Error "FW-1 IP xxx the fw-1 driver could not be informed"

[BarryStiefel]

Error "FW-1 IP xxx the fw-1 driver could not be informed"

FW-1 NG FP3 or NG AI on Solaris 8 or Solaris 9. The Solaris host OS is a minimal install which has been hardened by Sun's jass tool.



Console and /var/adm/messages keep showing this error: fwip: [ID 719488 kern.notice] FW-1 IP: An interface configuration command has been issued, but the FW-1 driver could not be informed.This may be due to the driver being removed from the system, or a failure of the fw bootd process.If this message keeps appearing afterrebooting the machine, please contact Check Point technical support.This message can be safely ignored inthe following cases:FW-1 has just been uninstalled or upgraded and has not been rebooted yetorThe machine is now in single user mode.This message will be suppressed for the next 127 times.

One possible cause of this error message is the hardening jass does to syslogd. jass configures syslogd to no longer accept logs from remote machines.

To resolve this error:

On Solaris 8:

• vi /etc/init.d/syslog and remove the option '-t' from the line that calls /usr/sbin/syslogd (last line in the 'start' section before the closing 'fi')

On Solaris 9:

• vi /etc/default/syslogd and change LOG_FROM_REMOTE from NO to YES

On both Solaris 8 and 9, restart syslogd: # cd /etc/init.d# ./syslog stop# ./syslog start

If you wish to be doubly sure this worked, reboot your firewall, and verify that the error no longer occurs during boot.

-- PhoneBoy - 05 Jan 2004

FAQForm FAQs.Class: TroubleshootingFAQs FAQs.OS: OsSolaris FAQs.Version: