на форуме нашел упоминание о подобной проблеме ... но тема умерла без ответа и решения ;( - rfw + Slackware от 18 апреля 2005г.
платформа - Slackware 10.1 (2.4.29, 2.6.12-4) + pptpd 1.3.0 + pppd 2.4.3
UTM5 - 5.1.10-008 - 5.1.10-014 (компиляция для Red Hat 7.3/9.0)
если тип маршрутизатора Local (локальный) все работает ... но если команды выполняються на Remote Cisco, то при запуске utm5_rfw он отрабатывает только 3 правила, после чего вылетает с ошибкой ...
----------------------------------------------------------------
# /netup/utm5/bin/utm5_rfw -f
Notice: Aug 16 00:32:05 RFW Config: Pid file found: /var/run/utm5_rfw.pid; Overwriting
Notice: Aug 16 00:32:05 UTM5 RFW: Version 5.1.10-001-linux starting
Notice: Aug 16 00:32:05 RFW Config: Processing config file: /netup/utm5/rfw5.cfg
Info : Aug 16 00:32:05 RFW URFA[plugin]: Worker thread created
Info : Aug 16 00:32:05 RFW URFA[plugin]: [worker]: Thread created
?Debug : Aug 16 00:32:05 RFW URFA[plugin]: Sending name: 192.168.0.6
?Debug : Aug 16 00:32:05 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 00:32:05 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.5> to remote cisco <192.168.0.6>
?Debug : Aug 16 00:32:05 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.5
Notice: Aug 16 00:32:06 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 16 00:32:06 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 16 00:32:06 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 00:32:06 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.5 any> to remote cisco <192.168.0.6>
?Debug : Aug 16 00:32:06 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 105 inet1 host 192.168.0.5 any
Notice: Aug 16 00:32:06 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 16 00:32:06 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 16 00:32:06 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 00:32:06 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.14> to remote cisco <192.168.0.6>
?Debug : Aug 16 00:32:06 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.14
*** glibc detected *** malloc(): memory corruption (fast): 0x080a50c8 ***
Killed
----------------------------------------------------------------
# cat /netup/utm5/log/debug.log
<<<####### ПОКУСАНО #######>>>
Info : Aug 16 00:31:50 RPCServer@0.0.0.0: [URFA: 2.3]: Ready to accept connections on 0.0.0.0:11758
Info : Aug 16 00:32:05 RPCServer@0.0.0.0: Client connecting: 127.0.0.1:49508
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT value FROM utm5_settings WHERE variable='web_session_timeout'
Info : Aug 16 00:32:05 RPCConn: Connection from: 127.0.0.1:49508
Notice: Aug 16 00:32:05 RPCConn: Service <init@127.0.0.1> is connecting
?Debug : Aug 16 00:32:05 UTM5 DBA: Group: -1 from 1
Info : Aug 16 00:32:05 RPCConn[SSL]<init@127.0.0.1>: Access granted to [SSL]<init@127.0.0.1> (UID: -1)
?Debug : Aug 16 00:32:05 RPCConn[SSL]<init@127.0.0.1>: SSL type requested: TLSv1(1)
?Debug : Aug 16 00:32:05 RPCConn[SSL]<init@127.0.0.1>: Call: 0x00a0
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: FW <192.168.0.6> inserted
Notice: Aug 16 00:32:05 ModMap: Sub-Module 'fw@192.168.0.6' inserted...
