PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : SuSEfirewall 2 unter ReHat 7.3



SteveUrkelREAL
08.07.02, 15:53
Hallo zusammen,

in diesem (http://www.linuxforen.de/forums/showthread.php?s=&threadid=31877) Posting (4 Eintrag von Newbie2001), habe ich gelsen, dass man die SuSEfirewalll2 auch auf RedHat nutzen kann (dies steht auch im INSTALL der SuSEfirewall drin).

Die Installation verlief ohne Probleme, jedoch wird beim booten immer angezeigt, das die Firewall nicht alle Phasen 1-3 ordnungsgemäß durchführen kann. Die Firewall selber funktioniert aber einwandfrei.

Ich vermute, das in den Initialisierungsscripten SuSE-Spezifische Sachen drin stehen.

Es wäre nett, wenn mir jemand bei der Fehlersuche helfen würde.

Anbei die 3 Scripte die bei booten ausgeführt werden.

1. Script (SuSEfirewall2_init)



#! /bin/sh
# Copyright (c) 2001 SuSE GmbH Nuernberg, Germany.
#
# Author: Marc Heuse <marc@suse.de>
#
# /etc/init.d/SuSEfirewall2_init
#
### BEGIN INIT INFO
# Provides: SuSEfirewall2_init
# Required-Start: serial
# Required-Stop:
# Default-Start: 2 3 4 5
# Default-Stop:
# Description: SuSEfirewall2_init does some basic setup and is the
# phase 1 of 3 of the SuSEfirewall initialization
### END INIT INFO

SUSEFWALL="/sbin/SuSEfirewall2"

test -x $SUSEFWALL || exit 5
test -r /etc/rc.config.d/firewall2.rc.config || exit 6

. /etc/rc.config

# Determine the base and follow a runlevel link name.
base=${0##*/}
link=${base#*[SK][0-9][0-9]}

test -e /etc/rc.status && . /etc/rc.status

# Force execution if not called by a runlevel directory.
test $link = $base && START_FW2=yes
test "$START_FW2" = yes || exit 0

# The echo return value for success (defined in /etc/rc.config).
return=$rc_done

case "$1" in
start)
echo -n "Starting Firewall Initialization: "
echo -n '(phase 1 of 3) '
( $SUSEFWALL close ) > /dev/null 2>&1 || return=$rc_failed
echo -e "$return"
;;
stop)
#echo -e "$0 is not for stopping SuSEfirewall2 - use \"SuSEfirewall2 stop\" or the SuSEfirewall2_setup script."
;;
restart|force-reload)
$0 start || return=$rc_failed
;;
try-restart|reload)
($0 status) >/dev/null 2>&1 || exit 7
$0 start || return=$rc_failed
;;
status)
echo "Checking the status of the Firewall: "
$SUSEFWALL status || return=$rc_failed
test "$return" = "$rc_failed" && exit 3
;;
*)
echo "Usage: $0 {start|stop|status|restart|reload|force-reload}"
exit 1
;;
esac

# Set exit status
test "$return" = "$rc_failed" && exit 1
exit 0


2. Script (SuSEfirewall2_setup)



#! /bin/sh
# Copyright (c) 1999-2001 SuSE GmbH Nuernberg, Germany.
#
# Author: Marc Heuse <marc@suse.de>
#
# /etc/init.d/SuSEfirewall2_setup
#
### BEGIN INIT INFO
# Provides: SuSEfirewall2_setup
# Required-Start: SuSEfirewall2_init network route dhclient
# Required-Stop:
# Default-Start: 2 3 4 5
# Default-Stop: 0 1 2 6
# Description: SuSEfirewall2_setup does some basic setup and is the
# phase 2 of 3 of the SuSEfirewall initialization.
### END INIT INFO

SUSEFWALL="/sbin/SuSEfirewall2"

test -x $SUSEFWALL || exit 5
test -r /etc/rc.config.d/firewall2.rc.config || exit 6

. /etc/rc.config
. /etc/rc.config.d/firewall2.rc.config

# Determine the base and follow a runlevel link name.
base=${0##*/}
link=${base#*[SK][0-9][0-9]}

test -e /etc/rc.status && . /etc/rc.status

# Force execution if not called by a runlevel directory.
test $link = $base && START_FW2=yes
test "$START_FW2" = yes || exit 0

