Re: [cobalt-users] cron errors after gShield firewall install

["Tarun Dua" <tarundua@xxxxxxxxxxxx>]

hope you loaded the required kernal modules for iptables
use lsmod to check whether the required iptables related *.o modules are
loaded or not.
lsmod output should show similar output.

ipt_state               1152   2  (autoclean)
ipt_LOG                 3984   9  (autoclean)
ipt_REJECT              3552   9  (autoclean)
ipt_limit               1488   3  (autoclean)
iptable_mangle          2256   0  (autoclean) (unused)
iptable_nat            18224   1  (autoclean) [ip_nat_ftp]
ip_conntrack           16944   3  (autoclean) [ip_nat_ftp ip_conntrack_ftp
ipt_state iptable_nat]
iptable_filter          2256   0  (autoclean) (unused)
ip_tables              11392   9  [ipt_state ipt_LOG ipt_REJECT ipt_limit
iptable_mangle iptable_nat iptable_filter]

Its not difficult :) you can definitely try to configure the iptables
yourself with logging instead of using gshield.

Regards
--
Tarun Dua
Sr. Exec. System Administrator
------------------------------------------------
Pugmarks InterWeb Pvt. Ltd. INDIA Tel: (172) 622-753, 54, 55 Fax: 91 (172)
645-906
Pugmarks Inc. USA Tel: (630) 571-0699, Fax: (630) 571-0642
http://www.pugmarks.net
> Hiya again :)
>
> after trying PMFirewall on my RaQ550 (wich doesn't work with iptables) I
> installed gShield firewall.
>
> Everything's working fine on the firewall part but I get cron.hourly
> mails about iptables..
>
> This is the error I'm getting:
>
> iptables: Table does not exist (do you need to insmod?)
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
> iptables: No chain/target/match by that name
>
> If I disable the firewall the error's are gone but when I re-enable it
> the messages return.
>
> In my /etc/cron.hourly there's a file called log_traffic
> and this is in it:
>
> # Update the accounting rules and the ipchains/tables config file if [
> $TABLES ]; then
>         echo "# $FWCONFIGFILE
> # This file is automatically generated by log_traffic.
> # Any manual changes will be lost
> $IPTABLES -N acctin > /dev/null 2>&1
> $IPTABLES -N acctout > /dev/null 2>&1
> $IPTABLES -F acctin
> $IPTABLES -F acctout
> $IPTABLES -I INPUT 1 -j acctin
> $IPTABLES -I OUTPUT 1 -j acctout" > $FWCONFIGFILE
> else
>         echo "# $FWCONFIGFILE
> # This file is automatically generated by log_traffic.
> # Any manual changes will be lost
> $IPCHAINS -N acctin
> $IPCHAINS -N acctout
> $IPCHAINS -F acctin
> $IPCHAINS -F acctout
> $IPCHAINS -I input 2 -j acctin
> $IPCHAINS -I output 2 -j acctout" > $FWCONFIGFILE
>
> now, I don't get it.. :P
>
> It seems that the firewall clears the statements and the traffic log
> uses some statements???