firewall + mandrake update = bad, etc.

yocompia · 05-21-2003, 06:10 PM

i've setup mdk 9.0 with a guarddog firewall and i can't access the mandrakeupdate updates. whenever i try to do this there is a mention of dropped packets and grpmi runs really slow for ~2 min., then dictates that the site couldn't be contacted. i believe this is b/c of some firewall setting, but don't know what the deal is. here's a syslog of what was going on:

May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....1mdk.i586.rpm
May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....2mdk.i586.rpm
May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....2mdk.i586.rpm
May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....2mdk.i586.rpm
May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....1mdk.i586.rpm
May 21 16:53:34 localhost MandrakeUpdate[2707]: Installing package ftp://ftp.stealth.net/pub/mirrors/ft....1mdk.i586.rpm

May 21 16:53:38 localhost kernel: DROPPED IN= OUT=ppp0 SRC=MY.IP.AD.RS DST=206.252.192.18 LEN=52 TOS=0x00 PREC=0x00 TTL=64 ID=14338 DF PROTO=TCP SPT=1046 DPT=55185 SEQ=3975041913 ACK=0 WINDOW=5808 RES=0x00 SYN URGP=0 OPT (020405AC0101040201030300)

May 21 16:53:59 localhost last message repeated 3 times

May 21 16:54:00 localhost CROND[2900]: (root) CMD ( /usr/share/msec/promisc_check.sh)
May 21 16:54:00 localhost CROND[2903]: (root) CMD ( /usr/share/msec/promisc_check.sh)

i also have a problem with crond running promisc_check.sh EVERY minute (as noted above). the only place i found a reference to this script is in /etc/cron.d/msec, where it lists

*/1 * * * * root /usr/share/msec/promisc_check.sh

but i would suppose this would only run it hourly at hour+1minute. what gives?

manthram · 05-21-2003, 06:32 PM

check your firewall rules. if you are using iptables you can check the rules by 'iptables -L'

the promisc_check is scheduled to run every minute that is what the script says. if you want it to run every first mt of the hr you have to have this

* */1 * * * root /usr/share/msec/promisc_check.sh