This package is used to Convert the Firewall-1 3.0 configuration files to 
SunScreen 3.1 format.

To run, use: 
	 /opt/SUNWfwcnv/bin/fwconvert & 

Enter the name of the path to the policy. This is where the files for the 
rules and objects reside. 

Enter the name of the policy, without the ".pf" or ".W" extension.

Enter the path to an existing directory where the output files must be stored.

Select if this is a Firewall-1 2.x conversion or Firewall-1 3.0 conversion.

For Firewall-1 3.0,  the two files the convertor looks for  are the 
policy_name.pf and the objects.C file. Enter the name of the policy 
that has been compiled for FW-1 3.0  (i.e. has  a .pf file for this 
policy name).

For Firewall-1 2.x,  the two files the  convertor looks for are the 
policy_name.W and the objects.C file. 



Description of Output Files:

There are six files generated. The filename begins with the name of the 
policy being converted.  There are three log files and  two files which 
contain the SunScreen configuration commands.

1) <policy_name>_Objects    - This files  contains the commands for configuring
			      the SunScreen objects.

2) <policy_name>_Rules      - This files  contains the commands for configuring
			      the SunScreen rules that use the generated 
			      objects.

3) <policy_name>_sscfg      - This is the file the user can running by changing
			      the mode to executable:

			      chmod 544 <policy_name>_sscfg

			      The  above two  files  must  reside in the same 
			      directory as this file. This should be run when 
			      the user is ready  to create the new  SunScreen
			      configuration, <policy_name>, with the FW-1 
			      configuration information

4) <policy_name>_Obj.log    - This file contains the objects from Firewall-1 
			      which are not supported by SunScreen.

5) <policy_name>_Rule.log   - This file  contains the  rules from  Firewall-1 
			      which could not be added.  The rule is shown as  
			      a SunScreen rule command with an explanation of 
			      the reason why the rule could not be supported. 
			      Users may be able to  fix the problem and then 
			      try running the "ssadm edit <policy_name>" 
			      command later.

6) <policy_name>_Unused.log - This file is simply a list of the objects not 
			      used from Firewall-1.


When errors are encountered:

Sometimes, when running the conversion program, errors may be encountered 
while parsing.  This is due to some characers not accepted by the conversion 
program. The error reported would indicate the offending character. Open the 
Firewall-1 policy_name.[pf or W] file or the objects.C file, and replace  or
remove the offending character at the indicated line number.
