Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 2 subscribers
  • Views 1479 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

5.018, packet filter rules gone

hdh
Before using this update I tried it on a test maskin.
Clean install of latest ISO, imported license  key, got updates 5.016 and 5.017.
Restored a backup from a running 5.017.
Ooops, all packet filter rules are gone, 0 entries.

Any idea?


This thread was automatically locked due to age.
Parents
  • 0
    Are the filters gone in the Webadmin? What is the output of PacketFilter/Advances/Current Packet Filter rules. What about your definitions,networks ... are they also gone?
    Please make a ps aufx on the shell and look for a service called confd. I think it is not running and so no objects are shown in the WebAdmin. To start the service just type '/etc/rc.d/confdaemon start'.

    /bagira
Reply
  • 0
    Are the filters gone in the Webadmin? What is the output of PacketFilter/Advances/Current Packet Filter rules. What about your definitions,networks ... are they also gone?
    Please make a ps aufx on the shell and look for a service called confd. I think it is not running and so no objects are shown in the WebAdmin. To start the service just type '/etc/rc.d/confdaemon start'.

    /bagira
Children
  • 0 in reply to bagira
    hi bagira,
    yes, filters are gone in the webadmin as well as definitions-network.
    If I compare the testmachines current packet filter rules with the working asl, only a few setting are the same.
    According to ps aufx and top, confd is running. I did restart it without any result.
    Do you know, where in the backup file I can check wether the information exists in the backup?
    Right now its not a big problem because its only a test machine, but if I need to restore then it will be a bigger problem.
    //hdh
  • 0 in reply to hdh
    Any errors in your mdw.log and contentfilter.log. In the file /etc/confd/storage.xml you find the objects like packetfilters and network definitions. You can search in this file for a definition which should appear in the Webadmin but does not.
  • 0 in reply to bagira
    I just compared different backups and find the storage.xlm in an older one. The new backups (did serveral) are missing this file as well as other files.

    We did change licens from enterprice to pro during this period of time.

    Filelist for older backup:
    \backup_20040703_011501.rar
    2004-07-01 14:17        folder        folder  etc
    2004-07-03 01:15        folder        folder  etc\wfe
    2004-04-06 10:27        folder        folder  etc\wfe\ipsec.d
    2004-01-03 14:44            11            11  etc\wfe\ipsec.d\ca_timestamp
    2004-05-24 09:47        folder        folder  etc\wfe\ipsec.d\ssl
    2002-03-07 04:41             0             0  etc\wfe\ipsec.d\ssl\index.txt.old
    2004-02-15 19:01          2490          2490  etc\wfe\ipsec.d\ssl\openssl-ipsec.cnf
    2004-01-03 14:51            98            98  etc\wfe\ipsec.d\ssl\index.txt
    2004-01-03 14:51        folder        folder  etc\wfe\ipsec.d\ssl\private
    2004-01-03 14:51             3             3  etc\wfe\ipsec.d\ssl\private\serial
    2004-01-03 14:51          7722          7722  etc\wfe\ipsec.d\ssl\private\01.pem
    2002-03-07 04:41             3             3  etc\wfe\ipsec.d\ssl\private\serial.old
    2004-07-03 01:15             0             0  etc\wfe\ipsec.d\ssl\private\CAcert.pem
    2004-07-03 01:15             0             0  etc\wfe\ipsec.d\ssl\private\CAkey.pem
    2002-02-26 04:42        folder        folder  etc\wfe\ipsec.d\ssl\crl
    2002-02-26 04:42        folder        folder  etc\wfe\ipsec.d\ssl\certs
    2004-03-29 18:49        folder        folder  etc\wfe\ipsec.d\spsl
    2004-05-24 09:47        folder        folder  etc\wfe\ipsec.d\public-certs
    2004-05-13 16:42          1458          1458  etc\wfe\ipsec.d\public-certs\Xcert_EZ_by_DST.pem
    2004-05-13 16:42          1148          1148  etc\wfe\ipsec.d\public-certs\ViaCode_Certification_Authority.pem
    2004-05-13 16:42          1024          1024  etc\wfe\ipsec.d\public-certs\VeriSign_Time_Stamping_CA.pem
    2004-05-13 16:42           838           838  etc\wfe\ipsec.d\public-certs\VeriSign_RSA_Secure_Server_CA.pem
    2004-05-13 16:42           856           856  etc\wfe\ipsec.d\public-certs\VeriSign_Individual_Software_Publishers_CA_[3].pem
    2004-05-13 16:42           838           838  etc\wfe\ipsec.d\public-certs\VeriSign_Individual_Software_Publishers_CA.pem
    2004-05-13 16:42           856           856  etc\wfe\ipsec.d\public-certs\VeriSign_Commercial_Software_Publishers_CA_[2].pem
    2004-05-13 16:42           838           838  etc\wfe\ipsec.d\public-certs\VeriSign_Commercial_Software_Publishers_CA.pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_4_Primary_CA_[9].pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_4_Primary_CA.pem
    2004-05-13 16:42           846           846  etc\wfe\ipsec.d\public-certs\VeriSign_Class_3_Public_Primary_CA.pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_3_Primary_CA_[7].pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_3_Primary_CA_[6].pem
    2004-05-13 16:42           852           852  etc\wfe\ipsec.d\public-certs\VeriSign_Class_3_Primary_CA.pem
    2004-05-13 16:42           846           846  etc\wfe\ipsec.d\public-certs\VeriSign_Class_2_Public_Primary_CA.pem
    2004-05-13 16:42          1124          1124  etc\wfe\ipsec.d\public-certs\VeriSign_Class_2_Primary_CA_[5].pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_2_Primary_CA_[4].pem
    2004-05-13 16:42           852           852  etc\wfe\ipsec.d\public-certs\VeriSign_Class_2_Primary_CA.pem
    2004-05-13 16:42           852           852  etc\wfe\ipsec.d\public-certs\VeriSign_Class_1_Public_Primary_CA.pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_1_Primary_CA_[8].pem
    2004-05-13 16:42          1120          1120  etc\wfe\ipsec.d\public-certs\VeriSign_Class_1_Primary_CA_[10].pem
    2004-05-13 16:42           846           846  etc\wfe\ipsec.d\public-certs\VeriSign_Class_1_Primary_CA.pem
    2004-05-13 16:42          1082          1082  etc\wfe\ipsec.d\public-certs\ValiCert_Class_3_Policy_Validation_Authority.pem
    2004-05-13 16:42          1082          1082  etc\wfe\ipsec.d\public-certs\ValiCert_Class_2_Policy_Validation_Authority.pem
    2004-05-13 16:42          1082          1082  etc\wfe\ipsec.d\public-certs\ValiCert_Class_1_Policy_Validation_Authority.pem
    2004-05-13 16:42          1610          1610  etc\wfe\ipsec.d\public-certs\UTN___USERFirst_Object.pem
    2004-05-13 16:42          1606          1606  etc\wfe\ipsec.d\public-certs\UTN___USERFirst_Network_Applications.pem
    2004-05-13 16:42          1630          1630  etc\wfe\ipsec.d\public-certs\UTN___USERFirst_Hardware.pem
