Снова rfw :(

GoSH · Сообщение **GoSH** » Вс авг 07, 2005 17:47

Не создаются правила...

cat rfw5.cfg

rfw_name=127.0.0.1

sudo_path=
shell_path=sh
firewall_path=

firewall_flush_cmd=ipfw -f flush

#firewall_type=local

core_host=192.168.222.7
core_port=11758
rfw_login=init
---------------------------------

Правила фаервола:
1 1 1 0 0
/sbin/ipfw add RULE_ID allow ip from UIP/UBITS to any
/sbin/ipfw delete RULE_ID
rfw_password=init
1
---------------------------------
Форум читал...испробывал все методы.. и в конфиге rfw не прописывать путь к ipfw...
и пробывал не прописывать в настройка фаервола /sbin/ipfw add...и т.д.

Есть ещё варианты?

Заранее спасибо!

spec · Сообщение **spec** » Вс авг 07, 2005 18:04

А логи привести?

GoSH · Сообщение **GoSH** » Вс авг 07, 2005 18:40

main.log:

Info : Aug 06 19:07:21 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn: Connection from: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Connection terminated by peer
Info : Aug 06 19:07:29 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn: Connection from: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Warn : Aug 06 19:07:44 RPCConn[SSL]<gosh@192.168.121.21>: Socket error! Session closed
-------------------------------------------------
radius_main.log

Info : Aug 06 19:07:21 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn: Connection from: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Connection terminated by peer
Info : Aug 06 19:07:29 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn: Connection from: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Warn : Aug 06 19:07:44 RPCConn[SSL]<gosh@192.168.121.21>: Socket error! Session closed
-----------------------------------------

gtk · Сообщение **gtk** » Вс авг 07, 2005 19:02

GoSH писал(а):main.log:

Info : Aug 06 19:07:21 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn: Connection from: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Connection terminated by peer
Info : Aug 06 19:07:29 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn: Connection from: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Warn : Aug 06 19:07:44 RPCConn[SSL]<gosh@192.168.121.21>: Socket error! Session closed
-------------------------------------------------
radius_main.log

Info : Aug 06 19:07:21 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn: Connection from: 192.168.121.21:3564
Info : Aug 06 19:07:21 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Connection terminated by peer
Info : Aug 06 19:07:29 RPCServer@192.168.222.7: Client connecting: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn: Connection from: 192.168.121.21:3565
Info : Aug 06 19:07:29 RPCConn[SSL]<gosh@192.168.121.21>: Access granted to [SSL]<gosh@192.168.121.21> (UID: 1)
Warn : Aug 06 19:07:44 RPCConn[SSL]<gosh@192.168.121.21>: Socket error! Session closed
-----------------------------------------

Запусти rfw в консоли, и покажи что оно пишет.

GoSH · Сообщение **GoSH** » Вс авг 07, 2005 19:05

Notice: Aug 06 20:03:09 UTM5 RFW: Version 5.1.10-001-bsd starting
Notice: Aug 06 20:03:09 RFW Config: Processing config file: /netup/utm5/rfw5.cfg
Info : Aug 06 20:03:09 RFW URFA[plugin]: Worker thread created
Info : Aug 06 20:03:09 RFW URFA[plugin]: [worker]: Thread created
?Debug : Aug 06 20:03:09 RFW URFA[plugin]: Sending name: 127.0.0.1
?Debug : Aug 06 20:03:09 RFW URFA[plugin]: Got ping from core. Sending reply...

gtk · Сообщение **gtk** » Вс авг 07, 2005 19:06

GoSH писал(а):Notice: Aug 06 20:03:09 UTM5 RFW: Version 5.1.10-001-bsd starting
Notice: Aug 06 20:03:09 RFW Config: Processing config file: /netup/utm5/rfw5.cfg
Info : Aug 06 20:03:09 RFW URFA[plugin]: Worker thread created
Info : Aug 06 20:03:09 RFW URFA[plugin]: [worker]: Thread created
?Debug : Aug 06 20:03:09 RFW URFA[plugin]: Sending name: 127.0.0.1
?Debug : Aug 06 20:03:09 RFW URFA[plugin]: Got ping from core. Sending reply...

cat /var/log/sudo.log ?

GoSH · Сообщение **GoSH** » Вс авг 07, 2005 19:53

Aug 6 20:25:40 : root : TTY=ttyp0 ; PWD=/usr/local/etc/utm ; USER=root ;
COMMAND=/sbin/ipfw /sbin/ipfw add 5001 allow ip from 192.168.222.75/32 to any

гм... /sbin/ipfw два раза...

только даже когда из настроек фаервола убираю /sbin/ipfw... всё равно...тоже самое..

GoSH · Сообщение **GoSH** » Вс авг 07, 2005 20:05

всё...разобрался...
извеняюсь за беспокойство...