LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Newbie
User Name
Password
Linux - Newbie This Linux forum is for members that are new to Linux.
Just starting out and have a question? If it is not in the man pages or the how-to's this is the place!

Notices


Reply
  Search this Thread
Old 05-31-2004, 04:24 AM   #1
fortezza
Member
 
Registered: Mar 2003
Location: Colorado
Distribution: Fedora Core 4
Posts: 297

Rep: Reputation: 30
Firewall Slows Bootup Bigtime


I have my wireless LAN secured using a VPN between each wireless system and the VPN gateway to my internal network. Here is the layout -->

<wirelesslan>----<VPNGATEWAY>----<Internal(wired) LAN>----<Internet>

The VPN gatewate is firewalled so that it only lets VPN packets through, and everything works fine with my setup but the Fedora Core 1 Linux box I have as a client takes forever to boot up, and gets service failure notice ( such as NTP time sync ) when it boots up. Before I firewalled off the wireless network, it took about 1 minute to boot up into graphical mode, now it takes about 20 minutes.

The problem is ( I think ) is that network services are starting before the VPN tunnel is created, caused the delay as they try to do things like synchronize time, query DNS, etc. In fact I had to move the command to mount SMB shares all the way up to the user login script, or else I wouldn't even get to the Graphical Logon screen!

Now, the current setup on the wireless client is start network services normally, and then start the VPN tunnel service ( IPSEC is the service name, Freeswan is the software I am using ) in rc.local , and then mount shares, etc. I used to have the service start at bootup using the Redhat service config tool, but it never worked at all that way.

So, what I see as a solution to the problem is order the service startup so that network-related services do not start until after the VPN tunnel has been created, or perhaps I can had all the network service start in rc.local? The dilemma with the VPN tunnel not being created before network services start would still be an issue, in that case.

Hopefully my conumdrum made sense, I think if I can set the order services start, then my problem will be solved. Any ideas on how to do that? Oh, of course I can loosen the firewall rules on the VPN Gateway, let the wireless client boot, and then retighten them, but that ruins security plus would be a pain to automate.
 
Old 05-31-2004, 09:40 PM   #2
adamwenner
Member
 
Registered: Aug 2003
Distribution: windows xp home, windows 98, red hat 9, fedora core 3, redhat enterprise linux, win2000 pro/server
Posts: 217

Rep: Reputation: 32
ok, assuming you are using a default runlevel as 5, you can edit the /etc/rc.d/rc5.d/ files and change the numbers to change startup order

btw, heres a basic layout of the file names in there

example: K##servicename

First character: K means kill, S means start
Numeric Characters: startup sequence, lower numbers go first
servicename: service name that is starting, ethernet interfaces are "network"
 
Old 06-01-2004, 12:13 AM   #3
fortezza
Member
 
Registered: Mar 2003
Location: Colorado
Distribution: Fedora Core 4
Posts: 297

Original Poster
Rep: Reputation: 30
That did it!

It worked like a charm, I used the Redhat services config tool to set IPSEC to start on bootup, then renamed its shortcut file to have it start directly after network ( in my case network was 10, and I made IPSEC number 11 ). After rebooting to test it, I am happy to say it comes up super-fast with no errors with network services.

Thank you for your help,


~Fortezza
 
Old 06-01-2004, 08:38 AM   #4
adamwenner
Member
 
Registered: Aug 2003
Distribution: windows xp home, windows 98, red hat 9, fedora core 3, redhat enterprise linux, win2000 pro/server
Posts: 217

Rep: Reputation: 32
no problem, sorry i didnt think of doing it that way with the gui, i learned linux on a command line, and thats how i work with it a lot of times
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Newb bigtime. Couple questions SuSE 10.0 boostaddict Linux - Newbie 6 11-29-2005 03:39 PM
Need Bigtime help with Xserver-Cygwin-Oracle defa0009 Linux - General 1 05-16-2005 01:54 PM
I'm a bigtime newbie>>>Logon? GAMEOVER Mandriva 8 11-26-2004 11:21 AM
Geforce4 TI4400 PROBLEMS BIGTIME! s9722 Linux - Hardware 15 05-12-2003 02:10 PM
Um...I buggered up. Bigtime. Citizen Bleys Linux - General 2 08-06-2001 12:22 PM


All times are GMT -5. The time now is 12:16 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration