You are not logged in.

Pages: 1

#1 2012-12-17 22:00:58

hafron
Member
Registered: 2012-07-03
Posts: 5

Firehol files to start

Hi,
I'm trying to configure firehol as my home firewall. So I created a /etc/firehol/firehol.conf file by coping it from /etc/firehol/examples/client-all.conf:

#
# $Id: client-all.conf,v 1.2 2002/12/31 15:44:34 ktsaou Exp $
#
# This configuration file will allow all requests originating from the
# local machine to be send through all network interfaces.
#
# No requests are allowed to come from the network. The host will be
# completely stealthed! It will not respond to anything, and it will
# not be pingable, although it will be able to originate anything
# (even pings to other hosts).
#

version 5

# Accept all client traffic on any interface
interface any world
	client all accept

But after running rc.d start firehol I get folowing very long error msg. Can anyone know what does it mean? Do you know similar software to firehol? : 

FireHOL: Saving your old firewall to a temporary file: OK
FireHOL: Processing file /etc/firehol/firehol.conf: OK
FireHOL: Activating new firewall (41 rules):

--------------------------------------------------------------------------------
WARNING : This might or might not affect the operation of your firewall.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /sbin/modprobe nf_conntrack -q 
OUTPUT  : 




--------------------------------------------------------------------------------
ERROR   : # 1.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world_all_c1 -m state --state NEW\,ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 2.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world_all_c1 -m state --state ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 3.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world_ftp_c2 -p tcp --sport 32768:61000 --dport 21 -m state --state NEW\,ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 4.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world_ftp_c2 -p tcp --sport 21 --dport 32768:61000 -m state --state ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 5.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world_ftp_c2 -m state --state ESTABLISHED\,RELATED -m helper --helper ftp -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 6.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world_ftp_c2 -m state --state ESTABLISHED\,RELATED -m helper --helper ftp -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 7.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world_irc_c3 -p tcp --sport 32768:61000 --dport 6667 -m state --state NEW\,ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 8.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world_irc_c3 -p tcp --sport 6667 --dport 32768:61000 -m state --state ESTABLISHED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 9.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world_irc_c3 -m state --state ESTABLISHED\,RELATED -m helper --helper irc -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 10.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line 17 of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world_irc_c3 -m state --state ESTABLISHED\,RELATED -m helper --helper irc -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 11.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world -m state --state RELATED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 12.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world -m state --state RELATED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 13.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A in_world -m limit --limit 1/second --limit-burst 5 -j LOG --log-level warning --log-prefix=IN-world: 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 14.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A out_world -m limit --limit 1/second --limit-burst 5 -j LOG --log-level warning --log-prefix=OUT-world: 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 15.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A INPUT -m state --state RELATED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 16.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A OUTPUT -m state --state RELATED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 17.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A FORWARD -m state --state RELATED -j ACCEPT 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 18.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A INPUT -m limit --limit 1/second --limit-burst 5 -j LOG --log-level warning --log-prefix=IN-unknown: 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 19.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A OUTPUT -m limit --limit 1/second --limit-burst 5 -j LOG --log-level warning --log-prefix=OUT-unknown: 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
ERROR   : # 20.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /usr/sbin/iptables -t filter -A FORWARD -m limit --limit 1/second --limit-burst 5 -j LOG --log-level warning --log-prefix=PASS-unknown: 
OUTPUT  : 

iptables: No chain/target/match by that name.



--------------------------------------------------------------------------------
WARNING : This might or might not affect the operation of your firewall.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /sbin/modprobe nf_conntrack_ftp -q 
OUTPUT  : 




--------------------------------------------------------------------------------
WARNING : This might or might not affect the operation of your firewall.
WHAT    : A runtime command failed to execute (returned error 1).
SOURCE  : line FIN of /etc/firehol/firehol.conf
COMMAND : /sbin/modprobe nf_conntrack_irc -q 
OUTPUT  : 


 FAILED


FireHOL: Restoring old firewall: OK

Last edited by hafron (2012-12-17 22:40:59)

Offline

#2 2012-12-17 22:38:57

illusionist
Member
From: localhost
Registered: 2012-04-03
Posts: 498

Re: Firehol files to start

Please use code tag in your post.

  Never argue with stupid people,They will drag you down to their level and then beat you with experience.--Mark Twain
@github

Offline

#3 2012-12-23 18:04:13

philw
Member
Registered: 2012-02-25
Posts: 2

Re: Firehol files to start

It sounds like the nf_conntrack kernel module could not be loaded. The subsequent errors are because many firehol commands depend on connection tracking.

To get some more detail you could try running (as root):

modprobe nf_conntrack

Do you have the relevant kernel modules installed on your system? If not, you need to install them,

Perhaps you have compiled your own kernel? If so you need to either build in these netfilter components or build and install the modules.

Hope that helps.

Offline

#4 2012-12-23 18:09:44

ewaller
Administrator
From: Pasadena, CA
Registered: 2009-07-13
Posts: 20,690

Re: Firehol files to start

Either what philw said, or....  Did you start it using root privileges?  Ordinary users are not going to succeed with the inserting kernel modules.

Nothing is too wonderful to be true, if it be consistent with the laws of nature -- Michael Faraday
The shortest way to ruin a country is to give power to demagogues.— Dionysius of Halicarnassus
---
How to Ask Questions the Smart Way

Offline

Pages: 1

Board footer

Powered by FluxBB