# The echo return value for success (defined in /etc/rc.config).
return=$rc_done

case "$1" in
start)
echo -n "Starting Firewall Initialization: "
echo -n '(phase 2 of 3) '
$SUSEFWALL start > /dev/null 2>&1 || return=$rc_failed
echo -e "$return"
;;
stop)
echo -n "Shutting down the Firewall"
test "$FW_STOP_KEEP_ROUTING_STATE" = "yes" && echo -n ": "
test "$FW_STOP_KEEP_ROUTING_STATE" = "yes" || echo -n " (and disabling routing): "
$SUSEFWALL stop > /dev/null 2>&1 || return=$rc_failed
echo -e "$return"
;;
restart|force-reload)
$0 start || return=$rc_failed
;;
try-restart|reload)
($0 status) >/dev/null 2>&1 || exit 7
$0 start || return=$rc_failed
;;
status)
echo "Checking the status of the Firewall: "
$SUSEFWALL status || return=$rc_failed
test "$return" = "$rc_failed" && exit 3
;;
*)
echo "Usage: $0 {start|stop|status|restart|reload|force-reload}"
exit 1
;;
esac

# Set exit status
test "$return" = "$rc_failed" && exit 1
exit 0


3. Script (SuSEfirewall2_final)



#! /bin/sh
# Copyright (c) 2001 SuSE GmbH Nuernberg, Germany.
#
# Author: Marc Heuse <marc@suse.de>
#
# /etc/init.d/SuSEfirewall2_final
#
### BEGIN INIT INFO
# Provides: SuSEfirewall2_final
# Required-Start: SuSEfirewall2_setup rpc named sshd inetd dhcp nscd nessusd wpmd squid ipsec
# Required-Stop:
# Default-Start: 2 3 4 5
# Default-Stop:
# Description: SuSEfirewall2_final does finally set all the firewalling
# rules. Phase 3 of 3 of SuSEfirewall setup.
### END INIT INFO

SUSEFWALL="/sbin/SuSEfirewall2"

test -x $SUSEFWALL || exit 5
test -r /etc/rc.config.d/firewall2.rc.config || exit 6

. /etc/rc.config

# Determine the base and follow a runlevel link name.
base=${0##*/}
link=${base#*[SK][0-9][0-9]}

test -e /etc/rc.status && . /etc/rc.status

# Force execution if not called by a runlevel directory.
test $link = $base && START_FW2=yes
test "$START_FW2" = yes || exit 0

# The echo return value for success (defined in /etc/rc.config).
return=$rc_done

case "$1" in
start)
echo -n "Starting Firewall Initialization: "
echo -n '(phase 3 of 3) '
$SUSEFWALL start || return=$rc_failed
echo -e "$return"
;;
stop)
#echo -e "$0 is not for stopping SuSEfirewall2 - use \"SuSEfirewall2 stop\" or the SuSEfirewall2_setup script."
;;
restart|force-reload)
$0 start || return=$rc_failed
;;
try-restart|reload)
($0 status) >/dev/null 2>&1 || exit 7
$0 start || return=$rc_failed
;;
status)
echo "Checking the status of the Firewall: "
$SUSEFWALL status || return=$rc_failed
test "$return" = "$rc_failed" && exit 3
;;
*)
echo "Usage: $0 {start|stop|status|restart|reload|force-reload}"
exit 1
;;
esac

# Set exit status
test "$return" = "$rc_failed" && exit 1
exit 0


Die Meldung ist jeweils "Faíled".

Wer sich das ganze Paket downloaden möchte um die anderen Scripte anzuschauen http://www.suse.de/~marc/SuSEfirewall2-2.1.tar.gz

Danke schonamal im voraus

Steve

Jinto
08.07.02, 16:06
Hast du denn die notwendigen Dateien an der richtigen Stelle(/etc/rc.config /sbin/SuSEfirewall2 etc.)?
Sind die Netzwerkdevices auch schon vorhanden, wenn du die Scripte startest?
Hast du Dir INSTALL und README durchgelesen?