On Tue, Apr 01, 2003 at 01:44:00AM +0300, Orr, Paul wrote:

> We are setting up a script to backup our NG firewall.  Once we run "fw
> stop" to take the firewall off-line we can backup the server without
> having to worry about any open files.  The problem is with the firewall
> stopped, the NICs accept all traffic.

How about the recommended way mentioned in FW-1/VPN-1 documentation,
'cpstop -fwflag -proc' that shuts down daemons/services, but leaves
the current ruleset in the memory so it's applied to all the traffic
going through the machine.


--
Hannu Liljemark  |  Appelsiini Finland Oy  |  http://appelsiini.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to