Patch-ID# 107168-01
Keywords: y2000 upgrade 3.0b motif SP8 build_3083
Synopsis: Solstice FireWall-1 3.0b (Service Pack 8): Upgrade patch (Non-VPN)
Date: Feb/04/99

Solaris Release: 2.5 2.5.1 2.6

SunOS Release: 5.5 5.5.1 5.6

Unbundled Product: FireWall-1

Unbundled Release: 3.0b Motif GUI

Relevant Architectures: sparc 

BugId's fixed with this patch:

Changes incorporated in this version: 

Patches accumulated and obsoleted by this patch: 105823-04

Patches which conflict with this patch: 

Patches required with this patch: 

Obsoleted by: 

Files included with this patch: 

	bin/fwcolor_allocate
	clients/bin/fwui
	clients/bin/fwlv
	clients/bin/fwss

Problem Description:

GUI Client
----------
1. Fixed a bug in the handling of nested user groups.  When an item was 
deleted from an included group, the including group was not updated correctly. 
2. Fixed Year 2000 bugs in select and find functions in the Log Viewer.  
With this fix, all known Year 2000 limitations on FireWall-1 3.0b are closed. 
3. On Dual CPU machines, fixed a bug which prevented the GUI client and 
the Management from working when both were installed on the same machine. 
4. Corrected GDI (specifically bitmaps) allocation which could cause the 
GUI client to get stuck on Win95 when working with very large rulebase.
5. When fetching interfaces for a network object, if a fetched interface 
existed previous to the fetch its definition will now be overriden by 
the result of the fetch.
6. It is no longer permitted to enter a drive prefix to the file name 
(e.g. 'a:filename') when using 'save as' for a policy.
7. Disabled the use of address range objects in the security policy 
rulebase.  It is still available for defining NAT rules.

Note - To prevent the crashing of the Motif GUI due to unavailable
colormap resources, this service pack includes a script -
fwcolor_allocate - which starts a daemon that saves the colors for the
GUI client (the daemon itself is part of the original Motif GUI
installation).  After installing the service pack, the fwcolor_allocate
script can be found in $FWCLIDIR/bin.  It should be executed prior to
running the Motif GUI client.
 
 Usage: fwcolor_allocate <stop|start>  [-display display_name]


Patch Installation Instructions:
--------------------------------
Refer to the Install.info file for instructios on using the
each patch.  Any other special or non-generic installation
instructions should be described below as special instructions.
 

Special Install Instructions:
-----------------------------
1. Important Note:
If you have editted the control.map file in your FireWall-1 configuration,
please note the following:
This Service Pack includes a new control.map file which includes new
configuration for OPSEC communications protocols.\040 Installing the Service
Pack will Replace your existing control.map with the new one.\040 If you are not
using OPSEC, you can replace the newly installed control.map with your old one.
Otherwise you should manually merge the new control.map with your old one.
   
2. Issue 'fwstop' before installing the patch.

3. Use the generic 'installpatch' and 'backoutpatch' scripts provided with
this patch.

4. If synchronization is wanted, change the following line:

#define sync

to:

//#define sync

********************************************************************
IMPORTANT:  This patch may not install properly unless the -u option
            is specified as follows:

		./installpatch -u .

********************************************************************