    2004-05-13 16:42          1692          1692  etc\wfe\ipsec.d\public-certs\UTN___USERFirst_Client_Authentication_and_Email.pem
    2004-05-13 16:42          1598          1598  etc\wfe\ipsec.d\public-certs\UTN___DATACorp_SGC.pem
    2004-05-13 16:42           988           988  etc\wfe\ipsec.d\public-certs\Thawte_Timestamping_CA.pem
    2004-05-13 16:42          1144          1144  etc\wfe\ipsec.d\public-certs\Thawte_Server_CA.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\Thawte_Premium_Server_CA.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\Thawte_Personal_Premium_CA.pem
    2004-05-13 16:42          1182          1182  etc\wfe\ipsec.d\public-certs\Thawte_Personal_Freemail_CA.pem
    2004-05-13 16:42          1164          1164  etc\wfe\ipsec.d\public-certs\Thawte_Personal_Basic_CA.pem
    2004-05-13 16:42          1210          1210  etc\wfe\ipsec.d\public-certs\TC_TrustCenter_Time_Stamping_CA.pem
    2004-05-13 16:42          1242          1242  etc\wfe\ipsec.d\public-certs\TC_TrustCenter_Class_4_CA.pem
    2004-05-13 16:42          1242          1242  etc\wfe\ipsec.d\public-certs\TC_TrustCenter_Class_3_CA.pem
    2004-05-13 16:42          1242          1242  etc\wfe\ipsec.d\public-certs\TC_TrustCenter_Class_2_CA.pem
    2004-05-13 16:42          1242          1242  etc\wfe\ipsec.d\public-certs\TC_TrustCenter_Class_1_CA.pem
    2004-05-13 16:42          1370          1370  etc\wfe\ipsec.d\public-certs\Swisskey_Root_CA.pem
    2004-05-13 16:42          1400          1400  etc\wfe\ipsec.d\public-certs\Societa_Interbancaria_per_l_Automazione_SIA_Secure_Server_CA.pem
    2004-05-13 16:42          1040          1040  etc\wfe\ipsec.d\public-certs\Societa_Interbancaria_per_l_Automazione_SIA_Secure_Client_CA.pem
    2004-05-13 16:42          1066          1066  etc\wfe\ipsec.d\public-certs\SecureNet_CA_SGC_Root.pem
    2004-05-13 16:42          1140          1140  etc\wfe\ipsec.d\public-certs\SecureNet_CA_Root.pem
    2004-05-13 16:42          1066          1066  etc\wfe\ipsec.d\public-certs\SecureNet_CA_Class_B.pem
    2004-05-13 16:42          1066          1066  etc\wfe\ipsec.d\public-certs\SecureNet_CA_Class_A.pem
    2004-05-13 16:42          1644          1644  etc\wfe\ipsec.d\public-certs\Saunalahden_Serveri_CA_.pem
    2004-05-13 16:42          1652          1652  etc\wfe\ipsec.d\public-certs\Saunalahden_Serveri_CA.pem
    2004-05-13 16:42          1462          1462  etc\wfe\ipsec.d\public-certs\SERVICIOS_DE_CERTIFICACION___A_N_C_.pem
    2004-05-13 16:42          1924          1924  etc\wfe\ipsec.d\public-certs\NetLock_Uzleti_[Class_B]_Tanusitvanykiado.pem
    2004-05-13 16:42          2344          2344  etc\wfe\ipsec.d\public-certs\NetLock_Kozjegyzoi_[Class_A]_Tanusitvanykiado.pem
    2004-05-13 16:42          1932          1932  etc\wfe\ipsec.d\public-certs\NetLock_Expressz_[Class_C]_Tanusitvanykiado.pem
    2004-05-13 16:42          1004          1004  etc\wfe\ipsec.d\public-certs\Microsoft_Timestamp_Root.pem
    2004-05-13 16:42          2030          2030  etc\wfe\ipsec.d\public-certs\Microsoft_Root_Certificate_Authority.pem
    2004-05-13 16:42          1494          1494  etc\wfe\ipsec.d\public-certs\Microsoft_Root_Authority.pem
    2004-05-13 16:42          1412          1412  etc\wfe\ipsec.d\public-certs\Microsoft_Authenticode[tm]_Root.pem
    2004-05-13 16:42          1322          1322  etc\wfe\ipsec.d\public-certs\KeyMail_PTT_Post_Root_CA.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\Japan_Certification_Services__Inc__SecureSign_RootCA3.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\Japan_Certification_Services__Inc__SecureSign_RootCA2.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\Japan_Certification_Services__Inc__SecureSign_RootCA1.pem
    2004-05-13 16:42          1016          1016  etc\wfe\ipsec.d\public-certs\IPS_SERVIDORES.pem
    2004-05-13 16:42          1280          1280  etc\wfe\ipsec.d\public-certs\GlobalSign_Root_CA.pem
    2004-05-13 16:42           756           756  etc\wfe\ipsec.d\public-certs\GTE_CyberTrust_Root_[1].pem
    2004-05-13 16:42           872           872  etc\wfe\ipsec.d\public-certs\GTE_CyberTrust_Root.pem
    2004-05-13 16:42           888           888  etc\wfe\ipsec.d\public-certs\GTE_CyberTrust_Global_Root.pem
    2004-05-13 16:42          1524          1524  etc\wfe\ipsec.d\public-certs\First_Data_Digital_Certificates_Inc__Certification_Authority.pem
    2004-05-13 16:42          1106          1106  etc\wfe\ipsec.d\public-certs\Fabrica_Nacional_de_Moneda_y_Timbre.pem
