Today I decided to install gShield, so I could open a few ports on my machine without having to fight iptables every time. I extracted the package, set the config files and all was looking good, until I ran it.

First off it complained about my network bitmask, which was set as 10.1.1.1/24 in the NAT config file (this it my internal network, VL is a gateway).

I then restarted, and I noticed nothing (samba, internet) was working. I also noticed, that it was repatedly adding values into the iptables-Forward table (the value I put in the conf/forward config file, mistakenly as
0/0:5950 both 0/0:5950 0/0:5950)
I tried to flush the tables, with no sucsess because it would always write more values.

I restarted (again) and now it freezes at the firewall section. Is there anyway to save the o/s?
EDIT:
Well I'm back into vector now (removed network cards). I can dissable the firewall simply by moving the etc/firewall directory.
Does anyone know of a mirror for the source (the main page is down) or a place where I can download an slapt get package of it?

have you tried guarddog, it's powerful, gui and works.

good luck.


ps. oh yea make sure you remove ALL refernces to that broken package.. ie look in files for any mention of it, or will/may come back to haunt you.

Ah, I don't have kde, I'm using x and icewm. I would prefer a firewall ap that runs in that environment, or has a SIMPLE port forwarding file. (eg- text lines that can open port ranges to specific ips, and can open the same port on multiple computers etc)

I have reverted to the original config files (I think) and I am getting a looped message from iptables every time I run gShield. It says "invalid TCP port/service '-j' specified.

BTW - the gshield site has a broken link for the source download, which means I cannot compile it, I have to install a package. It also has very little documentation on these things, and also has no mailing list/forum, stay away from it.

Frustrating

well i'm sure you already know this, but just incase, you dont' need to install all of kde, or run it to use dog, just install the base system, this way you can still enjoy the 'best-of-kde' without putting up with it's nooobishness.