Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.bugs.dist > #925626 > unrolled thread
| Started by | Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> |
|---|---|
| First post | 2018-11-01 23:10 +0100 |
| Last post | 2018-11-11 11:10 +0100 |
| Articles | 11 — 3 participants |
Back to article view | Back to linux.debian.bugs.dist
Bug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-01 23:10 +0100
Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Russel Winder <russel@winder.org.uk> - 2018-11-04 08:40 +0100
Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Jerome BENOIT <calculus@rezozer.net> - 2018-11-04 10:30 +0100
Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Jerome BENOIT <calculus@rezozer.net> - 2018-11-04 11:40 +0100
Bug#912624: Firehol 3.1.6+ds-3 stillshows problem. Russel Winder <russel@winder.org.uk> - 2018-11-05 08:30 +0100
Bug#912624: Firehol still not working in Debian Sid Russel Winder <russel@winder.org.uk> - 2018-11-06 10:10 +0100
Bug#912624: Firehol still not working in Debian Sid Jerome BENOIT <calculus@rezozer.net> - 2018-11-07 07:30 +0100
Bug#912624: Firehol 3.1.6 seems fixed Russel Winder <russel@winder.org.uk> - 2018-11-07 14:40 +0100
Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-10 15:10 +0100
Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-11 09:40 +0100
Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-11 11:10 +0100
| From | Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> |
|---|---|
| Date | 2018-11-01 23:10 +0100 |
| Subject | Bug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me |
| Message-ID | <wPtk6-5JS-3@gated-at.bofh.it> |
Package: firehol Version: 3.1.5+ds1-2 Severity: important 3.1.5+ds1-2 is the (downgraded) version that works for me. This is sysV init, _not_ systemd. Both 3.1.5+ds1-3 and 3.1.6+ds-1 fail on upgrade. Messages are: [FAIL] Restarting firewall: firehol failed! invoke-rc.d: initscript firehol, action "restart" failed. dpkg: error processing package firehol (--install): installed firehol package post-installation script subprocess returned error exit status 1 I have no idea what's wrong, but I can see exit status is 4 from postinst, doing restart. Restart is actually doing only start, no stop. Even if I add do_stop before do_start to /etc/init.d/firehol, both do_stop and do_start fail: Restarting firewall: firehol+ log_daemon_msg_post Restarting firewall firehol + : + do_stop + /usr/sbin/firehol stop + return 1 + do_start + [ YES = NO ] + /usr/sbin/firehol start + return 1 In my attempts to identify the problem, I've even seen: # /usr/sbin/firehol stop Cannot access /usr/lib/firehol/services.common # file /usr/sbin/firehol /usr/sbin/firehol: symbolic link to ../lib/firehol/firehol maximilian:~/maint# file /usr/lib/firehol/firehol /usr/lib/firehol/firehol: Bourne-Again shell script, ASCII text executable, with very long lines -- System Information: Debian Release: buster/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 4.18.0-1-amd64 (SMP w/8 CPU cores) Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=en_US:en (charmap=ANSI_X3.4-1968) Shell: /bin/sh linked to /bin/dash Init: sysvinit (via /sbin/init) Versions of packages firehol depends on: ii firehol-common 3.1.5+ds1-2 ii lsb-base 9.20170808 Versions of packages firehol recommends: pn fireqos <none> Versions of packages firehol suggests: ii firehol-doc 3.1.5+ds1-2 ii firehol-tools 3.1.5+ds1-2 pn ulogd2 <none> -- Configuration Files: /etc/default/firehol changed: START_FIREHOL=YES WAIT_FOR_IFACE="" FIREHOL_ESTABLISHED_ACTIVATION_ACCEPT=0 Cheers, -- Cristian
[toc] | [next] | [standalone]
| From | Russel Winder <russel@winder.org.uk> |
|---|---|
| Date | 2018-11-04 08:40 +0100 |
| Subject | Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 |
| Message-ID | <wQlaO-4sE-7@gated-at.bofh.it> |
| In reply to | #925626 |
Package: firehol
Version: 3.1.6+ds-1
Followup-For: Bug #912624
Dear Maintainer,
After upgrade of firehol to 3.1.6 from the working 3.1.5, I now get:
Errors were encountered while processing:
firehol
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up firehol (3.1.6+ds-1) ...
insserv: warning: current start runlevel(s) (empty) of script `firehol' overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol' overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor preset: enabled)
Active: failed (Result: exit-code) since Sun 2018-11-04 07:08:41 GMT; 10ms ago
Docs: man:firehol(1)
man:firehol.conf(5)
Process: 25632 ExecStart=/usr/sbin/firehol start (code=exited, status=1/FAILURE)
Main PID: 25632 (code=exited, status=1/FAILURE)
Nov 04 07:08:41 anglides systemd[1]: Starting Firehol stateful packet filtering firewall for humans...
