From: Jim C. <jcu...@cu...> - 2007-03-15 18:14:56
|
I seem to be having services spontaneously terminating on my firewall, a WRAP with 128MB RAM and 256MB Flash disk. I first noticed that no firewall hits were reported on the web admin page, then looking at System Status I see: CRON server RUNNING DHCP Server RUNNING DNS proxy server RUNNING Intrusion Detection System (GREEN) RUNNING Intrusion Detection System (RED) STOPPED Kernel logging server RUNNING Logging server STOPPED NTP Server STOPPED Secure shell server RUNNING VPN STOPPED Web proxy STOPPED Web server STOPPED The only stopped services I would expect to see are VPN and Web proxy. I see no useful information in any of the files in /var/log/, and /var/log/messages is an empty file since March 8th. I installed updates 1.4.12, 1.4.13, and 1.4.14 on March 6, and 1.4.15 on March 11. I can restart Snort(RED) and NTP simply going to their admin pages and re-saving the configuration. I was able to restart the logging server by entering /usr/sbin/syslogd -u syslogd -m 0 (taken from /etc/rc.d/rc.sysinit) I don't understand why the System Status page still shows the Web server as stopped, even though httpd is clearly running and I can get a response from the firewall on ports 81 and 445. |