topic Re: How do recreate masters file ? in General Topics

How do recreate masters file ?

nflnetwork29 — Fri, 20 Jan 2023 17:33:06 GMT

I'm trying to follow sk146112 however my masters file will not update . is there any way i can recreate this file ?

I've tried everything . please advise.

Ruining R81.10 Take 81

Re: How do recreate masters file ?

the_rock — Fri, 20 Jan 2023 17:53:36 GMT

You need to follow sk at the bottom.

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk102712

Re: How do recreate masters file ?

nflnetwork29 — Fri, 20 Jan 2023 17:58:44 GMT

Symptoms

$FWDIR/conf/masters file on Security Gateway was modified manually. However, this file is overwritten during each policy installation.

just want to say that it does not appear that my masters file is being overwritten ....

ive modified the masters file but when i run the following for example "tcpdump -nnei any port 257"

it does not reflect these changes

i tried to delete the file but it does not allow me to do that

Re: How do recreate masters file ?

the_rock — Fri, 20 Jan 2023 18:03:39 GMT

The link I gave gives steps to preserve manual changes. Isnt that what you want to achieve?

Re: How do recreate masters file ?

nflnetwork29 — Fri, 20 Jan 2023 18:04:39 GMT

that is working. i have no problems with the masters file being overwritten

the problem is that its still not working .

Re: How do recreate masters file ?

the_rock — Fri, 20 Jan 2023 18:08:16 GMT

Sorry, not trying to be difficult, but what is NOT working? Firewalls are not logging to mgmt server or something else? Can you provide content of masters file?

Re: How do recreate masters file ?

PhoneBoy — Fri, 20 Jan 2023 20:24:54 GMT

When you say "tried everything" what precise steps did you take?
What result did you expect?
What happened instead?
Pretty sure modifying this file requires a cprestart, or at the very least a policy install action.

A better question is: why are you modifying this file in the first place?
There is generally ways to accomplish what this file does via SmartConsole configuration.

Re: How do recreate masters file ?

nflnetwork29 — Fri, 20 Jan 2023 20:52:39 GMT

HI @PhoneBoy

Because my MDM and MDLM are external to the gateway in this scenario.

We are using static NAT on the mgmt. and LOG objects.

The gateway is sending logs tcp/257 to the private ip of the MDM and MDLM. This is not going to ever work . It HAS to be the NAT'd IP address (Public IP)

That being said i got it working . I created a dummy object in smart consoled and used that for the logging destination . its working .

Re: How do recreate masters file ?

PhoneBoy — Fri, 20 Jan 2023 22:55:03 GMT

The Dummy Object workaround used to be documented here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk100583
It is still listed in the internal comments, but it shouldn't be necessary in current versions...