[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Log query - probably dumb question
[ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1") 53 lines. ]
[ Unable to print this part. ]
[ The following text is in the "iso-8859-1" character set. ]
[ Your display is set for the "US-ASCII" character set. ]
[ Some characters may be displayed incorrectly. ]
Paul,
The rule you mentioned is currently enabled in the security policy, so
normally the firewalls dont have any problem logging back to the firewall
module. Occasionally there has been a problem when the log server was
down and I guess these logs are written to locally when this happens.
I noticed when I was on the remote firewall that the logs I mentioned
below have over a period of time grown fairly large and am not sure how I
remove them. Do I have to stop the firewall service (fwstop) and then
just delete them and are new files automatically created if i do this?
Thanks....Peter.
-----Original Message-----
From: Paul DeHerrera [mailto:paul.deherrera@lsbc.com]
Sent: Tuesday, 22 August 2000 16:13
To: 'Peter Schwalger'
Subject: RE: [FW1] Log query - probably dumb question
Add a rule at the top of the rulebase that has all firewalls as the
source and destination, service = FW1, action = accept.
-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On
Behalf Of Peter Schwalger
Sent: Monday, August 21, 2000 9:02 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] Log query - probably dumb question
Hi,
Can someone please answer the following query for me.
I have three firewalls and one maangement module.
Logging is back to the management module however when the
remote firewalls cannot communicate with the management
module I guess it will log locally.
I have noticed that the following files (fw.log0,
fw.alog0,fw.logprt0 and asmtpd.log) on my remote firewalls
are all fairly sizeable.
How do I purge these ? I have a script that automates
logswitches daily on the Management module but am unsure
about what / how i should be managing these files on the
remote firewalls.
Thanks, Peter.
|