Na upgrade naar 8.04 kwam ik er (na een aantal dagen pas) achter, dat Firestarter niet automatisch was opgestart!
nico@nico-desktop:~$ sudo /etc/init.d/firestarter status
[sudo] password for nico:
* Firestarter is stopped
Dus iptables ook een beetje karig:
nico@nico-desktop:~$ sudo iptables -L -v
Chain INPUT (policy ACCEPT 1964 packets, 490K bytes)
pkts bytes target prot opt in out source destination
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
Chain OUTPUT (policy ACCEPT 1975 packets, 125K bytes)
pkts bytes target prot opt in out source destination
nico@nico-desktop:~$
Grote schrik dus...
Na enig googlen vond ik een workaround op
bugs.launchpad.netNadat ik het bestand '/etc/firestarter/firestarter.sh'
aldus had aangepast en had herstart, deed Firestarter 't weer als vanouds!
nico@nico-desktop:~$ sudo /etc/init.d/firestarter status
[sudo] password for nico:
* Firestarter is running...
nico@nico-desktop:~$ sudo iptables -L -v
[sudo] password for nico:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT tcp -- any any ns1.quicknet.nl anywhere tcp flags:!FIN,SYN,RST,ACK/SYN
71 15472 ACCEPT udp -- any any ns1.quicknet.nl anywhere
0 0 ACCEPT tcp -- any any ns2.quicknet.nl anywhere tcp flags:!FIN,SYN,RST,ACK/SYN
0 0 ACCEPT udp -- any any ns2.quicknet.nl anywhere
0 0 ACCEPT tcp -- any any ns3.quicknet.nl anywhere tcp flags:!FIN,SYN,RST,ACK/SYN
0 0 ACCEPT udp -- any any ns3.quicknet.nl anywhere
1272 53424 ACCEPT all -- lo any anywhere anywhere
0 0 LSI udp -- any any anywhere anywhere udp dpt:33434
4 244 LSI icmp -- any any anywhere anywhere
6 2250 DROP all -- eth0 any anywhere 255.255.255.255
0 0 DROP all -- any any BASE-ADDRESS.MCAST.NET/8 anywhere
0 0 DROP all -- any any anywhere BASE-ADDRESS.MCAST.NET/8
0 0 DROP all -- any any 255.255.255.255 anywhere
0 0 DROP all -- any any anywhere 0.0.0.0
3 136 DROP all -- any any anywhere anywhere state INVALID
0 0 LSI all -f any any anywhere anywhere limit: avg 10/min burst 5
5826 2235K INBOUND all -- eth0 any anywhere anywhere
0 0 LOG_FILTER all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Unknown Input'
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 LSI udp -- any any anywhere anywhere udp dpt:33434
0 0 LSI icmp -- any any anywhere anywhere
0 0 LOG_FILTER all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Unknown Forward'
Chain OUTPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
1272 53424 ACCEPT all -- any lo anywhere anywhere
0 0 DROP all -- any any BASE-ADDRESS.MCAST.NET/8 anywhere
31 3955 DROP all -- any any anywhere BASE-ADDRESS.MCAST.NET/8
0 0 DROP all -- any any 255.255.255.255 anywhere
0 0 DROP all -- any any anywhere 0.0.0.0
0 0 DROP all -- any any anywhere anywhere state INVALID
5903 493K OUTBOUND all -- any eth0 anywhere anywhere
0 0 LOG_FILTER all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere LOG level info prefix `Unknown Output'
Chain INBOUND (1 references)
pkts bytes target prot opt in out source destination
1914 1930K ACCEPT tcp -- any any anywhere anywhere state RELATED,ESTABLISHED
4 304 ACCEPT udp -- any any anywhere anywhere state RELATED,ESTABLISHED
3908 305K LSI all -- any any anywhere anywhere
Chain LOG_FILTER (5 references)
pkts bytes target prot opt in out source destination
Chain LSI (6 references)
pkts bytes target prot opt in out source destination
3912 305K LOG_FILTER all -- any any anywhere anywhere
7 432 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
7 432 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/SYN
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,ACK/RST
4 244 LOG icmp -- any any anywhere anywhere icmp echo-request limit: avg 1/sec burst 5 LOG level info prefix `Inbound '
4 244 DROP icmp -- any any anywhere anywhere icmp echo-request
3901 304K LOG all -- any any anywhere anywhere limit: avg 5/sec burst 5 LOG level info prefix `Inbound '
3901 304K DROP all -- any any anywhere anywhere
Chain LSO (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG_FILTER all -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere limit: avg 5/sec burst 5 LOG level info prefix `Outbound '
0 0 REJECT all -- any any anywhere anywhere reject-with icmp-port-unreachable
Chain OUTBOUND (1 references)
pkts bytes target prot opt in out source destination
0 0 ACCEPT icmp -- any any anywhere anywhere
1801 179K ACCEPT tcp -- any any anywhere anywhere state RELATED,ESTABLISHED
3 228 ACCEPT udp -- any any anywhere anywhere state RELATED,ESTABLISHED
4099 314K ACCEPT all -- any any anywhere anywhere
nico@nico-desktop:~$
Mijn vraag is : Ben ik de enige met dit probleem, en is er wellicht een nettere oplossing voor?
m. vr. gr. ,
Nico.
