The policy file is probably no help.  However, a copy of the working files
is saved on the firewall as part of the policy install.  You MIGHT be able
to get an adequate copy of the pre-upgrade objects from
$FWDIR/database/objects.C.

See http://www.phoneboy.com/fw1/faq/0149.html for more about fw confmerge


Tim
 
-- 
Timothy Frost                   mailto:[EMAIL PROTECTED]
EDS New Zealand                 Fax: +64-4-495-0473
8 Gilmer Terrace                        Phone: +64-4-495-0504
P O Box 3647
Wellington
New Zealand

> -----Original Message-----
> From: Hero Idema [SMTP:[EMAIL PROTECTED]]
> Sent: Tuesday, December 19, 2000 4:13 AM
> To:   [EMAIL PROTECTED]
> Subject:      [FW1] Recovering empty rulebase from policy file
> 
> 
> Hello,
> 
> recently I upgraded my firewall (FW-1 4.0 on Solaris 2.6) to SP7. The only
> problem is that I lost my objects.C during the process. My rulebase is
> empty. I have the rulebase.W file but when using fwm -g rulebase.W it
> cannot find my objects.
> It seems that it didn't merge the objects.C file but just overwrote it.
> And (yes blame me for being stupid) I didn't have a backup of the
> Objects.C file so I can't merge it by hand.
> 
> I do however have a working policy file (.pf) which the filewall is using
> now. Is it possible to regenerate a rule base (or a least and objects.C
> file) with the policy file? 
> 
> The most frustrating is that I can see and open the current policy the
> firewall is using now by clicking on the 'show policy' button in the GUI
> at file->open. But I cannot modify it or save it.
> 
> Any ideas?
> 
> Regards,
> Hero Idema
> [EMAIL PROTECTED]
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to