UTM+Mikrotik+RFW

[Puzan_aga]

Добрый день. Подскажите пожалусто все сделал по статье http://www.x-drivers.ru/content/view/871/53/

В итоге в логах пишется такая фигня. И правела в Mikrotik не отправлются.

Вот часть лога:

Код: Выделить всё

?Debug : Jul 21 10:01:09 StreamFirewall: Got ping from core. Sending reply...
 Info  : Jul 21 10:01:29 UTM5 Logger: New ` Info  : ' stream: /netup/utm5/log/rfw.log
 Info  : Jul 21 10:01:29 UTM5 Logger: New `?Debug : ' stream: /netup/utm5/log/rfw.log
 Info  : Jul 21 10:01:29 UTM5 Logger: New `?Debug : ' stream: /netup/utm5/log/rfw.log
 Info  : Jul 21 10:01:29 StreamConnection: Connection thread started. Peer 127.0.0.1:12758
 Info  : Jul 21 10:01:29 StreamConnection: Connection thread started. Peer 127.0.0.1:12758
?Debug : Jul 21 10:01:29 StreamConnection: Connection using TCP socket
?Debug : Jul 21 10:01:29 StreamConnection: System message recived
?Debug : Jul 21 10:01:29 StreamConnection: Challenge response sent
?Debug : Jul 21 10:01:29 StreamConnection: System message recived
 Info  &#58; Jul 21 10&#58;01&#58;29 StreamConnection&#58; Connection successfully authorized, user id <-1>
 Info  &#58; Jul 21 10&#58;01&#58;29 StreamConnection&#58; Connection successfully authorized, user id <-1>
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Sending name&#58; 127.0.0.1
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.29 list=allow comment="1" is done.
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.83 list=allow comment="1" is done.
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.182 list=allow comment="1" is done.
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.0.228 list=allow comment="1" is done.
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.228 list=allow comment="1" is done.
?Debug &#58; Jul 21 10&#58;01&#58;30 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 10&#58;01&#58;30 FWCntl&#58; dont_fork disabled. Don't wait child process ...  и т.д

Есди нужна еще какаенибуть информация то пишите.

Зарание большое вам спасибо!!

[Puzan_aga]

Покапался теперь другая проблема. Правила не добовляются в Mikrotik

Код: Выделить всё

Debug : Jul 21 11:49:11 StreamFirewall: Sending name: 127.0.0.1
?Debug : Jul 21 11:49:11 StreamFirewall: Got 'exec' command...
?Debug : Jul 21 11:49:11 FWCntl: dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.29 list=allow_ip comment=1 is done.
?Debug &#58; Jul 21 11&#58;49&#58;11 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.83 list=allow_ip comment=1 is done.
?Debug &#58; Jul 21 11&#58;49&#58;11 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.1.182 list=allow_ip comment=1 is done.
?Debug &#58; Jul 21 11&#58;49&#58;11 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; dont_fork disabled. Don't wait child process ... 
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; Executing FW rule&#58; /ip firewall address-list add address=10.0.0.228 list=allow_ip comment=1 is done.
?Debug &#58; Jul 21 11&#58;49&#58;11 StreamFirewall&#58; Got 'exec' command...
?Debug &#58; Jul 21 11&#58;49&#58;11 FWCntl&#58; dont_fork disabled. Don't wait child process ... 

[Puzan_aga]

Все разобрался. Можите удалить тему.

[parazit]

то есть все работает и авторизовываеться но проблема только в правилах? или что?
если да то попробуй в настройках---"Список брандмауэров"---сделать тип локальный, наименование 127.0.0.1 логин и пасс который указан в конфиге, ИП тоже 127.0.0.1

[Puzan_aga]

Проблема была в правах пользователя Mikrotik. Ему просто прав не хватало для выполнения данной команды.

[mig005]

у меня подобная ошибка, UTM не отправляет команды на mikrotik, при ручном запуске скрипта "/usr/local/bin/mikrotik_rfw.sh" конектица и команды срабатывают. Подскажите в каком файле данная ошибка?
rfw.log

Код: Выделить всё

?Debug : Jul 28 19:20:18 StreamFirewall: Got 'exec' command...
?Debug : Jul 28 19:20:18 FWCntl: dont_fork disabled. Don't wait child process ....
?Debug : Jul 28 19:20:18 FWCntl: Executing FW rule: /ip firewall address-list add address=192.168.0.50 list=allow_ip comment=1 is done.
?Debug &#58; Jul 28 19&#58;20&#58;18 FWCntl&#58; Executing command </usr/local/bin/mikrotik_rfw.sh>
 ERROR &#58; Jul 28 19&#58;20&#58;18 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
 ERROR &#58; Jul 28 19&#58;20&#58;18 FWCntl&#58; Error executing FW rule, errno <8> error <Exec format error>
?Debug &#58; Jul 28 19&#58;20&#58;36 StreamFirewall&#58; Got ping from core. Sending reply...
?Debug &#58; Jul 28 19&#58;21&#58;06 StreamFirewall&#58; Got ping from core. Sending reply...

main.log

Код: Выделить всё

Info  : Jul 28 19:19:08 RfwPlugin: final command: [/ip firewall address-list remove [find comment=1]]
 Info  : Jul 28 19:19:09 RfwPlugin: final command: [/ip firewall address-list add address=192.168.0.50 list=allow_ip comment=1]
 

---

Код: Выделить всё

web# uname -a
FreeBSD web.rf 7.2-RELEASE-p3 FreeBSD 7.2-RELEASE-p3 #0: Tue Aug 18 16:33:39 MSD 2009     root@web.rf:/usr/obj/usr/src/sys/myi386  i386

rfw5.cfg

Код: Выделить всё

rfw_name=127.0.0.1
core_host=127.0.0.1
core_port=12758
rfw_login=init
rfw_password=init
sync_flags=enable
firewall_path=/usr/local/bin/mikrotik_rfw.sh
log_level=3
log_file_main=/netup/utm5/log/rfw.log
log_file_debug=/netup/utm5/log/rfw.log
log_file_critical=/netup/utm5/log/rfw.log