    2004-05-13 16:42           962           962  etc\wfe\ipsec.d\public-certs\FESTE__Verified_Certs.pem
    2004-05-13 16:42           974           974  etc\wfe\ipsec.d\public-certs\FESTE__Public_Notary_Certs.pem
    2004-05-13 16:42          1160          1160  etc\wfe\ipsec.d\public-certs\Equifax_Secure_eBusiness_CA_2.pem
    2004-05-13 16:42           946           946  etc\wfe\ipsec.d\public-certs\Equifax_Secure_eBusiness_CA_1.pem
    2004-05-13 16:42           962           962  etc\wfe\ipsec.d\public-certs\Equifax_Secure_Global_eBusiness_CA_1.pem
    2004-05-13 16:42          1160          1160  etc\wfe\ipsec.d\public-certs\Equifax_Secure_Certificate_Authority.pem
    2004-05-13 16:42          1766          1766  etc\wfe\ipsec.d\public-certs\Entrust_net_Secure_Server_Certification_Authority.pem
    2004-05-13 16:42          1000          1000  etc\wfe\ipsec.d\public-certs\EUnet_International_Root_CA.pem
    2004-05-13 16:42          1338          1338  etc\wfe\ipsec.d\public-certs\Deutsche_Telekom_Root_CA_2.pem
    2004-05-13 16:42           978           978  etc\wfe\ipsec.d\public-certs\Deutsche_Telekom_Root_CA_1.pem
    2004-05-13 16:42          1458          1458  etc\wfe\ipsec.d\public-certs\DST_[United_Parcel_Service]_RootCA.pem
    2004-05-13 16:42          1474          1474  etc\wfe\ipsec.d\public-certs\DST_[National_Retail_Federation]_RootCA.pem
    2004-05-13 16:42          1474          1474  etc\wfe\ipsec.d\public-certs\DST_[Baltimore_EZ]_CA.pem
    2004-05-13 16:42          1222          1222  etc\wfe\ipsec.d\public-certs\DST_[ANX_Network]_CA.pem
    2004-05-13 16:42          1366          1366  etc\wfe\ipsec.d\public-certs\DST_[ABA_ECOM]_CA.pem
    2004-05-13 16:42          1416          1416  etc\wfe\ipsec.d\public-certs\DST_RootCA_X2.pem
    2004-05-13 16:42          1416          1416  etc\wfe\ipsec.d\public-certs\DST_RootCA_X1.pem
    2004-05-13 16:42          1214          1214  etc\wfe\ipsec.d\public-certs\DST_Entrust_GTI_CA.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\DSTCA_E2.pem
    2004-05-13 16:42          1172          1172  etc\wfe\ipsec.d\public-certs\DSTCA_E1.pem
    2004-05-13 16:42           912           912  etc\wfe\ipsec.d\public-certs\Certisign_Autoridade_Certificadora_AC4.pem
    2004-05-13 16:42          1012          1012  etc\wfe\ipsec.d\public-certs\Certisign_Autoridade_Certificadora_AC3S.pem
    2004-05-13 16:42           912           912  etc\wfe\ipsec.d\public-certs\Certisign_Autoridade_Certificadora_AC2.pem
    2004-05-13 16:42           904           904  etc\wfe\ipsec.d\public-certs\Certisign_Autoridade_Certificadora_AC1S.pem
    2004-05-13 16:42          1322          1322  etc\wfe\ipsec.d\public-certs\Certiposte_Serveur.pem
    2004-05-13 16:42          1374          1374  etc\wfe\ipsec.d\public-certs\Certiposte_Editeur.pem
    2004-05-13 16:42          1318          1318  etc\wfe\ipsec.d\public-certs\CertPlus_Class_3_Primary_CA.pem
    2004-05-13 16:42          1296          1296  etc\wfe\ipsec.d\public-certs\CertPlus_Class_3TS_Primary_CA.pem
    2004-05-13 16:42          1322          1322  etc\wfe\ipsec.d\public-certs\CertPlus_Class_3P_Primary_CA.pem
    2004-05-13 16:42          1318          1318  etc\wfe\ipsec.d\public-certs\CertPlus_Class_2_Primary_CA.pem
    2004-05-13 16:42          1318          1318  etc\wfe\ipsec.d\public-certs\CertPlus_Class_1_Primary_CA.pem
    2004-05-13 16:42          1090          1090  etc\wfe\ipsec.d\public-certs\CW_HKT_SecureNet_CA_SGC_Root.pem
    2004-05-13 16:42          1164          1164  etc\wfe\ipsec.d\public-certs\CW_HKT_SecureNet_CA_Root.pem
    2004-05-13 16:42          1086          1086  etc\wfe\ipsec.d\public-certs\CW_HKT_SecureNet_CA_Class_B.pem
    2004-05-13 16:42          1086          1086  etc\wfe\ipsec.d\public-certs\CW_HKT_SecureNet_CA_Class_A.pem
    2004-05-13 16:42           954           954  etc\wfe\ipsec.d\public-certs\Belgacom_E_Trust_Primary_CA.pem
    2004-05-13 16:42          1582          1582  etc\wfe\ipsec.d\public-certs\Autoridad_Certificadora_del_Colegio_Nacional_de_Correduria_Publica_Mexicana__A_C_.pem
    2004-05-13 16:42          1560          1560  etc\wfe\ipsec.d\public-certs\Autoridad_Certificadora_de_la_Asociacion_Nacional_del_Notariado_.pem
    2004-01-03 14:51        folder        folder  etc\wfe\ipsec.d\hostrequests
    2004-01-03 14:47        folder        folder  etc\wfe\ipsec.d\hostkeys
    2004-01-03 14:47          3311          3311  etc\wfe\ipsec.d\hostkeys\Heinz.pem
