LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Distributions > Mandriva
User Name
Password
Mandriva This Forum is for the discussion of Mandriva (Mandrake) Linux.

Notices

Reply
 
Search this Thread
Old 05-31-2004, 05:58 AM   #1
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Rep: Reputation: 15
Firewall settings aren't saved


Hi everybody.

I'm having a problem with my firewall settings in Mandrake 9.2. Everytime I change something to it (for example: enabling a port like 80/tcp), the next time I check, it is set back to it's original settings.

I've had this problem at every Linux distribution I've ever tried. Does somebody know what's the problem? I've heard you should change it in some files, instead of in the control center, but that neither works.

Thanks in advance.
 
Old 05-31-2004, 06:47 AM   #2
otish1000c
Member
 
Registered: May 2004
Location: Pennsylvania, USA
Distribution: dual boot.... Mandrake 10.0OE/10.xcooker
Posts: 611

Rep: Reputation: 30
before you make the changes you should stop the firewall service, then restart it after you make the changes for them to stick. (i'm assuming you're using shorewall) if so, before making any changes, in terminal as root type............

Code:
service shorewall stop
enter

to restart it, type...............

Code:
service shorewall start
enter

or:
Code:
service shorewall restart
enter

to check out the status of shorewall, type.........

Code:
service shorewall status
enter

otis
 
Old 05-31-2004, 07:11 AM   #3
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Original Poster
Rep: Reputation: 15
Thanks for the reply, but I'm having a problem with restarting shorewall.
This is what it says:

[root@localhost src]# shorewall start
Loading /usr/share/shorewall/functions...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Starting Shorewall...
Loading Modules...
Initializing...
Shorewall has detected the following iptables/netfilter capabilities:
NAT: Available
Packet Mangling: Available
Multi-port Match: Available
Connection Tracking Match: Available
Determining Zones...
Zones: net masq loc
Validating interfaces file...
Error: Duplicate Interface eth0
Terminated


Any idea what's going on?
 
Old 05-31-2004, 07:20 AM   #4
otish1000c
Member
 
Registered: May 2004
Location: Pennsylvania, USA
Distribution: dual boot.... Mandrake 10.0OE/10.xcooker
Posts: 611

Rep: Reputation: 30
you need to type..................

service shorewall start

also, you don't have 2 eth0 cards, do you? the last error seems to tell me it's detecting more than 1 eth0 entry in your interfaces.conf file. if you get the same error with the above command, please post the contents of...........

/etc/shorewall/interfaces

otis
 
Old 05-31-2004, 07:31 AM   #5
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Original Poster
Rep: Reputation: 15
I've tried with 'service shorewall start (and also with restart), but it says the same.
Below the contents of /etc/shorewall/interfaces (after the comments)

#ZONE INTERFACE BROADCAST OPTIONS
net eth0 detect
masq eth0 detect
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

He does detect two eth0 configurations, but I think the second is the loopback interface, which
(I think) is normal for Linux.

I do have three profiles (default + two users) in my internet configuration screen. Could that be the problem?
 
Old 05-31-2004, 07:37 AM   #6
otish1000c
Member
 
Registered: May 2004
Location: Pennsylvania, USA
Distribution: dual boot.... Mandrake 10.0OE/10.xcooker
Posts: 611

Rep: Reputation: 30
2 things to try. since i never had multiple internet profiles set up, i'm sorta just guessing on #2.....

1. stop shorewall, comment out the line that says "masq eth0 detect" so it looks like this........

Code:
#masq eth0 detect
save, restart shorewall & see if that fixed it. if not..............

2. i think you'll need to edit your /etc/shorewall/users & /etc/shorewall/usersets config files to define what users are allowed internet access. like i said, i've never done this, but it looks pretty much self explanatory in the instructions section.

otis
 
Old 05-31-2004, 07:39 AM   #7
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Original Poster
Rep: Reputation: 15
Never mind, it works!. I had to remove the second line (masq eth0 detect) from it.

If the firewall problem is solved, I don't now yet. Some of the ports I specify (like 80/tcp) go away (however I think it's allowed, because Apache runs fine), others (like 13666/tcp) stay in the list, but I think it's working.

Thanks for your help, otish. You really saved my day.
 
Old 05-31-2004, 07:51 AM   #8
otish1000c
Member
 
Registered: May 2004
Location: Pennsylvania, USA
Distribution: dual boot.... Mandrake 10.0OE/10.xcooker
Posts: 611

Rep: Reputation: 30
go to Gibson Research to test out the firewall. scroll down to "hot spots" & click the "shields up" link. click "proceed" then choose the "all service ports" scanning option. let it scan. it takes a litle while depending on your connection speed. all green (stealth) is the best result you can hope for. all blue (closed), or a combo of blue & green is good, but not as good as stealth. any red (open) needs attention. you can click on any square on the grid for info on that particular port & what to do about it. be warned, the guy (Steve Gibson) is a bit of a fanatic about internet security, so don't be too alarmed by all his dire warnings. and, it's pretty much a Windows-centric site as far as how to configure ports & stuff. but, it's prolly the best security test out there.

otis
 
Old 05-31-2004, 07:58 AM   #9
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Original Poster
Rep: Reputation: 15
Thank you for telling me this. Very interesting site. I did the test. These are the results:

2 Ports Open
35 Ports Closed
1019 Ports Stealt

This is quite good, I think. The 2 open ports are Microsoft ports (I'm shocked and amazed ), so I better pay attention to them.

Thanks again for all your help, Otish.
 
Old 05-31-2004, 08:43 AM   #10
Dave Farrance
Member
 
Registered: May 2004
Location: UK
Distribution: Mandrake 10.0
Posts: 47

Rep: Reputation: 15
On the subject of firewall settings in MDK9.2. The Mandrake Control Center's firewall admin window enables both the incoming and outgoing protocols for each port at the same time, which is not very good.

MDK10, on the other hand, does it better. All outgoing protocols are enabled, so if you disable all ports in the firewall admin, that just disables all the incoming protocols, which is fine for an Internet client PC.
 
Old 05-31-2004, 10:47 AM   #11
Error1312
Member
 
Registered: Feb 2004
Location: Belgium
Distribution: Ubuntu 10.04 Lucid Lynx
Posts: 140

Original Poster
Rep: Reputation: 15
Thanks for the advice Dave, but I'll stick to 9.2 for a while. It's the first time a Linux install runs so smooth on my computer and I've heard their are still a lot of problems with 10.0.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
alsa settings not saved darkleaf Linux - Software 4 03-11-2005 11:43 AM
application settings not saved in 9.2 gavinbeatty Suse/Novell 0 12-09-2004 04:43 PM
Where are settings for apps saved? vbmark Mandriva 1 11-19-2004 08:58 AM
NIC settings not being saved supa2003 Linux - Networking 4 01-17-2004 07:20 PM
KPPP settings are saved where? jherold Linux - Networking 1 09-05-2003 04:15 PM


All times are GMT -5. The time now is 04:55 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration