I have just installed 11.1 and the Suse Firewall is enabled by default.
When I change my network setup, YAST seems to be hanging forever at “writing firewall settings”.
Has anyone seen this problem?
I have the same problem. I don’t know whether it is part of a wider problem I am facing.
I have installed 11.1 on an advent 9315 (which has been described in other fora as the most linux unfriendly laptop ever built) with acpi=off and noapic.
I have a variety of connection issues. I can connect to the google homepage (and a few other pages) using firefox but, in general I seem unable to connect to many other pages.
Also I cannot connect to the online update or indeed any of the other opensuse sites including this one and the various repositories (I am typing this on another computer).
I am unable to explain the inconsistency (connection to some sites but not key ones).
Any comments would be gratefully appreciated.
cjbrathw,
Sorry I don’t have an answer for you. Personally, I re-build SuSE boxes or leave the FW down when changing networks.
pathematica,
Your problem sounds completely different than the problems described by the OP… I wouldn’t be surprised if you’re behind a Proxy firewall and maybe even a MS Proxy firewall(typically ISA). If this is the case, you should know that a Proxy FW at the network perimeter functions very differently than cheaper, “window screen” firewalls… Proxies terminate connections and then create new connections on behalf of a Host while “window screen” firewalls merely filter (allowing the original connection through). Search for the numerous threads about Proxy firewall solutions and <maybe> you’ll be successful.
Good Luck, both of you…
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
If I’m manually changing settings on 11.1 there is a pause there for me,
but not a long one. I always leave the Firewall up otherwise and have
never had a problem like that was substantial, but I only ever see the
firewall settings being written when using manual setup, which usually
means I’m on a desktop and not changing networks regularly (that’s what
laptops, and Network Manager, are for).
You can try disabling the firewall but I haven’t seen this before. I
guess we can keep waiting to see if anybody else has this issue.
Good luck.
cjbrathw wrote:
> I have just installed 11.1 and the Suse Firewall is enabled by default.
> When I change my network setup, YAST seems to be hanging forever at
> “writing firewall settings”.
> Has anyone seen this problem?
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFJWEb63s42bA80+9kRApadAJ0XDSdd58p0TSHi3RTCVyfQLMEu/ACeNUFz
shpEkSFU4WsLOveJUttW+VA=
=HQRk
-----END PGP SIGNATURE-----
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
pathematica, I agree here. This doesn’t sound similar really. The
host-based firewall in Linux is not likely to be related to your
problems here. To verify run the following command as ‘root’:
rcSuSEfirewall2 stop
Perform your tests… notice things still work poorly, and rule out the
firewall. Turn it back on too, by the way:
rcSuSEfirewall2 start
The reason I believe this isn’t related is that the firewall only blocks
incoming traffic that is not part of an established connection. As you
are having issues with fully-established connections this shouldn’t be
related, and my 11.1 box doesn’t have issues like this at all with the
firewall up.
Good luck.
tsu2 wrote:
> cjbrathw,
> Sorry I don’t have an answer for you. Personally, I re-build SuSE boxes
> or leave the FW down when changing networks.
>
> pathematica,
> Your problem sounds completely different than the problems described by
> the OP… I wouldn’t be surprised if you’re behind a Proxy firewall and
> maybe even a MS Proxy firewall(typically ISA). If this is the case, you
> should know that a Proxy FW at the network perimeter functions very
> differently than cheaper, “window screen” firewalls… Proxies terminate
> connections and then create new connections on behalf of a Host while
> “window screen” firewalls merely filter (allowing the original
> connection through). Search for the numerous threads about Proxy
> firewall solutions and <maybe> you’ll be successful.
>
> Good Luck, both of you…
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
iD8DBQFJWEeh3s42bA80+9kRAibYAJ9/0gL0SA63cZh9tabYUDHGjvN7owCfV82e
s2je+ZQmE9m61mGTmgZZ6bY=
=9VG9
-----END PGP SIGNATURE-----