    2004-01-03 14:51        folder        folder  etc\wfe\ipsec.d\hostcerts
    2004-07-03 01:15             0             0  etc\wfe\ipsec.d\hostcerts\Heinz.pem
    2004-01-03 14:44        folder        folder  etc\wfe\ipsec.d\cakeys
    2004-01-03 14:44          3311          3311  etc\wfe\ipsec.d\cakeys\CA_VPN_4096.pem
    2004-03-29 18:49        folder        folder  etc\wfe\ipsec.d\cacrls
    2004-01-03 14:44        folder        folder  etc\wfe\ipsec.d\cacerts
    2004-01-03 14:44          2106          2106  etc\wfe\ipsec.d\cacerts\CA_VPN_4096.pem
    2004-07-03 01:15        folder        folder  etc\wfe\conf
    2004-06-29 14:12           107           107  etc\wfe\conf\up2datedata
    2004-06-16 09:03           117           117  etc\wfe\conf\syslog
    2004-05-26 11:04            48            48  etc\wfe\conf\socks
    2004-05-26 10:41             0             0  etc\wfe\conf\snortlocalrules.ini
    2004-06-14 07:33             0             0  etc\wfe\conf\snortactivation.ini
    2004-06-23 13:58            61            61  etc\wfe\conf\snmp
    2004-06-28 12:24          1498          1498  etc\wfe\conf\smtpdata
    2004-06-28 10:33           412           412  etc\wfe\conf\settings
    2004-05-28 14:27             0             0  etc\wfe\conf\routesdata
    2004-07-02 06:26            39            39  etc\wfe\conf\reporting
    2004-06-28 12:24           579           579  etc\wfe\conf\proxyauth.ini
    2004-06-14 07:33           169           169  etc\wfe\conf\pptpdata
    2004-05-26 11:04           209           209  etc\wfe\conf\pop3
    2004-06-29 07:26           252           252  etc\wfe\conf\packetfilter_advanced
    2004-05-26 10:41           468           468  etc\wfe\conf\natmasq
    2004-05-28 14:33           114           114  etc\wfe\conf\nameserver
    2004-05-28 14:28            64            64  etc\wfe\conf\nacct
    2004-06-16 09:03           302           302  etc\wfe\conf\logfiles
    2004-05-27 15:26          6053          6053  etc\wfe\conf\local_logs.ph
    2004-05-26 10:41           471           471  etc\wfe\conf\localusers.ini
    2004-05-26 10:41           768           768  etc\wfe\conf\license
    2004-05-26 10:41             0             0  etc\wfe\conf\ipsecconnectionkeys
    2004-06-28 12:27            96            96  etc\wfe\conf\ipsecconnections
    2004-05-26 11:05          7294          7294  etc\wfe\conf\ipseclocalkeys
    2004-05-26 11:05           221           221  etc\wfe\conf\ipsecremotekeys
    2004-05-26 10:41          3282          3282  etc\wfe\conf\ipsecpolicies
    2004-05-28 14:35           144           144  etc\wfe\conf\ipsecadvanced
    2004-06-14 07:41           167           167  etc\wfe\conf\ips_settings
    2004-05-26 10:41          1021          1021  etc\wfe\conf\itf.conf
    2004-05-26 11:05            53            53  etc\wfe\conf\ident.ini
    2004-06-29 07:21           139           139  etc\wfe\conf\icmp
    2004-06-28 12:24           295           295  etc\wfe\conf\httpdata
    2004-05-26 10:41            21            21  etc\wfe\conf\ha
    2004-05-28 14:27            21            21  etc\wfe\conf\dyndns
    2004-05-26 11:02             0             0  etc\wfe\conf\dhcpd
    2004-06-18 06:59            25            25  etc\wfe\conf\cf_profiles
    2004-06-18 06:59            63            63  etc\wfe\conf\cf_assign
    2004-05-26 10:41            70            70  etc\wfe\conf\certdata
    2004-05-27 15:26          1064          1064  etc\wfe\conf\categories.plain
    2004-06-18 06:59          1390          1390  etc\wfe\conf\categories
    2004-06-30 06:46            82            82  etc\wfe\conf\backupdata
    2004-06-09 16:29            97            97  etc\wfe\conf\accountingdata
    2004-05-26 10:41           165           165  etc\wfe\conf\aua_main_config.ini
    2004-07-01 14:17        folder        folder  etc\confd
    2004-07-01 14:17        440017        440017  etc\confd\storage.xml
    2004-04-02 07:10        folder        folder  var
    2004-05-26 10:02        folder        folder  var\chroot-smtp
    2004-07-03 01:15        folder        folder  var\chroot-smtp\etc
    2004-05-26 10:42           887           887  var\chroot-smtp\etc\exim.key
    2004-05-26 10:42          1277          1277  var\chroot-smtp\etc\exim.cert
    2004-07-03 01:15         14420         14420  etc\wfe\conf\signature
    #
    # Total                   Size        Packed  Files
    #                       632879        632879  187


