[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] Strange problem with Firewall-1 processes going away





      I recently set up a manual ipsec VPN link between firewall-1 4.0
      running on solaris 2.6 and a Sonicwall VPN box.

      I'm having the strangest problem. I can ping hosts behind the 
      Sonicwall box just fine (both firewall-1 and the sonicwall are
      doing NAT). I see in the log that the pings are being encrypted.

      If I ftp to a NT box behind the Sonicwall I get a connect to the 
      port but it hangs after the "username" stage. From the logs everything
      looks fine. The next occurance of a ftp to the NT box behind the 
      Sonicwall just hangs, but pings still work. I noticed that my logging
      stopped working as well. In looking at the firewall with "ps" I notice
      that a number of deamons have died: fwd, alertd, isakmpd and mdq
      are all no longer running. I do not see anything in the system or
      firewall logs as to why they died. A reboot of the system solves
      the problem until I try the ftp to the NT box behind the Sonicwall
      again.

      System is very lightly loaded at the moment, I already added 
      set fw:fwhmem=0x500000 to /etc/system. Firewall-1 is running on
      a Ultra 5 with 512MB of memory.

      Anybody have any bright ideas?  
      
-- 
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Paul R Lavoie                                     Paul.Lavoie@Software.com
Network Services Manager			  Voice:(781) 674-0100 x275 
Software.com.                                     Fax:  (781) 674-1080 
10 Maguire Road, Lexington Ma 02421 
Software.com, Inc. The Internet Infrastructure Company (tm)
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================