Nov 04 07:08:41 anglides firehol[25632]: Cannot access /usr/lib/firehol/services.common
Nov 04 07:08:41 anglides systemd[1]: firehol.service: Main process exited, code=exited, status=1/FAILURE
Nov 04 07:08:41 anglides systemd[1]: firehol.service: Failed with result 'exit-code'.
Nov 04 07:08:41 anglides systemd[1]: Failed to start Firehol stateful packet filtering firewall for humans.
dpkg: error processing package firehol (--configure):
installed firehol package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
firehol
I'd classify this is as a critical bug, since it prevents any set up/changes of a firewall.
(I tried to submit this with reportbug twice immediately after the upgrade, but my email appears not to have
been accepted by the reportbug system. :-( )
-- System Information:
Debian Release: buster/sid
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)
Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)
Versions of packages firehol depends on:
ii firehol-common 3.1.6+ds-1
ii lsb-base 9.20170808
Versions of packages firehol recommends:
pn fireqos <none>
Versions of packages firehol suggests:
ii firehol-doc 3.1.6+ds-1
ii firehol-tools 3.1.6+ds-1
pn ulogd2 <none>
-- Configuration Files:
/etc/firehol/firehol.conf changed [not included]
-- no debconf information
[toc] | [prev] | [next] | [standalone]
| From | Jerome BENOIT <calculus@rezozer.net> |
|---|---|
| Date | 2018-11-04 10:30 +0100 |
| Subject | Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 |
| Message-ID | <wQmTg-5vM-15@gated-at.bofh.it> |
| In reply to | #926050 |
[Multipart message — attachments visible in raw view] — view raw
Thanks for the report, I have just forwarded the issue to the upstream maintainer. Jerome On 04/11/18 11:19, Russel Winder wrote: > Package: firehol > Version: 3.1.6+ds-1 > Followup-For: Bug #912624 > > Dear Maintainer, > > After upgrade of firehol to 3.1.6 from the working 3.1.5, I now get: > > Errors were encountered while processing: > firehol > E: Sub-process /usr/bin/dpkg returned an error code (1) > Setting up firehol (3.1.6+ds-1) ... > insserv: warning: current start runlevel(s) (empty) of script `firehol' overrides LSB defaults (2 3 4 5). > insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol' overrides LSB defaults (0 1 6). > Job for firehol.service failed because the control process exited with error code. > See "systemctl status firehol.service" and "journalctl -xe" for details. > invoke-rc.d: initscript firehol, action "restart" failed. > ● firehol.service - Firehol stateful packet filtering firewall for humans > Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor preset: enabled) > Active: failed (Result: exit-code) since Sun 2018-11-04 07:08:41 GMT; 10ms ago > Docs: man:firehol(1) > man:firehol.conf(5) > Process: 25632 ExecStart=/usr/sbin/firehol start (code=exited, status=1/FAILURE) > Main PID: 25632 (code=exited, status=1/FAILURE) > > Nov 04 07:08:41 anglides systemd[1]: Starting Firehol stateful packet filtering firewall for humans... > Nov 04 07:08:41 anglides firehol[25632]: Cannot access /usr/lib/firehol/services.common > Nov 04 07:08:41 anglides systemd[1]: firehol.service: Main process exited, code=exited, status=1/FAILURE > Nov 04 07:08:41 anglides systemd[1]: firehol.service: Failed with result 'exit-code'. > Nov 04 07:08:41 anglides systemd[1]: Failed to start Firehol stateful packet filtering firewall for humans. > dpkg: error processing package firehol (--configure): > installed firehol package post-installation script subprocess returned error exit status 1 > Errors were encountered while processing: > firehol > > I'd classify this is as a critical bug, since it prevents any set up/changes of a firewall. > > (I tried to submit this with reportbug twice immediately after the upgrade, but my email appears not to have > been accepted by the reportbug system. :-( ) > > > -- System Information: > Debian Release: buster/sid > APT prefers unstable > APT policy: (500, 'unstable') > Architecture: amd64 (x86_64) > > Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores) > Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8) > Shell: /bin/sh linked to /bin/dash > Init: systemd (via /run/systemd/system) > > Versions of packages firehol depends on: > ii firehol-common 3.1.6+ds-1 > ii lsb-base 9.20170808 > > Versions of packages firehol recommends: > pn fireqos <none> > > Versions of packages firehol suggests: > ii firehol-doc 3.1.6+ds-1 > ii firehol-tools 3.1.6+ds-1 > pn ulogd2 <none> > > -- Configuration Files: > /etc/firehol/firehol.conf changed [not included] > > -- no debconf information > -- Jerome BENOIT | calculus+at-rezozer^dot*net https://qa.debian.org/developer.php?login=calculus@rezozer.net AE28 AE15 710D FF1D 87E5 A762 3F92 19A6 7F36 C68B