    Filelist for later backup:
    \Desktop\backup_20040710_011501.rar
    2004-07-07 19:56        folder        folder  etc
    2004-07-05 07:41        folder        folder  etc\wfe
    2004-07-10 01:15        folder        folder  etc\wfe\conf
    2004-07-07 10:28           109           109  etc\wfe\conf\up2datedata
    2004-07-07 07:19           117           117  etc\wfe\conf\syslog
    2004-07-07 07:19            48            48  etc\wfe\conf\socks
    2004-07-07 07:19             0             0  etc\wfe\conf\snortlocalrules.ini
    2004-07-07 19:59         46109         46109  etc\wfe\conf\snortactivation.ini
    2004-07-07 07:19            61            61  etc\wfe\conf\snmp
    2004-07-07 19:58          1495          1495  etc\wfe\conf\smtpdata
    2004-07-07 07:19           411           411  etc\wfe\conf\settings
    2004-07-07 07:19             0             0  etc\wfe\conf\routesdata
    2004-07-07 07:19            39            39  etc\wfe\conf\reporting
    2004-07-07 19:58           660           660  etc\wfe\conf\proxyauth.ini
    2004-07-07 07:19           169           169  etc\wfe\conf\pptpdata
    2004-07-07 07:19           209           209  etc\wfe\conf\pop3
    2004-07-07 19:53           252           252  etc\wfe\conf\packetfilter_advanced
    2004-07-07 07:19           468           468  etc\wfe\conf\natmasq
    2004-07-07 07:19           114           114  etc\wfe\conf\nameserver
    2004-07-07 07:19            64            64  etc\wfe\conf\nacct
    2004-07-07 07:19           302           302  etc\wfe\conf\logfiles
    2004-07-07 07:19          6053          6053  etc\wfe\conf\local_logs.ph
    2004-07-07 07:19           471           471  etc\wfe\conf\localusers.ini
    2004-07-07 07:19           927           927  etc\wfe\conf\license
    2004-07-07 07:19             0             0  etc\wfe\conf\ipsecconnectionkeys
    2004-07-07 07:19            96            96  etc\wfe\conf\ipsecconnections
    2004-07-07 07:19          7294          7294  etc\wfe\conf\ipseclocalkeys
    2004-07-07 07:19           221           221  etc\wfe\conf\ipsecremotekeys
    2004-07-07 07:19          3282          3282  etc\wfe\conf\ipsecpolicies
    2004-07-07 07:19           144           144  etc\wfe\conf\ipsecadvanced
    2004-07-07 19:58           427           427  etc\wfe\conf\ips_settings
    2004-07-07 07:19          1021          1021  etc\wfe\conf\itf.conf
    2004-07-07 07:19            53            53  etc\wfe\conf\ident.ini
    2004-07-07 07:19           139           139  etc\wfe\conf\icmp
    2004-07-07 19:54           313           313  etc\wfe\conf\httpdata
    2004-07-07 07:19            21            21  etc\wfe\conf\ha
    2004-07-07 07:19            21            21  etc\wfe\conf\dyndns
    2004-07-07 07:19             0             0  etc\wfe\conf\dhcpd
    2004-07-07 19:54          1430          1430  etc\wfe\conf\cf_profiles
    2004-07-07 07:19            69            69  etc\wfe\conf\cf_assign
    2004-07-07 07:19            70            70  etc\wfe\conf\certdata
    2004-07-07 07:19          1064          1064  etc\wfe\conf\categories.plain
    2004-07-07 19:54          1390          1390  etc\wfe\conf\categories
    2004-07-07 07:19            82            82  etc\wfe\conf\backupdata
    2004-07-07 07:19            97            97  etc\wfe\conf\accountingdata
    2004-07-07 07:19           165           165  etc\wfe\conf\aua_main_config.ini
    2004-07-07 19:58        folder        folder  etc\confd
    2004-04-02 07:10        folder        folder  var
    2004-06-29 17:31        folder        folder  var\chroot-smtp
    2004-07-10 01:15        folder        folder  var\chroot-smtp\etc
    2004-06-30 07:12           887           887  var\chroot-smtp\etc\exim.key
    2004-06-30 07:12          1277          1277  var\chroot-smtp\etc\exim.cert
    2004-07-10 01:15          2787          2787  etc\wfe\conf\signature
    #
    # Total                   Size        Packed  Files
    #                        80428         80428  53

