topic Re: changing "masters" file on SMB in Spark Firewall (SMB)

changing "masters" file on SMB

marcinw — Fri, 24 Apr 2020 11:21:33 GMT

Hi,

I've changed "masters" file in $FWDIR/conf/ on SMB 1500 checkpoint, of course every time SMB downloads policy from SMS changed it. On gateway firewall I can use GuiDBedit to change this behaviour on gateway firewall , but how to change it on SMB ?

Re: changing "masters" file on SMB

PhoneBoy — Sun, 26 Apr 2020 02:41:18 GMT

What's the precise reason you need to change it?

Re: changing "masters" file on SMB

G_W_Albrecht — Mon, 27 Apr 2020 09:50:49 GMT

Easy: See sk102712: $FWDIR/conf/masters file on Security Gateway is overwritten during each policy installation

Re: changing "masters" file on SMB

G_W_Albrecht — Mon, 27 Apr 2020 10:17:03 GMT

The oldest trick in such cases from the book is to limit access rights so overwrite will not be possible 8).

Re: changing "masters" file on SMB

sarshar — Fri, 03 Mar 2023 13:42:00 GMT

Hey Albrecht,

Today I realized a couple of 1550s stopped logging.

They are running R81.10 and those two firewalls are in a VPN community along with another identical firewall that doesn't have the logging issue.

Traditionally, modified the masters file to replace the hostname of the CPM with its external IP address, also added the CPM with the ext IP to the /etc/hosts file and froze the define_logging_servers and use_loggers_and_masters by setting them to "false" in GUIEDEDIT

Then saved the changes to the DB and opened SmartConsole R81.20 and pushed the policies, the content of the masters file got overwritten therefore the logging issue didn't get resolved.

It might be useful to mention I faced this issue with every firewall we recently upgraded (replaced the appliance), which includes the 3000 series with R81.20 T631

Your kind advice on this will be appreciated, I cannot troubleshoot other connectivity issues without logging.

Regards,

Sarshar Dadashzadeh

Re: changing "masters" file on SMB

PhoneBoy — Sat, 04 Mar 2023 00:40:18 GMT

If you want to ensure masters isn't overwritten, try setting the immutable flag on the masters file in expert mode.
e.g. chattr +i $FWDIR/conf/masters

How persistent this change is across upgrades is not known.

Re: changing "masters" file on SMB

G_W_Albrecht — Sat, 04 Mar 2023 09:18:20 GMT

Better consult with TAC ! That should not be needed and 1 working but two identical units not needs finding the cause !

Re: changing "masters" file on SMB

sarshar — Mon, 06 Mar 2023 17:07:54 GMT

Contacted TAC and they resolved it by sk171055

Re: changing "masters" file on SMB

G_W_Albrecht — Mon, 06 Mar 2023 21:56:38 GMT

Very good!

topic Re: changing &quot;masters&quot; file on SMB in Spark Firewall (SMB)

changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

Re: changing "masters" file on SMB

topic Re: changing "masters" file on SMB in Spark Firewall (SMB)