[toc] | [prev] | [next] | [standalone]
| From | Jerome BENOIT <calculus@rezozer.net> |
|---|---|
| Date | 2018-11-04 11:40 +0100 |
| Subject | Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 |
| Message-ID | <wQnYZ-66P-1@gated-at.bofh.it> |
| In reply to | #926050 |
[Multipart message — attachments visible in raw view] — view raw
Hi Again, it appears that I forgot to update the service file from the contrib upstrema folder. I am on my way to correct it. Sorry for the noise, Jerome
[toc] | [prev] | [next] | [standalone]
| From | Russel Winder <russel@winder.org.uk> |
|---|---|
| Date | 2018-11-05 08:30 +0100 |
| Subject | Bug#912624: Firehol 3.1.6+ds-3 stillshows problem. |
| Message-ID | <wQHuF-2dc-1@gated-at.bofh.it> |
| In reply to | #925626 |
[Multipart message — attachments visible in raw view] — view raw
Hi,
I upgrade everything this morning, and firehol 3.1.6+ds-3 arrived, but:
root@anglides:~# aptitude install firehol
The following partially installed packages will be configured:
firehol
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Setting up firehol (3.1.6+ds-3) ...
insserv: warning: current start runlevel(s) (empty) of script `firehol'
overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol'
overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error
code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor
preset: enabled)
Active: failed (Result: exit-code) since Mon 2018-11-05 07:17:39 GMT; 9ms
ago
Docs: man:firehol(1)
man:firehol.conf(5)
Process: 16453 ExecStart=/usr/sbin/firehol start (code=exited,
status=1/FAILURE)
Main PID: 16453 (code=exited, status=1/FAILURE)
Nov 05 07:17:39 anglides systemd[1]: Starting Firehol stateful packet
filtering firewall for humans...
Nov 05 07:17:39 anglides firehol[16453]: Cannot access
/usr/lib/firehol/services.firehol
Nov 05 07:17:39 anglides systemd[1]: firehol.service: Main process exited,
code=exited, status=1/FAILURE
Nov 05 07:17:39 anglides systemd[1]: firehol.service: Failed with result
'exit-code'.
Nov 05 07:17:39 anglides systemd[1]: Failed to start Firehol stateful packet
filtering firewall for humans.
dpkg: error processing package firehol (--configure):
installed firehol package post-installation script subprocess returned error
exit status 1
Errors were encountered while processing:
firehol
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up firehol (3.1.6+ds-3) ...
insserv: warning: current start runlevel(s) (empty) of script `firehol'
overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol'
overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error
code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor
preset: enabled)
Active: failed (Result: exit-code) since Mon 2018-11-05 07:17:40 GMT; 8ms
ago
Docs: man:firehol(1)
man:firehol.conf(5)
Process: 16533 ExecStart=/usr/sbin/firehol start (code=exited,
status=1/FAILURE)
Main PID: 16533 (code=exited, status=1/FAILURE)
Nov 05 07:17:40 anglides systemd[1]: Starting Firehol stateful packet
filtering firewall for humans...
Nov 05 07:17:40 anglides firehol[16533]: Cannot access
/usr/lib/firehol/services.firehol
Nov 05 07:17:40 anglides systemd[1]: firehol.service: Main process exited,
code=exited, status=1/FAILURE
Nov 05 07:17:40 anglides systemd[1]: firehol.service: Failed with result
'exit-code'.
Nov 05 07:17:40 anglides systemd[1]: Failed to start Firehol stateful packet
filtering firewall for humans.
dpkg: error processing package firehol (--configure):
installed firehol package post-installation script subprocess returned error
exit status 1
Errors were encountered while processing:
firehol
--
Russel.
===========================================
Dr Russel Winder t: +44 20 7585 2200
41 Buckmaster Road m: +44 7770 465 077
London SW11 1EN, UK w: www.russel.org.uk
[toc] | [prev] | [next] | [standalone]
| From | Russel Winder <russel@winder.org.uk> |
|---|---|
| Date | 2018-11-06 10:10 +0100 |
| Subject | Bug#912624: Firehol still not working in Debian Sid |
| Message-ID | <wR5wZ-8aS-11@gated-at.bofh.it> |
| In reply to | #925626 |
[Multipart message — attachments visible in raw view] — view raw
Hi, I downloaded the 3.1.6 source distribution and copied sbin/services.firehol to /usr/lib/firehol and things are now working. Which is good as the SSH attackers found my unprotected server. Hopefully order now restored.