    What i difference!!
    Is this only for my backups or e general problem?
    //hdh
  • 0 in reply to hdh
    Sorry, but haven't got any /etc/confd/storage.xml, but have /etc/confd/storage.xml-backup and /etc/confd/storage.xml-backup-backup. 
                                                                                                                                        
    The mdw.log shows som errors like:                                                                                                  
     =========================================================================                                                          
     modules::Config::getConfig() => Unknown Config object: '/etc/up2date/pattern/ips/latest.conf'                                      
     modules::Ressource at /PerlApp/modules/Ressource.pm line 134.                                                                      
                                                                                                                                        
     modules::Error::Error                                                                                                              
     modules::Config::getConfig                                                                                                         
     modules::Ressource::getConfig                                                                                                      
     modules::ips::load                                                                                                                 
     modules::Config::load                                                                                                              
                                                                                                                                        
     =========================================================================                                                          
     modules::Config::load                                                                                                              
                                                                                                                                        
     =========================================================================                                                          
     modules::IPRoute::ip_route_add() => Failed: /sbin/ip route add xx.xxx.xxx.96/29 dev eth1                                           
     modules::routes at /PerlApp/modules/routes.pm line 422.                                                                            
                                                                                                                                        
     modules::Error::Error                                                                                                              
     modules::IPRoute::ip_route_add                                                                                                     
     modules::routes::setAll                                                                                                            
     modules::Config::load

    //hdh
  • 0 in reply to hdh
    OK, I think I have solved the problem.
    For some reason, there was no storage.xml on my system. Only a storage.xml-backup and a storage.xml-backup-backup.
     The file storage.xml seems to have some influence on the backup. While it was missing my backup was only appr. 20Kb, now it is 120kb.

    What did I do?
    -removed storage.xml-backup-backup
    -copied storage.xml-backup to storage.xml
    -made a backup
    -checked the backup with winrar for files and if storage.xml was present and installed in a test machine
    -restarted the working asl
    Everything seems to be OK

    So guys, make your selves a favor, check your backupfiles!!!!

    //hdh