Results 1 to 5 of 5

Thread: openSuSE 11.1 iptables and Yast (System services)

  1. #1

    Default openSuSE 11.1 iptables and Yast (System services)

    Every time you turn on the system do not apply the rules established in SuSEfirewall2 via Yast

    when you turn on the system see:
    Code:
    iptables -L
    Chain INPUT (policy DROP)
    target     prot opt source               destination
    ACCEPT     all  --  anywhere             anywhere
    ACCEPT     all  --  anywhere             anywhere            state ESTABLISHED
    ACCEPT     icmp --  anywhere             anywhere            state RELATED
    
    Chain FORWARD (policy DROP)
    target     prot opt source               destination
    
    Chain OUTPUT (policy ACCEPT)
    target     prot opt source               destination
    ACCEPT     all  --  anywhere             anywhere
    
    Chain reject_func (0 references)
    target     prot opt source               destination
    REJECT     tcp  --  anywhere             anywhere            reject-with tcp-reset
    REJECT     udp  --  anywhere             anywhere            reject-with icmp-port-unreachable
    REJECT     all  --  anywhere             anywhere            reject-with icmp-proto-unreachable
    if i'am go to yast -> System services and first off
    chkconfig SuSEfirewall2_init
    then run
    chkconfig SuSEfirewall2_setup

    Rules soda SuSEfirewall2 immediately applied and everything works

    what could be the problem?
    how to make the rule to apply when i'am turn on your computer?

  2. #2
    platinum NNTP User

    Default Re: openSuSE 11.1 iptables and Yast (System services)

    > Rules soda SuSEfirewall2 immediately applied and everything works
    >
    > what could be the problem?
    > how to make the rule to apply when i'am turn on your computer?


    maybe i do not understand the question...to, me it looks like the
    firewall is running when you start..

    what is the "Rules soda"? is that a NEW rule you want to add? and,
    think it is added after you run chkconfig, or what??

    to make sure your firewall is up with each boot, go
    YaST > Security and Users > Firewall > Service Start section, select
    "Enable Firewall Automatic Starting" > "next"

    --
    platinum

  3. #3

    Default Re: openSuSE 11.1 iptables and Yast (System services)

    when my computer starts running a firewall but not with those rules that I configured it in Yast (autostart firewall enabled at system startup)
    have to restart these services manually:
    SuSEfirewall2_init
    SuSEfirewall2_setup
    Yast> System> System Services
    system does not see and does not apply rules that I have done in Yast> Security> Firewall :-(

  4. #4

    Default Re: openSuSE 11.1 iptables and Yast (System services)

    seems figured out left to find out which file I need to write the command rcSuSEfirewall2 start so that it loads the firewall settings after applying for credit default rules iptables?

  5. #5
    platinum NNTP User

    Default Re: openSuSE 11.1 iptables and Yast (System services)

    sorry, i don't know enough about firewalls to help you
    more...hopefully someone else can and will..

    however:

    > seems figured out left to find out which file I need to write the
    > command rcSuSEfirewall2 start so that it loads the firewall settings
    > after applying for credit default rules iptables?


    when are you applying those rules?

    i ask because unless you have changed something you can look in your
    /etc/rc.d and see these are listed:

    SuSEfirewall2_init
    SuSEfirewall2_setup

    which means those two items ARE being run before you run them at a
    command line in runlevel 3 or 5..

    you can look in /etc/init.d/rc3.d and /etc/init.d/rc5.d and see if
    there is a link to to those two init/setup, if so then THAT is when
    the firewall is being started--BEFORE you can type to do it again..

    if you need to "apply for credit default rules" before starting the
    firewall, then then you need to do PRIOR to reaching runlevel 3 or 5
    during boot up..

    hope i'm making sense..

    [i have NO idea what "credit default rules" you need to apply, but
    think they can be set up in YaST, and just work (your hand off) before
    either runlevel 3 or 5 is reached..]

    --
    platinum

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •