UNABLE TO UPDATE MY POLICY

[dooby12]

When i try changing/adding new rules, or making any general change on th FW, i get the message

The changes could not be saved. Please make sure that all Firewall-1 services
are up and running. For more information use the Status Manager application".


from voyager i can see this
/dev/wd0d 3567659 3550714 -268467 108% 704 867134 0% /var

can anyone help. ive tried saving the policy as a differnet name. but no luck. please help.

 

[dooby12]

ok ladies and gents.
i found that my \var dir was at 108%. not good
i cleared some of my very old log files. before i did this i also switched my current log file as it was also huge.
so now the disc space has come down to 68%.

But.. when i try and make a change to my policy i get the same message when i install it.
also when i open the smartview tracker now i can see no log files ( i did not delete the log file i swithed or the current one), and no logs when i refresh.

im real scared now cos nothing is getting logged. but everything is working fine. ie. securemote users and ipsec.

will a restart cure this? i cant do this yet, have to wait out of hours.

thanks for any help.

 

[rn4it]

dooby12 are some threads that have cleanup scripts that will help manage that. here's an example that'll clear out the fw log files that are > 1 day, fw backup files > 8days and fw daily stats > a day.

"fwname"[admin]# more cleanup
! /bin/csh
#
# This file was created by Access 2 Networks.

http://www.access2networks.com

# The purpose of the file is to delete files that are old.
#
# The next line reads in environment variables for this session.
#
source /var/etc/pm_cshrc
setenv NAME `uname -n`

#
# The next line finds files in the /var/backup directory and
# deletes any files that are more than 5 days old.
# This is defined by the number after the +.
#
find /opt/CPfw1-50-04/log/"fwname"* -ctime +1 -exec rm {} \;
find /var/admin/"fwname"* -ctime +1 -exec rm {} \;
find /var/admin/Daily"fwname"* -ctime +1 -exec rm {} \;
find /var/backup/"fwname"* -ctime +8 -exec rm {} \;