LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 06-16-2011, 01:26 AM   #1
deepmala8
LQ Newbie
 
Registered: May 2011
Posts: 14

Rep: Reputation: 0

I have installed APF firewall on my system but now all the ping,rloging has stopped in both way between client and server.How to add ping and rlogin rules to the iptables.
one more question is the in apf confihuration file the
IG_TCP_CPORTS=" " definition is to define the incoming facility to the ports which i wan to allow access or vice versa.

On adding trusted host in allow_hosts.apf it is still not allowing rlogin from specific ip address.

tcp:in:d=513:s=192.168.103.103


I am installing apf on powerpc8560 processor and following errors has reported ,minor errors

/etc/apf/apf: line 1: tr: command not found
/etc/apf/apf: line 1: tr: command not found
hostname: Host name lookup failure
apf(16431): {glob} flushing & zeroing chain policies
hostname: Host name lookup failure
apf(16431): {glob} firewall offline
/etc/apf/apf: line 1: tr: command not found
hostname: Host name lookup failure
apf(16468): {glob} activating firewall
/etc/apf/vnet/vnetgen: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} determined (IFACE_IN) eth2 has address 192.168.103.143
hostname: Host name lookup failure
apf(16508): {glob} determined (IFACE_OUT) eth2 has address 192.168.103.143
hostname: Host name lookup failure
apf(16508): {glob} loading preroute.rules
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} loading bt.rules
hostname: Host name lookup failure
apf(16508): {glob} SET_REFRESH is set to 10 minutes
hostname: Host name lookup failure
apf(16508): {glob} loading allow_hosts.rules
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} loading log.rules
hostname: Host name lookup failure
apf(16508): {glob} virtual net subsystem disabled.
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} loading main.rules
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 86: [: : integer expression expected
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} loading postroute.rules
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
/etc/apf/firewall: line 1: tr: command not found
hostname: Host name lookup failure
apf(16508): {glob} default (egress) output accept
hostname: Host name lookup failure
apf(16508): {glob} default (ingress) input drop
/etc/apf/apf: line 1: tr: command not found
/etc/apf/apf: line 159: [: : integer expression expected
hostname: Host name lookup failure
apf(16468): {glob} firewall initalized
hostname: Host name lookup failure

Last edited by unSpawn; 06-16-2011 at 06:28 AM. Reason: //Same topic question merge
 
Old 06-16-2011, 10:12 AM   #2
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
Hi,

You need to allow OUTBOUND TCP ports too!
I think it's EG_TCP_CPORTS="your port number used" (513 ?)

then restart APF: apf -r

That was in my case when I needed some port used not standard number.
 
Old 06-16-2011, 11:00 PM   #3
deepmala8
LQ Newbie
 
Registered: May 2011
Posts: 14

Original Poster
Rep: Reputation: 0
Thanks for reply.........i have also mentioned some error occurring during installation on powerpc 8560.
 
Old 06-17-2011, 05:46 AM   #4
lithos
Senior Member
 
Registered: Jan 2010
Location: SI : 45.9531, 15.4894
Distribution: CentOS, OpenNA/Trustix, testing desktop openSuse 12.1 /Cinnamon/KDE4.8
Posts: 1,144

Rep: Reputation: 217Reputation: 217Reputation: 217
yes, I can see the output
Code:
/etc/apf/apf: line 1: tr: command not found
and some subsequent 'tr command not found' errors which is obviously needed by APF (linux-tr-command).
I don't know your PowerPC 8560 but besides that it's more important which system is running (can you post "uname -a" or some details) and how/why there is no "tr" available.
Maybe a simple 'installation of tr' will help, but I'm not familiar with your system to tell how.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
apf firewall liang3391 Linux - Security 3 05-25-2009 10:22 AM
APF firewall bytez Linux - Software 1 09-16-2006 05:54 AM
APF Firewall Rule Help embsupafly Linux - Security 1 03-08-2005 11:00 PM
APF firewall binumvk Linux - Security 2 10-14-2004 05:12 AM
APF Firewall BlackRain Linux - Security 2 06-12-2003 08:40 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 12:56 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration