Re: fw-1 rule base

[Brett Eldridge <beldridg () cup hp com>]

On Wed, 9 Sep 1998, sandeep kumar wrote:

> wanted to know as to how does the checkpoint firewall fw-1 store the
> rules that we submit. are they stored in a database or just in text
> format. 

The rule base is stored in a plaintext file $FWDIR/conf/policy-name.W.

When you load a policy, the rule base gets compiled into an INSPECT script
with a name of $FWDIR/conf/policy-name.pf (equivalent to running the fw
gen command to create the INSPECT code).

Information about the objects in a policy are stored in
$FWDIR/conf/Objects.C


- brett