Great Circle Associates Firewalls
(January 1998)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: "Billy Verreynne" <vslabs @ onwe . co . za>
Date: Wed, 21 Jan 1998 07:38:24 +0200
To: <Firewalls @ GreatCircle . COM>

Chris Lo <cklo @
 cklo .
 hk .
 super .
 net> said:
>I have just encounter VERY similar crash yesterday, also pointing to
>fw.sys and a IRQL_NOT_LESS_OR_EQUAL thing.
>I've a rule filtering/blacking Java/ActiveX, turn it off and **SEEM* to
>run ok so far.
>Just an experience.

So NT insists on having ActiveX enabled or else it crashes FW1? - scary
thought! :-)

There's a /CRASHDEBUG switch which you can use (change boot.ini) to boot the
NT kernel in a debug mode. I think it writes all debug data to one of the
com ports, but I've never used this option myself. You can also config NT to
create a core dump if it crashes, but I have absolutely no idea how one goes
about analysing it.

IMHO, the IRQL error is usually related to some h/w problem, and sometimes
to a low level driver that's not fully compatible, or a bug in the kernel.

Another thing to keep in mind is never to aply a NT Service Patch unless
it's recommended for that h/w platform, or to fix a specific NT bug that
your software on the box runs into. IOW, if the FW1 people do not
specifically recommend using a specific SP then don't install it. SP's are
notorious for introducing a couple of new bugs every time... <sigh>

regards,
Billy


Indexed By Date Previous: Re: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: Rick Murphy <rmurphy @ itm-inst . com>
Next: Re: SNI revised -- (was: Fraudulent SA's solved)
From: Stepken <stepken @ www . firmen-info . de>
Indexed By Thread Previous: RE: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: Yinan Yang <YYANG @ nla . gov . au>
Next: Re: FW-1 v3.0 on NTv4.0 (with SP3 and FW-1 patches)
From: rdew @ el . nec . com (Bob De Witt)

Google
 
Search Internet Search www.greatcircle.com