[toc] | [prev] | [next] | [standalone]
| From | Jerome BENOIT <calculus@rezozer.net> |
|---|---|
| Date | 2018-11-07 07:30 +0100 |
| Subject | Bug#912624: Firehol still not working in Debian Sid |
| Message-ID | <wRpvH-3fi-3@gated-at.bofh.it> |
| In reply to | #926507 |
[Multipart message — attachments visible in raw view] — view raw
Hi, thanks for the hint. I may repackage firehol soon. Jerome On 06/11/18 13:03, Russel Winder wrote: > Hi, > > I downloaded the 3.1.6 source distribution and copied > sbin/services.firehol to /usr/lib/firehol and things are now working. > Which is good as the SSH attackers found my unprotected server. > Hopefully order now restored. > > > -- Jerome BENOIT | calculus+at-rezozer^dot*net https://qa.debian.org/developer.php?login=calculus@rezozer.net AE28 AE15 710D FF1D 87E5 A762 3F92 19A6 7F36 C68B
[toc] | [prev] | [next] | [standalone]
| From | Russel Winder <russel@winder.org.uk> |
|---|---|
| Date | 2018-11-07 14:40 +0100 |
| Subject | Bug#912624: Firehol 3.1.6 seems fixed |
| Message-ID | <wRwdP-7aa-1@gated-at.bofh.it> |
| In reply to | #925626 |
[Multipart message — attachments visible in raw view] — view raw
Hi, I upgraded to 3.1.6+ds-4 this morning, and it appears to have installed correctly and overwritten the file I hand installed. This would seem to indicate this problem is now solved. Thanks, for getting this repackaging done quickly, it is much appreciated. Russel.
[toc] | [prev] | [next] | [standalone]
| From | Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> |
|---|---|
| Date | 2018-11-10 15:10 +0100 |
| Subject | Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) |
| Message-ID | <wSC7v-7lv-1@gated-at.bofh.it> |
| In reply to | #925626 |
On Wed, 7 Nov 2018, Debian Bug Tracking System wrote:
>
> This is an automatic notification regarding your Bug report
> which was filed against the firehol package:
>
> #912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me
>
> It has been closed by Jerome Benoit <calculus@rezozer.net>.
>
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a
> better one in a separate message then please contact Jerome Benoit
> <calculus@rezozer.net> by replying to this email.
Unfortunatelly, 3.1.6+ds-4 does not solve my problem. Postinstall
still failes. But at the bottom of it all is this:
# /usr/sbin/firehol stop
^^^^
WARNING: error initializing iptables: IPv4 disabled
WARNING: error initializing ip6tables: IPv6 disabled
ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol status
^^^^^^
WARNING: error initializing iptables: IPv4 disabled
WARNING: error initializing ip6tables: IPv6 disabled
ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol try
^^^
WARNING: error initializing iptables: IPv4 disabled
WARNING: error initializing ip6tables: IPv6 disabled
ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol debug
^^^^^
WARNING: error initializing iptables: IPv4 disabled
WARNING: error initializing ip6tables: IPv6 disabled
ERROR: Neither IPv4 nor IPv6 is available - exiting
I'm now back to 3.1.5+ds1-2, which works as expected.
What am I missing?
Cheers,
--
Cristian
[toc] | [prev] | [next] | [standalone]
| From | Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> |
|---|---|
| Date | 2018-11-11 09:40 +0100 |
| Subject | Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) |
| Message-ID | <wSTrI-1sk-5@gated-at.bofh.it> |
| In reply to | #925626 |
On Sun, 11 Nov 2018, Jerome BENOIT wrote: > > Hello, I am sorry to read that. > > When you say `This is sysV init, _not_ systemd', > do you mean that you run on a Debian box (but not a Devuan box) ? This is a Debian sid box with sysV init. And I did realize shortly after sending the message bellow that I managed to overwrite the conf-files (both /etc/default/firehol and /etc/firehol/firehol.conf) in the process. I'll continue investigation, though. > On 10/11/2018 18:05, Cristian Ionescu-Idbohrn wrote: > > On Wed, 7 Nov 2018, Debian Bug Tracking System wrote: > >> > >> This is an automatic notification regarding your Bug report > >> which was filed against the firehol package: > >> > >> #912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me > >> > >> It has been closed by Jerome Benoit <calculus@rezozer.net>. > >> > >> Their explanation is attached below along with your original report. > >> If this explanation is unsatisfactory and you have not received a > >> better one in a separate message then please contact Jerome Benoit > >> <calculus@rezozer.net> by replying to this email. > > > > Unfortunatelly, 3.1.6+ds-4 does not solve my problem. Postinstall > > still failes. But at the bottom of it all is this: > > > > # /usr/sbin/firehol stop > > ^^^^ > > WARNING: error initializing iptables: IPv4 disabled > > WARNING: error initializing ip6tables: IPv6 disabled > > ERROR: Neither IPv4 nor IPv6 is available - exiting > > # /usr/sbin/firehol status > > ^^^^^^ > > WARNING: error initializing iptables: IPv4 disabled > > WARNING: error initializing ip6tables: IPv6 disabled > > ERROR: Neither IPv4 nor IPv6 is available - exiting > > # /usr/sbin/firehol try > > ^^^ > > WARNING: error initializing iptables: IPv4 disabled > > WARNING: error initializing ip6tables: IPv6 disabled > > ERROR: Neither IPv4 nor IPv6 is available - exiting > > # /usr/sbin/firehol debug > > ^^^^^ > > WARNING: error initializing iptables: IPv4 disabled > > WARNING: error initializing ip6tables: IPv6 disabled > > ERROR: Neither IPv4 nor IPv6 is available - exiting > > > > I'm now back to 3.1.5+ds1-2, which works as expected. > > What am I missing? -- Cristian
[toc] | [prev] | [next] | [standalone]
| From | Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> |
|---|---|
| Date | 2018-11-11 11:10 +0100 |
| Subject | Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) |
| Message-ID | <wSUQN-2ss-1@gated-at.bofh.it> |
| In reply to | #927376 |
[Multipart message — attachments visible in raw view] — view raw
On Sun, 11 Nov 2018, Cristian Ionescu-Idbohrn wrote: > On Sun, 11 Nov 2018, Jerome BENOIT wrote: > > > > Hello, I am sorry to read that. > > > > When you say `This is sysV init, _not_ systemd', > > do you mean that you run on a Debian box (but not a Devuan box) ? > > This is a Debian sid box with sysV init. > > And I did realize shortly after sending the message bellow that I > managed to overwrite the conf-files (both /etc/default/firehol and > /etc/firehol/firehol.conf) in the process. > > I'll continue investigation, though. Repeating the upgrade process I found out that /etc/firehol/firehol.conf is _forcebly_ overwritten. So, that's one bug: Installing new version of config file /etc/firehol/firehol.conf ... I'm asked if I want to keep /etc/default/firehol, though. The second bug is that the /usr/sbin/firehol has the ip*tables* paths hardcoded to /usr/sbin/, but most of those binaries are installed in /sbin/ (in the iptables package version I use; see bellow). Why on earth would one hardcode program paths, when /etc/profile sets the PATH: # /etc/profile: system-wide .profile file for the Bourne shell (sh(1)) # and Bourne compatible shells (bash(1), ksh(1), ash(1), ...). if [ "`id -u`" -eq 0 ]; then PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin" else PATH="/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games" fi export PATH and create lots of maintenance problems, I never understood :/ Is the PATH variable going away? Creating these symlinks: lrwxrwxrwx 1 root root 20 Nov 11 10:12 ip6tables -> ../../sbin/ip6tables lrwxrwxrwx 1 root root 28 Nov 11 10:16 ip6tables-restore -> ../../sbin/ip6tables-restore lrwxrwxrwx 1 root root 25 Nov 11 10:14 ip6tables-save -> ../../sbin/ip6tables-save lrwxrwxrwx 1 root root 19 Nov 11 10:12 iptables -> ../../sbin/iptables lrwxrwxrwx 1 root root 27 Nov 11 10:15 iptables-restore -> ../../sbin/iptables-restore lrwxrwxrwx 1 root root 24 Nov 11 10:15 iptables-save -> ../../sbin/iptables-save saved my day ;) I'm staying with iptables: Installed: 1.6.2-1.1 as I do experience problems with: Candidate: 1.8.1-2 which _does_ install compatibility symlinks, the other way around. iptables (1.8.1-2) unstable; urgency=medium * [5edbd6e] iptables: introduce /sbin compatibility symlinks (Closes: #911777) -- Arturo Borrero Gonzalez <arturo@debian.org> Thu, 25 Oct 2018 13:27:15 +0200 -- Cristian
[toc] | [prev] | [standalone]
Back to top | Article view | linux.debian.bugs.dist
csiph-web