Cheers,

Berend W. van Bemmel


**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.mimesweeper.com
**********************************************************************