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,is_for_all,uid,group_id,tariff_id,rule_on,rule_off,router_id FROM firewall_rules WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: Ready to execute 2 FW rules. Force inet on
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5001> uid <1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <1> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 106 inet2 any host 192.168.0.5] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 106 inet2 any host 192.168.0.5]
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5001> uid <1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <1> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 105 inet1 host 192.168.0.5 any] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 105 inet1 host 192.168.0.5 any]
?Debug : Aug 16 00:32:05 ModFWMan: Ready to execute 2 FW rules. Force inet on
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5002> uid <2>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <2> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 106 inet2 any host 192.168.0.14] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 106 inet2 any host 192.168.0.14]
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5002> uid <2>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <2> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 105 inet1 host 192.168.0.14 any] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 105 inet1 host 192.168.0.14 any]
?Debug : Aug 16 00:32:05 ModFWMan: Ready to execute 2 FW rules. Force inet on
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5005> uid <5>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <5> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 106 inet2 any host 192.168.0.13] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 106 inet2 any host 192.168.0.13]
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5005> uid <5>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <5> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 105 inet1 host 192.168.0.13 any] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 105 inet1 host 192.168.0.13 any]
?Debug : Aug 16 00:32:05 ModFWMan: Ready to execute 2 FW rules. Force inet on
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5007> uid <7>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <7> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 106 inet2 any host 192.168.0.22] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 106 inet2 any host 192.168.0.22]
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5007> uid <7>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <7> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 105 inet1 host 192.168.0.22 any] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 105 inet1 host 192.168.0.22 any]
?Debug : Aug 16 00:32:05 ModFWMan: Ready to execute 2 FW rules. Force inet on
?Debug : Aug 16 00:32:05 DBCtx: SQL SELECT query: SELECT id,router_type,router_ip,login,password,router_comments FROM routers_info WHERE is_deleted='0'
<<<####### ПОКУСАНО #######>>>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5099> uid <99>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <100> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 106 inet2 any host 192.168.0.112] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 106 inet2 any host 192.168.0.112]
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Setting RULE_ID to <5099> uid <99>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting ACCOUNT_ID with value <100> original value <0>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting UBITS with value <32> original value <-1>
?Debug : Aug 16 00:32:05 ModFWMan: FW rule parse. Substituting EMAIL with value <> (obtained from user data)
?Debug : Aug 16 00:32:05 ModFWMan: Exec [access-template 105 inet1 host 192.168.0.112 any] on 3
?Debug : Aug 16 00:32:05 FW@192.168.0.6: Sending [access-template 105 inet1 host 192.168.0.112 any]
-Stats : Aug 16 00:32:06 FW@192.168.0.6: Stats for 1s. (uptime 1). Events: 110 (all 110); Errors: 1 (all 1)
?Debug : Aug 16 00:32:06 ModFWMan: FW <192.168.0.6> erased...
Notice: Aug 16 00:32:06 ModMap: Sub-Module 'fw@192.168.0.6' erased...
-Stats : Aug 16 00:32:06 FW@192.168.0.6: Stats: Uptime: 00:00:01. Events: 110; Errors: 1
?Debug : Aug 16 00:32:06 RPCConn[SSL]<init@127.0.0.1>: Call finished...
Warn : Aug 16 00:32:06 RPCConn[SSL]<init@127.0.0.1>: Session closed
?Debug : Aug 16 00:32:06 RPCConn[SSL]<init@127.0.0.1>: Session stored for UID -1 from <127.0.0.1>
?Debug : Aug 16 00:32:06 RPCConn[SSL]<init@127.0.0.1>: Session closed...
----------------------------------------------------------------
# cat /netup/utm5/log/main.log
<<<####### ПОКУСАНО #######>>>
Info : Aug 16 00:31:50 NFBuffer: Socket attached to 0.0.0.0:9996
Info : Aug 16 00:31:50 UTMCtx: License verification for <core:5.1.10-014-linux>
Warn : Aug 16 00:31:50 UTMCtx: License verification failed: no public key found
Info : Aug 16 00:31:50 RPCServer@0.0.0.0: [URFA: 2.3]: Ready to accept connections on 0.0.0.0:11758
Info : Aug 16 00:32:05 RPCServer@0.0.0.0: Client connecting: 127.0.0.1:49508
Info : Aug 16 00:32:05 RPCConn: Connection from: 127.0.0.1:49508
Notice: Aug 16 00:32:05 RPCConn: Service <init@127.0.0.1> is connecting
Info : Aug 16 00:32:05 RPCConn[SSL]<init@127.0.0.1>: Access granted to [SSL]<init@127.0.0.1> (UID: -1)
Notice: Aug 16 00:32:05 ModMap: Sub-Module 'fw@192.168.0.6' inserted...
-Stats : Aug 16 00:32:06 FW@192.168.0.6: Stats for 1s. (uptime 1). Events: 110 (all 110); Errors: 1 (all 1)
Notice: Aug 16 00:32:06 ModMap: Sub-Module 'fw@192.168.0.6' erased...
-Stats : Aug 16 00:32:06 FW@192.168.0.6: Stats: Uptime: 00:00:01. Events: 110; Errors: 1
Warn : Aug 16 00:32:06 RPCConn[SSL]<init@127.0.0.1>: Session closed
----------------------------------------------------------------
помогите пожалуйста ...
utm5_rfw + Slackware 10.1 и Remote Cisco
utm5_rfw + Slackware 10.1 и Remote Cisco
Последний раз редактировалось TEPbEP Вт авг 16, 2005 11:36, всего редактировалось 1 раз.
Код: Выделить всё
~# gdb /netup/utm5/bin/utm5_rfw
GNU gdb 6.3
Copyright 2004 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i486-slackware-linux"...(no debugging symbols found)
Using host libthread_db library "/lib/libthread_db.so.1".
