[Firehol-support] Adding services to firehol

shi ryu shiryu38 at gmail.com
Fri Aug 15 10:41:25 BST 2008


Hi,

I've added

client_speakadmin_ports="any" and all errors are gone. THANKS COSTA

But if I define one single client port (which does not make sense, but for
the sake of it) like

client_speakadmin_ports="tcp/14535"

then I get those errors :

+++++++++++++++++++++++++++++++++++++++++++++++
--------------------------------------------------------------------------------
ERROR   : # 1.
WHAT    : A runtime command failed to execute (returned error 2).
SOURCE  : line 42 of /etc/firehol/firehol.conf
COMMAND : /sbin/iptables -t filter -A in_internet_speakadmin_s8 -p tcp
--sport tcp/14535 --dport 14534 -m state --state NEW\,ESTABLISHED -j ACCEPT
OUTPUT  :

iptables v1.3.6: invalid port/service `tcp/14535' specified
Try `iptables -h' or 'iptables --help' for more information.



--------------------------------------------------------------------------------
ERROR   : # 2.
WHAT    : A runtime command failed to execute (returned error 2).
SOURCE  : line 42 of /etc/firehol/firehol.conf
COMMAND : /sbin/iptables -t filter -A out_internet_speakadmin_s8 -p tcp
--sport 14534 --dport tcp/14535 -m state --state ESTABLISHED -j ACCEPT
OUTPUT  :

iptables v1.3.6: invalid port/service `tcp/14535' specified
Try `iptables -h' or 'iptables --help' for more information.

+++++++++++++++++++++++

Any idea why iptables doesn't like the tcp 14535 ?

BR,


2008/8/15 shi ryu <shiryu38 at gmail.com>

> oki thanks,
>
> so if I get you right it works for vnc and webmin because, those services
> already exist as std services in firehol and as such their variables are
> already defined, right ?
>
>
>
> 2008/8/15 Costa Tsaousis <costa at tsaousis.gr>
>
> O/H shi ryu ??????:
>>
>>> server_speakadmin_ports="tcp/14534"
>>>
>>> server speakadmin accept
>>>
>>>  Please define the client_speakadmin_ports variable.
>> FireHOL matches both server and client traffic.
>>
>> Costa
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.firehol.org/pipermail/firehol-support/attachments/20080815/ac7dfbc3/attachment-0003.html>


More information about the Firehol-support mailing list