QUEUE BUILDUP ON FIREWALL USING CVP

[cassim]

We are running Checkpoint FW1 on Solaris 2.6 with CVP(e-Safe).<br>Email in the mail spool directory builds up.<br>When we do a fwstart and fwstop, a &quot;burst&quot; of mail messages are sent to the mail server. This happens for about 2 mins or so and then the queue just builds up.<br><br>Has anyone had a similar problem?<br>Any suggestions?

 

[speelman]

We had the same problem here and we narrowed it down to a problem with the I/O of the e-safe machine.
The trouble is that when the e-safe machine crashes/doesn't respond in a timely manner the firewall seems to decide it isn't trusting the e-safe machine anymore and stops forwarding the e-mails the the machine. Restarting the e-safe machine doesn't give the firewall the signal to start sending the e-mails again and this had to be done manually by fwstop fwstart (If you have checkpoint v4.0+ you can also kill and restart the mdq process). After this the firewall will start spooling again..
The problem is thus mainly in the e-safe machine take a look there....
Hope this helps....