It was always a mystery for me abt boot -s (Single User Mode of Nokia) to recover the firewall.
Troubleshooting: Cannot Complete Reboot
In certain configurations the Default Filter may prevent the Security Gateway computer from completing the reboot following installation.
First, examine the Default Filter and verify that the Default Filter allows traffic that the computer needs in order to boot.
If the boot process cannot complete successfully, remove the Default Filter as follows:
Reboot in single user mode (for UNIX) or Safe Mode With No Networking (for Windows 2000).
Ensure that the Default Filter does not load in future boots. Use the command
fwbootconf bootconf Set_def
options fwboot bootconf
Reports whether firewall controls IP Forwarding.
Returns 1 if IP Forwarding control is enabled on boot.
Returns 0 if IP Forwarding is not controlled on boot.
Turns off/on control of IP forwarding for the next boot.
0 - Turns off
1 - Turns on
Returns the full path to the Default Filter that will be used on boot.
Note - Do NOT move these files.