Hi All,

Just a quick question....

I am trying to repair one of the linux boxes we have at work and am running into a problem.

Our firewall will not start for some odd reason and I am working remotely and unable to see the error message the firewall throws up at startup.

How can I log everything the machine says on start up? Ive looked at the normal log files and cant find anything on this.

Thanks for any help you can provide !!!!


- Ryan

What does dmesg show?

What firewall are you using?

If you are using iptables or ipchains then what are you using to add the rules? Is it a custom script?

Which distro are you using?

Some more information would help to diagnose your problem.

Thanks for the quick reply!

We are using iptables under Gentoo Linux. The rules where added before my time at the company, In fact I have been with the company less then a week .

Everything was working great until Friday afternoon when the internet to all of the systems on the network went down. After about 4 hours the Gentoo box came back online, However the windows boxes did not. We are running on a T1 line with static IPs for the servers and a mix of DHCP and Static IPs for the workstations.

The windows boxes can ping the Gentoo box, And the Gentoo Box can ping the windows boxes, However the windows boxes are still without internet.

It may also help to note that this server uses 4 NICs, I have only a vague idea why. We do have a field offices that connect to an NT box we have via this Gentoo server, However since the internet went down, They are unable to get in as well.

Check the /etc/rc.* and /etc/init.d/* files for scripts that are setting iptables rules. You can then run it manually to see why it is failing. If there are no errors then try posting the script to see if we can spot anything.

David,

Thank you again!!

When I ran the script I got errors...

Using Data from /etc/conf.d/firewall instead of current config.
Proforming Sanity Checks .. FAILED
Fatel : Network Address must be in dotted decimal format in PERMIT

Any clues, Its greek to me as I am semi new to linux.

- Ryan

It looks like it is trying to take the configuration information from the file /etc/conf.d/firewall - somewhere in that file is probably a section where you can specify your ip address - is this set to the ip address of the system? If you are unsure then post the contents of /etc/conf.d/firewall

David,

Thank you !!!!! I have managed to get it back up with the info you provided.



- Ryan

No problem. Good to see you got it fixed so easily