Re: Unable to update fw1 objects

[Jovanny Saravia <jovanny.saravia () attla com>]

In-Reply-To: <20030205091821.GA2441 () staflaptop antw the-ecorp com>

Hi to all,

About the problem in the FW-1. I had the same problem with NG FP2

"The changes could not be saved. Please make sure that all Firewall-1 
services are up and running. For more information use the Status Manager 
application"

I checked and I see that I had full the filesystem /var

I cleaned and then stop/start the Firewall, and it works.

Maybe this is the same problem for you ?

Rgds,

Jovanny Saravia
AT&T Latin America
Management and Security Engineer


> Received: (qmail 18964 invoked from network); 5 Feb 2003 11:57:55 -0000
> Received: from honor.trusecure.com (65.202.253.137)
>  by mail.securityfocus.com with SMTP; 5 Feb 2003 11:57:55 -0000
> Received: from honor.trusecure.com (localhost.localdomain [127.0.0.1])
>       by honor.trusecure.com (Postfix) with ESMTP
>       id E64D27399; Wed,  5 Feb 2003 06:23:23 -0500 (EST)
> Delivered-To: firewall-wizards () honor icsalabs com
> Received: from staflaptop (uu212-190-144-165.unknown.uunet.be 
[212.190.144.165])
>       by honor.trusecure.com (Postfix) with ESMTP id 8FCA17336
>       for <firewall-wizards () honor icsalabs com>; Wed,  5 Feb 2003 
03:51:38 -0500 (EST)
> Received: by staflaptop (Postfix, from userid 1005)
>       id ACA867FE7; Wed,  5 Feb 2003 10:18:22 +0100 (CET)
> To: firewall-wizards () honor icsalabs com
> Subject: Re: [fw-wiz] Unable to update fw1 objects
> Message-ID: <20030205091821.GA2441 () staflaptop antw the-ecorp com>
> Mail-Followup-To: staf.wagemakers () belgacom net,
>       firewall-wizards () honor icsalabs com
> References: <0D314900A851AB44B6DA03226068EE3602A29209 () ercex06 erc rl gov>
> Mime-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Disposition: inline
> In-Reply-To: <0D314900A851AB44B6DA03226068EE3602A29209 () ercex06 erc rl gov>
> User-Agent: Mutt/1.3.28i
> From: staf.wagemakers () belgacom net (staf wagemakers)
> Sender: firewall-wizards-admin () honor icsalabs com
> Errors-To: firewall-wizards-admin () honor icsalabs com
> X-BeenThere: firewall-wizards () honor icsalabs com
> X-Mailman-Version: 2.0.11
> Precedence: bulk
> List-Help: <mailto:firewall-wizards-request () honor icsalabs com?
subject=help>
> List-Post: <mailto:firewall-wizards () honor icsalabs com>
> List-Subscribe: <http://honor.icsalabs.com/mailman/listinfo/firewall-
wizards>,
>       <mailto:firewall-wizards-request () honor icsalabs com?
subject=subscribe>
> List-Id: Firewall Wizards Security Mailing List <firewall-
wizards.honor.icsalabs.com>
> List-Unsubscribe: <http://honor.icsalabs.com/mailman/listinfo/firewall-
wizards>,
>       <mailto:firewall-wizards-request () honor icsalabs com?
subject=unsubscribe>
> List-Archive: <http://honor.icsalabs.com/pipermail/firewall-wizards/>
> X-Original-Date: Wed, 5 Feb 2003 10:18:21 +0100
> Date: Wed, 5 Feb 2003 10:18:21 +0100
>
> On Tue, Feb 04, 2003 at 08:29:32AM -0800, Chapman, Justin T wrote:
> > > I'm not sure this has something to do with it but I found the following
> > > error messages in /var/adm/messages:
> > >
> > > Feb  4 10:12:51 fw-ecorp fw: [ID 976039 kern.notice]
> > > fwlddist_adjust_buf: record too big for sync. existing space=7f4,
> > > requesting 804 more. max=800
> >
> > I did a quick search on google (http://www.google.com) for the error and
> > came up with the following possible solution (original post at
> > http://www.firewall-1.org/2002-11/msg00733.html):
> >
> > looks like an interface-speed problem.
> >
> > try to set the interface-speed and duplex of all interfaces (which 
belongs
> > together)
> > to the same value. also include the switches.
>
> I've corrected the interface-speed/duplex on an interface and the error
> message /var/adm/messages is gone.
>
> Apparently this error message was not related to my problem. I'm still 
unable 
> to modify the policy :-( 
>
> If I try to install the new policy I get:
>
>  The changes could not be saved.
>  Please make sure that all Firewall-1 services are up and running.
>  For more information use the SmartView Status application.
>
> "smart"view status report that everything is "ok", as far as I can see
> all fw1 daemons are running...
>
> -- 
> Staf Wagemakers
>
> email:          staf () patat org
> homepage:       http://staf.patat.org
>
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards