I recently had a problem with Nokia firewalls that others might like to avoid. I added a new 2-port card, configured addresses, pulled the new interfaces back to the SmartServer and tried to install a policy. I got errors that appeared to be a kernel memory allocation failure, i.e. :
FW-1: Attempting to create existing table: om_protected_group(181) FW-1: ld_commit: Attempting to commit unbound ld 0 FW-1: Warning: atomic loading failed during policy replacement Failed to load security policy: cannot allocate memory Failed to load security policy: kernel memory allocation failed on the Nokia, and an "insufficient memory" error on the Dashboard. After all sorts of attempts at fixing it, including a complete reinstall, it turned out that it was due to an address conflict (with an old "play" firewall that hadn't been used for ages) on one of the new ports. Because both addresses were RFC1918 which the SmartServer doesn't check for uniqueness (by default), there was no warning on policy verification. Deleting the old firewall object solved the problem. Regards, Dave Long The contents of this email are the opinions of the author and not necessarily those of ITNET plc. ****************************************************************************** Any opinions expressed in this email are those of the individual and not necessarily those of ITNET plc and or its subsidiaries. This email and any files transmitted with it, including replies and forwarded copies (which may contain alterations) subsequently transmitted from ITNET plc and or its subsidiaries, are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivering to the intended recipient, be advised that you have received this email in error and that any use is strictly prohibited. If you have received this email in error please notify ITNET Customer Service Centre by telephone on +44 (0)121 459 1155 or via email to [EMAIL PROTECTED], including a copy of this message. Please then delete this email and destroy any copies of it. ****************************************************************************** ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