(gdb) r -f
Starting program: /netup/utm5/bin/utm5_rfw -f
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
[Thread debugging using libthread_db enabled]
[New Thread 16384 (LWP 4135)]
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
(no debugging symbols found)
Notice: Aug 16 11:11:05 RFW Config: Pid file found: /var/run/utm5_rfw.pid; Overwriting
Notice: Aug 16 11:11:05 UTM5 RFW: Version 5.1.10-001-linux starting
Notice: Aug 16 11:11:05 RFW Config: Processing config file: /netup/utm5/rfw5.cfg
[New Thread 32769 (LWP 4138)]
[New Thread 16386 (LWP 4139)]
Info : Aug 16 11:11:05 RFW URFA[plugin]: Worker thread created
Info : Aug 16 11:11:05 RFW URFA[plugin]: [worker]: Thread created
?Debug : Aug 16 11:11:05 RFW URFA[plugin]: Sending name: 192.168.0.6
?Debug : Aug 16 11:11:05 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 11:11:05 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.5> to remote cisco <192.168.0.6>
?Debug : Aug 16 11:11:05 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.5
Notice: Aug 16 11:11:06 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 16 11:11:06 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 16 11:11:06 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 11:11:06 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.5 any> to remote cisco <192.168.0.6>
?Debug : Aug 16 11:11:06 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 105 inet1 host 192.168.0.5 any
Notice: Aug 16 11:11:06 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 16 11:11:06 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 16 11:11:06 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 16 11:11:06 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.14> to remote cisco <192.168.0.6>
?Debug : Aug 16 11:11:06 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.14
*** glibc detected *** malloc(): memory corruption (fast): 0x080a50c8 ***
Program received signal SIGABRT, Aborted.
[Switching to Thread 16386 (LWP 4139)]
0xb7c8def1 in kill () from /lib/libc.so.6
(gdb) bt
#0 0xb7c8def1 in kill () from /lib/libc.so.6
#1 0xb7df3bb1 in pthread_kill () from /lib/libpthread.so.0
#2 0xb7df3f2b in raise () from /lib/libpthread.so.0
#3 0xb7c8db24 in raise () from /lib/libc.so.6
#4 0xb7c8f3fd in abort () from /lib/libc.so.6
#5 0xb7cc076c in __libc_message () from /lib/libc.so.6
#6 0xb7cc9066 in malloc_printerr () from /lib/libc.so.6
#7 0xb7cc76a3 in _int_malloc () from /lib/libc.so.6
#8 0xb7cc67a3 in malloc () from /lib/libc.so.6
#9 0xb7ccc230 in strdup () from /lib/libc.so.6
#10 0xb7d0957c in gaih_inet () from /lib/libc.so.6
#11 0xb7d07b54 in getaddrinfo () from /lib/libc.so.6
#12 0xb7d3649d in rcmd_af () from /lib/libc.so.6
#13 0xb7d3732e in rcmd () from /lib/libc.so.6
#14 0x08052520 in RemoteFW::FWCntl::rsh ()
#15 0x080523fc in RemoteFW::FWCntl::fw_cisco ()
#16 0x08051cc4 in RemoteFW::URFAFirewall::fw_exec ()
#17 0x0804ea02 in RemoteFW::URFAFirewall::urfa_user_main ()
#18 0x0805758c in UTM::URFABase::urfa_worker ()
#19 0x08057700 in UTM::URFABase::urfa_restart_worker ()
#20 0xb7df154e in pthread_start_thread () from /lib/libpthread.so.0
#21 0xb7df15df in pthread_start_thread_event () from /lib/libpthread.so.0
#22 0xb7d1eb8a in clone () from /lib/libc.so.6
(gdb)
1. glibc 2.3.4
2. UTM 5.1.10-014 (rh9)
2. UTM 5.1.10-014 (rh9)
Код: Выделить всё
# /netup/utm5/bin/utm5_core -v
?Debug : Aug 16 12:31:05 Rehash: Rehash manager started
Notice: Aug 16 12:31:05 ModMap: Sub-Module 'rehash' inserted...
NetUP UTM billing system core. Compile date: Aug 9 2005 15:27:11
Version:5.1.10-014-linux
Copyright (c) 2001-2004 NetUP Inc. www.netup.ru
usage: utm5_core
[-p pid_file_path] Path to pid file. Default is /var/run/utm5_core.pid.
[-c config_path] Path to config file. Default is /netup/utm5/utm5.cfg
[-H] Dump utm5_core hash
[-v] Version infoвроде всё "свежее". Надо смотреть дальше ...
Создайте файл rsh_cisco.cc следующего содержания:
#include <iostream>
#include <unistd.h>
#include <netdb.h>
#include <errno.h>
int main(){
int rfd = 0;
int sock = 0;
int port = 514;
char * ahost = "10.1.2.99";
for(int i =0; i < 10; i++){
if (rcmd(&ahost, port, "netup", "netup", "access-template 106 inet2 any host 192.168.0.14", &rfd) == -1){
std::cerr << "RSH Connection error:" << strerror(errno) << std::endl;
}else{
std::cout << "RSH Connection <" << i <<"> ok" << std::endl;
}
};
};
поправьте данные под вас (адрес циски и логины).
