Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
09-05-2006, 01:14 PM
|
#1
|
LQ Newbie
Registered: Jun 2006
Location: Grinnell, IA
Distribution: FC3, RH8
Posts: 5
Rep:
|
HELP, cannot reboot! Hangs at "Starting Firewall"
i recently had to add some new firewall rules blocking all incoming and outgoing tcp packets for port 6000-7000. After doing so, I went to reboot and it hangs while trying to apply iptables firewall settings. I try to enter interactive mode at boot by pressing "I", but it doesn't work.
I am using Fedora Core 3.
NOW WHAT?
Last edited by medic215; 09-05-2006 at 01:18 PM.
|
|
|
09-05-2006, 02:20 PM
|
#2
|
LQ Guru
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870
|
one thing you could do is boot your rescue cd, mount your / partition, and then remove the reference to iptables from the relevant startup file... if you have a startup script especially for iptables then just make it non-executable... sorry for not being able to be more specific, the thing is i don't have a clue about fedora... but i'm hoping this might at least push you in the right direction...
PS: i took a look at this: http://wiki.linuxquestions.org/wiki/IptablesFedora
so it seems the file you'd want to make non-executable is /etc/init.d/iptables
Last edited by win32sux; 09-05-2006 at 02:21 PM.
|
|
|
09-05-2006, 03:56 PM
|
#3
|
Senior Member
Registered: Dec 2003
Location: Shelbyville, TN, USA
Distribution: Fedora Core, CentOS
Posts: 1,019
Rep:
|
You can get into your setup without a boot cd. When the grub menu starts hit the key that will let you add additional arguements to the kernel. I believe the key is 'a'. You can then add the word 'single' to the line and you will enter into single mode.
If you were booting into graphical mode go to /etc/rc5.d/ after you successfully boot into single user mode. Look for a file with the word 'iptables' in it. It should be something like S92iptables. Rename the file to K92iptables (using whatever number is used in FC3).
Code:
mv S92iptables K92iptables
If you type 'exit' you should boot into run level 5 and then you can make changes to your firewall rules. Or you can just reboot. Don't forget to rename the file back to what it used to be when you are done.
|
|
|
09-05-2006, 03:58 PM
|
#4
|
LQ Newbie
Registered: Jun 2006
Location: Grinnell, IA
Distribution: FC3, RH8
Posts: 5
Original Poster
Rep:
|
Thank you very much for your reply. Whil waiting fro a reply on here, pulling my hair out, and searching the internet, I let it sit in the spot where it stalls. After about 1/2 hr it booted on it's own. Dunno why it took so long. When I go through webmin to make changes to Iptables, it allies new configurations in a normal amount of time. Thank you again, I will read through that site anywy to see if it can shed some light on this issue.
|
|
|
All times are GMT -5. The time now is 08:38 PM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|