Firewall Issue ?

Discussion in 'General' started by cerberof, Apr 12, 2006.

  1. cerberof

    cerberof New Member

    I upgraded to 2.2.1 (great work), and when I try to add a new port/protocol to firewall I can see it in the panel but when I make iptables -v -L -n don't appear. I restarted the firewall several times but nothing. :) Any idea ? because I cannot use snmp, port 161 jajajaja. Ispconfig is runninng in Fedora Core IV. Thanks
     
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Please have a look at the Firewall config file:

    /etc/Bastille/bastille-firewall.cfg

    Has ISPConfig enabled the port there?
     
  3. cerberof

    cerberof New Member

    Yes, and It's working.
    UDP_PUBLIC_SERVICES="53 161" # MINIMAL/SAFEST
    but I released that I have a port twice under
    /etc/Bastille/bastille-firewall.cfg and in Ispconfig. I deleted the port in Firewall (Administration-services-firewall) but keeps remaining in bastille-firewall.cfg .
    TCP_PUBLIC_SERVICES="21 22 25 53 80 81 110 443 4315 4315
    Is just ispconfig couldn't remove the port 4315 under bastille-firewall.cfg.
    Then, only to make a test I added a new port under firewall rules
    Test 6958 tcp yes
    but nothing happened in bastille-firewall.cfg .
    Must I edit by hand this file when I want to add or remove a new firewall rule? Is this a bug ?
    Thanks in advance.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    The firewall must not be edited by hand and it is not a bug in ISPConfig. But maybe its a bug / instability in PHP 5.1.2 that I'am currently hunting :) Plesae run:

    strace /root/ispconfig/php/php -q /root/ispconfig/scripts/writeconf.php

    Did you get an segfault?
     
  5. till

    till Super Moderator Staff Member ISPConfig Developer

  6. cerberof

    cerberof New Member

    Sorry for the delay and thanks for the answer.
    I did strace /root/ispconfig/php/php -q /root/ispconfig/scripts/writeconf.php
    and run ok. Maybe because I have php-5.0.5-2.1.
    Meanwhile, It's ok if if I don't to change any firewall rule, but if I must ? :(
    I 'll have to wait ;)
     
  7. falko

    falko Super Moderator ISPConfig Developer

    I think you're referring to your main PHP. ISPConfig comes with its own PHP (5.1.2) which is used only by ISPConfig.
     

Share This Page