LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 03-11-2006, 11:51 AM   #1
AlanQ
Member
 
Registered: Jul 2004
Posts: 41

Rep: Reputation: 15
firestarter not started by init


I'm running Ubuntu5.10 and firestarter1.0.3 (installed via apt-get)

Kernel is 2.6.12-9-386. iptables v1.3.1 (Can't find version of init)

I want firestarter to start at reboot.

According to the manual:
"When you install Firestarter from a package the program is automatically registered to run as a system service. This means
the firewall is also running even if the graphical program is not."

However

After a reboot, 'sudo ps -ef' shows no firestarter.

If I start firestarter manually, ps -ef shows:
alan 9116 1 0 15:53 ? 00:00:00 gksudo /usr/sbin/firestarter
root 9138 9116 0 15:54 ? 00:00:40 /usr/sbin/firestarter

The firestarter init script is located in /etc/init.d

I have read http://www.linuxquestions.org/questi...d.php?t=171028
but I dont have chkconfig.

Any ideas?

Thanks
Alan
 
Old 03-11-2006, 05:25 PM   #2
Mara
Moderator
 
Registered: Feb 2002
Location: Grenoble
Distribution: Debian
Posts: 9,696

Rep: Reputation: 232Reputation: 232Reputation: 232
First run 'runlevel'. It should print you something like 'N 2'. It means you're on runlevel 2. When you have the right runlevel, just go to /etc/rcX.d where X is the runlevel and create a symlink in this directory pointing to the script in /etc/init.d. The script should have name like S15firestarter. S means to start a service, 15 sets order (small numbers are executed first, your firewall should be on before all network servers).
 
Old 03-12-2006, 01:40 AM   #3
/bin/bash
Senior Member
 
Registered: Jul 2003
Location: Indiana
Distribution: Mandrake Slackware-current QNX4.25
Posts: 1,802

Rep: Reputation: 47
Quote:
I have read http://www.linuxquestions.org/questi...d.php?t=171028
but I dont have chkconfig.
Debian has a similar program I think it's called rcconf.
 
Old 03-12-2006, 05:34 AM   #4
unSpawn
Moderator
 
Registered: May 2001
Posts: 29,415
Blog Entries: 55

Rep: Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600Reputation: 3600
There's a difference between Firestarter the "service" and the "application". Services started at at boot/shutdown/runlevel usually aren't services ment to interact with via your desktop. Starting Firestarter at boot/shutdown/runlevel change doesn't mean you'll see an app running, because (IIRC) the only thing it has to do is feed iptables rules to the kernel like any other firewall script. This means the way to verify if it is "running" is to compare the output of "/sbin/iptables -n -L (-v)" with the rules configured in Firestarter.
 
Old 03-12-2006, 09:23 AM   #5
AlanQ
Member
 
Registered: Jul 2004
Posts: 41

Original Poster
Rep: Reputation: 15
Thank you Mara, /bin/bash and unSpawn

It's now starting to make sense.

runlevel does indeed show 'N 2'.

re: /etc/rcX.d/

K20firestarter is in X= 0, 1 and 6

S20firestarter is in X= 2, 3, 4 and 5

So, to protect the system, all the firestarter script has to do is give the pre-configured rules to the iptables part of the kernel.

Quote:
This means the way to verify if it is "running" is to compare the output of "/sbin/iptables -n -L (-v)" with the rules configured in Firestarter.
I shall (carefully) play with firestarter to see how it affects the iptables rules.

Quote:
Debian has a similar program I think it's called rcconf.
I've found 'update-rc.d' which I think does roughly the same thing.

I'm feeling safer already

Al
 
Old 03-12-2006, 01:12 PM   #6
/bin/bash
Senior Member
 
Registered: Jul 2003
Location: Indiana
Distribution: Mandrake Slackware-current QNX4.25
Posts: 1,802

Rep: Reputation: 47
Correction:
The Debian equivalent to chkconf is
sysv-rc-conf
or
ksysv

The Debian Reference explains the boot process and runlevels.
 
Old 03-13-2006, 08:02 AM   #7
doublejoon
Member
 
Registered: Oct 2003
Location: King George, VA
Distribution: RHEL/CentOS/Scientific/Fedora, LinuxMint
Posts: 370

Rep: Reputation: 44
/usr/sbin/update-rc.d
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Writing init script for Firestarter on updated Fedora 1 (today) lrt2003 Fedora 5 04-18-2004 02:58 PM
Kernal Panic: No init found. Try passing init= option to kernel raees Linux - General 12 03-18-2004 11:10 PM
firestarter echo flood in init mode 3 (text) wizel Linux - Networking 4 03-17-2004 12:52 PM
error: No init found. Try passing the init= option to the Kernel neylitalo Linux - Laptop and Netbook 3 01-22-2004 09:34 PM
error "Kernel panic: No init found. Try passing init= option Anauj0101 Linux - Newbie 3 05-06-2003 10:18 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:20 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration