[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Log query - probably dumb question




    [ Part 1, Text/PLAIN (charset: ISO-8859-1 "Latin 1")  53 lines. ]
    [ Unable to print this part. ]

    [ The following text is in the "iso-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Paul,
 
The rule you mentioned is currently enabled in the security policy, so
normally the firewalls dont have any problem logging back to the firewall
module. Occasionally there has been a problem when the log server was
down and I guess these logs are written to locally when this happens. 
 
I noticed when I was on the remote firewall that the logs I mentioned
below have over a period of time grown fairly large and am not sure how I
remove them. Do I have to stop the firewall service (fwstop) and then
just delete them and are new files automatically created if i do this?
 
Thanks....Peter. 
 
      -----Original Message-----
      From: Paul DeHerrera [mailto:paul.deherrera@lsbc.com]
      Sent: Tuesday, 22 August 2000 16:13
      To: 'Peter Schwalger'
      Subject: RE: [FW1] Log query - probably dumb question

Add a rule at the top of the rulebase that has all firewalls as the
source and destination, service = FW1, action = accept.
-----Original Message-----
From: owner-fw-1-mailinglist@lists.us.checkpoint.com
[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On
Behalf Of Peter Schwalger
Sent: Monday, August 21, 2000 9:02 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] Log query - probably dumb question

      Hi,
 
Can someone please answer the following query for me.
 
I have three firewalls and one maangement module.
 
Logging is back to the management module however when the
remote firewalls cannot communicate with the management
module I guess it will log locally.
 
I have noticed that the following files (fw.log0,
fw.alog0,fw.logprt0 and asmtpd.log) on my remote firewalls
are all fairly sizeable.
 
How do I purge these ?  I have a script that automates
logswitches daily on the Management module but am unsure
about what / how i should be managing these files on the
remote firewalls.
 
Thanks,     Peter.