скомпилируйте командой:
c++ -o rsh_cisco rsh_cisco.cc
запустите скомпилированный бинарник:
./rsh_cisco
вывод перешлите для анализа.
Создайте файл rsh_cisco.cc следующего содержания:
#include <iostream>
#include <unistd.h>
#include <netdb.h>
#include <errno.h>
int main(){
int rfd = 0;
int sock = 0;
int port = 514;
char * ahost = "10.1.2.99";
for(int i =0; i < 10; i++){
if (rcmd(&ahost, port, "netup", "netup", "access-template 106 inet2 any host 192.168.0.14", &rfd) == -1){
std::cerr << "RSH Connection error:" << strerror(errno) << std::endl;
}else{
std::cout << "RSH Connection <" << i <<"> ok" << std::endl;
}
};
};
поправьте данные под вас (адрес циски и логины).
скомпилируйте командой:
c++ -o rsh_cisco rsh_cisco.cc
запустите скомпилированный бинарник:
./rsh_cisco
вывод перешлите для анализа.
Как ни странно, но ...
а чуть позже ....
я нашел в рипозитории ветки current пакет glibc-2.3.5
и после установки ... о чудо! корректно отработаны 110 правил
а тут ничего не поменялось ...
Код: Выделить всё
# ./rsh_cisco
RSH Connection <0> ok
RSH Connection <1> ok
RSH Connection <2> ok
RSH Connection <3> ok
RSH Connection <4> ok
RSH Connection <5> ok
RSH Connection <6> ok
RSH Connection <7> ok
RSH Connection <8> ok
RSH Connection <9> ok
я нашел в рипозитории ветки current пакет glibc-2.3.5
и после установки ... о чудо! корректно отработаны 110 правил
Код: Выделить всё
Notice: Aug 17 14:30:09 UTM5 RFW: Version 5.1.10-001-linux starting
Notice: Aug 17 14:30:09 RFW Config: Processing config file: /netup/utm5/rfw5.cfg
Info : Aug 17 14:30:09 RFW URFA[plugin]: Worker thread created
Info : Aug 17 14:30:09 RFW URFA[plugin]: [worker]: Thread created
?Debug : Aug 17 14:30:09 RFW URFA[plugin]: Sending name: 192.168.0.6
?Debug : Aug 17 14:30:09 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:09 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.5> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:09 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.5
Notice: Aug 17 14:30:09 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:09 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:09 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:09 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.5 any> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:09 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 105 inet1 host 192.168.0.5 any
Notice: Aug 17 14:30:11 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:11 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:11 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:11 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.14> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:11 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.14
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:12 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:12 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.14 any> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:12 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 105 inet1 host 192.168.0.14 any
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:12 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:12 FWCntl: Send rule<access-template 106 inet2 any host 192.168.0.13> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:12 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.13
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:12 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:12 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:12 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.13 any> to remote cisco <192.168.0.6>
<<<####### ПОКУСАНО #######>>>
?Debug : Aug 17 14:30:52 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 106 inet2 any host 192.168.0.112
Notice: Aug 17 14:30:53 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:53 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:53 RFW URFA[plugin]: Got 'exec' command...
?Debug : Aug 17 14:30:53 FWCntl: Send rule<access-template 105 inet1 host 192.168.0.112 any> to remote cisco <192.168.0.6>
?Debug : Aug 17 14:30:53 FWCntl: Call RSH: host 192.168.0.6, port 514, login netup, pass <PASSWORD>, cmd access-template 105 inet1 host 192.168.0.112 any
Notice: Aug 17 14:30:53 FWCntl: Can't shutdown(rfd) while recv data from rsh soscket ... Error:<Bad file descriptor>
Notice: Aug 17 14:30:53 FWCntl: Can't shutdown(sock) while recv data from rsh soscket ... Error:<Bad file descriptor>
?Debug : Aug 17 14:30:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:31:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:31:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:32:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:32:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:33:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:33:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:34:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:34:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:35:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:35:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:36:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:36:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:37:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:37:53 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:38:23 RFW URFA[plugin]: Got ping from core. Sending reply...
?Debug : Aug 17 14:38:53 RFW URFA[plugin]: Got ping from core. Sending reply...Код: Выделить всё
# ./rsh_cisco
RSH Connection <0> ok
RSH Connection <1> ok
RSH Connection <2> ok
RSH Connection <3> ok
RSH Connection <4> ok
RSH Connection <5> ok
RSH Connection <6> ok
RSH Connection <7> ok
RSH Connection <8> ok
RSH Connection <9> ok
-
Captain Jack
- Сообщения: 4
- Зарегистрирован: Пн ноя 28, 2005 16:37