Re: [fw-wiz] Unable to update fw1 objects

From: Jovanny Saravia (jovanny.saravia@attla.com)
Date: 03/31/03 

From: Jovanny Saravia <jovanny.saravia@attla.com>
To: firewall-wizards@nfr.net
Date: 31 Mar 2003 15:57:08 -0000
('binary' encoding is not supported, stored as-is) In-Reply-To: <20030205091821.GA2441@staflaptop.antw.the-ecorp.com>

Hi to all,

About the problem in the FW-1. I had the same problem with NG FP2

"The changes could not be saved. Please make sure that all Firewall-1
services are up and running. For more information use the Status Manager
application"

I checked and I see that I had full the filesystem /var

I cleaned and then stop/start the Firewall, and it works.

Maybe this is the same problem for you ?

Rgds,

Jovanny Saravia
AT&T Latin America
Management and Security Engineer

>Received: (qmail 18964 invoked from network); 5 Feb 2003 11:57:55 -0000
>Received: from honor.trusecure.com (65.202.253.137)
> by mail.securityfocus.com with SMTP; 5 Feb 2003 11:57:55 -0000
>Received: from honor.trusecure.com (localhost.localdomain [127.0.0.1])
> by honor.trusecure.com (Postfix) with ESMTP
> id E64D27399; Wed, 5 Feb 2003 06:23:23 -0500 (EST)
>Delivered-To: firewall-wizards@honor.icsalabs.com
>Received: from staflaptop (uu212-190-144-165.unknown.uunet.be
[212.190.144.165])
> by honor.trusecure.com (Postfix) with ESMTP id 8FCA17336
> for <firewall-wizards@honor.icsalabs.com>; Wed, 5 Feb 2003
03:51:38 -0500 (EST)
>Received: by staflaptop (Postfix, from userid 1005)
> id ACA867FE7; Wed, 5 Feb 2003 10:18:22 +0100 (CET)
>To: firewall-wizards@honor.icsalabs.com
>Subject: Re: [fw-wiz] Unable to update fw1 objects
>Message-ID: <20030205091821.GA2441@staflaptop.antw.the-ecorp.com>
>Mail-Followup-To: staf.wagemakers@belgacom.net,
> firewall-wizards@honor.icsalabs.com
>References: <0D314900A851AB44B6DA03226068EE3602A29209@ercex06.erc.rl.gov>
>Mime-Version: 1.0
>Content-Type: text/plain; charset=us-ascii
>Content-Disposition: inline
>In-Reply-To: <0D314900A851AB44B6DA03226068EE3602A29209@ercex06.erc.rl.gov>
>User-Agent: Mutt/1.3.28i
>From: staf.wagemakers@belgacom.net (staf wagemakers)
>Sender: firewall-wizards-admin@honor.icsalabs.com
>Errors-To: firewall-wizards-admin@honor.icsalabs.com
>X-BeenThere: firewall-wizards@honor.icsalabs.com
>X-Mailman-Version: 2.0.11
>Precedence: bulk
>List-Help: <mailto:firewall-wizards-request@honor.icsalabs.com?
subject=help>
>List-Post: <mailto:firewall-wizards@honor.icsalabs.com>
>List-Subscribe: <http://honor.icsalabs.com/mailman/listinfo/firewall-
wizards>,
> <mailto:firewall-wizards-request@honor.icsalabs.com?
subject=subscribe>
>List-Id: Firewall Wizards Security Mailing List <firewall-
wizards.honor.icsalabs.com>
>List-Unsubscribe: <http://honor.icsalabs.com/mailman/listinfo/firewall-
wizards>,
> <mailto:firewall-wizards-request@honor.icsalabs.com?
subject=unsubscribe>
>List-Archive: <http://honor.icsalabs.com/pipermail/firewall-wizards/>
>X-Original-Date: Wed, 5 Feb 2003 10:18:21 +0100
>Date: Wed, 5 Feb 2003 10:18:21 +0100
>
>On Tue, Feb 04, 2003 at 08:29:32AM -0800, Chapman, Justin T wrote:
>> >
>> >I'm not sure this has something to do with it but I found the following
>> >error messages in /var/adm/messages:
>> >
>> >Feb 4 10:12:51 fw-ecorp fw: [ID 976039 kern.notice]
>> >fwlddist_adjust_buf: record too big for sync. existing space=7f4,
>> >requesting 804 more. max=800
>>
>> I did a quick search on google (http://www.google.com) for the error and
>> came up with the following possible solution (original post at
>> http://www.firewall-1.org/2002-11/msg00733.html):
>>
>> looks like an interface-speed problem.
>>
>> try to set the interface-speed and duplex of all interfaces (which
belongs
>> together)
>> to the same value. also include the switches.
>>
>
>I've corrected the interface-speed/duplex on an interface and the error
>message /var/adm/messages is gone.
>
>Apparently this error message was not related to my problem. I'm still
unable
>to modify the policy :-(
>
>If I try to install the new policy I get:
>
> The changes could not be saved.
> Please make sure that all Firewall-1 services are up and running.
> For more information use the SmartView Status application.
>
>"smart"view status report that everything is "ok", as far as I can see
>all fw1 daemons are running...
>
>--
>Staf Wagemakers
>
>email: staf@patat.org
>homepage: http://staf.patat.org
>
>_______________________________________________
>firewall-wizards mailing list
>firewall-wizards@honor.icsalabs.com
>http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
>
_______________________________________________
firewall-wizards mailing list
firewall-wizards@honor.icsalabs.com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards