Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.bugs.dist > #925626 > unrolled thread

Bug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me

Started byCristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com>
First post2018-11-01 23:10 +0100
Last post2018-11-11 11:10 +0100
Articles 11 — 3 participants

Back to article view | Back to linux.debian.bugs.dist


Contents

  Bug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-01 23:10 +0100
    Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Russel Winder <russel@winder.org.uk> - 2018-11-04 08:40 +0100
      Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Jerome BENOIT <calculus@rezozer.net> - 2018-11-04 10:30 +0100
      Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6 Jerome BENOIT <calculus@rezozer.net> - 2018-11-04 11:40 +0100
    Bug#912624: Firehol 3.1.6+ds-3 stillshows problem. Russel Winder <russel@winder.org.uk> - 2018-11-05 08:30 +0100
    Bug#912624: Firehol still not working in Debian Sid Russel Winder <russel@winder.org.uk> - 2018-11-06 10:10 +0100
      Bug#912624: Firehol still not working in Debian Sid Jerome BENOIT <calculus@rezozer.net> - 2018-11-07 07:30 +0100
    Bug#912624: Firehol 3.1.6 seems fixed Russel Winder <russel@winder.org.uk> - 2018-11-07 14:40 +0100
    Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-10 15:10 +0100
    Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-11 09:40 +0100
      Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4) Cristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com> - 2018-11-11 11:10 +0100

#925626 — Bug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me

FromCristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com>
Date2018-11-01 23:10 +0100
SubjectBug#912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me
Message-ID<wPtk6-5JS-3@gated-at.bofh.it>
Package: firehol
Version: 3.1.5+ds1-2
Severity: important

3.1.5+ds1-2 is the (downgraded) version that works for me.

This is sysV init, _not_ systemd.
Both 3.1.5+ds1-3 and 3.1.6+ds-1 fail on upgrade.
Messages are:

	[FAIL] Restarting firewall: firehol failed!
	invoke-rc.d: initscript firehol, action "restart" failed.
	dpkg: error processing package firehol (--install):
	 installed firehol package post-installation script subprocess returned error exit status 1

I have no idea what's wrong, but I can see exit status is 4 from 
postinst, doing restart.  Restart is actually doing only start, no 
stop.  Even if I add do_stop before do_start to /etc/init.d/firehol, 
both do_stop and do_start fail:

	Restarting firewall: firehol+ log_daemon_msg_post Restarting firewall firehol
	+ :
	+ do_stop
	+ /usr/sbin/firehol stop
	+ return 1
	+ do_start
	+ [ YES = NO ]
	+ /usr/sbin/firehol start
	+ return 1

In my attempts to identify the problem, I've even seen:

	# /usr/sbin/firehol stop
	Cannot access /usr/lib/firehol/services.common
	# file /usr/sbin/firehol
	/usr/sbin/firehol: symbolic link to ../lib/firehol/firehol
	maximilian:~/maint# file /usr/lib/firehol/firehol
	/usr/lib/firehol/firehol: Bourne-Again shell script, ASCII text executable, with very long lines

-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.18.0-1-amd64 (SMP w/8 CPU cores)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968), LANGUAGE=en_US:en (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash
Init: sysvinit (via /sbin/init)

Versions of packages firehol depends on:
ii  firehol-common  3.1.5+ds1-2
ii  lsb-base        9.20170808

Versions of packages firehol recommends:
pn  fireqos  <none>

Versions of packages firehol suggests:
ii  firehol-doc    3.1.5+ds1-2
ii  firehol-tools  3.1.5+ds1-2
pn  ulogd2         <none>

-- Configuration Files:
/etc/default/firehol changed:
START_FIREHOL=YES
WAIT_FOR_IFACE=""
FIREHOL_ESTABLISHED_ACTIVATION_ACCEPT=0


Cheers,

-- 
Cristian

[toc] | [next] | [standalone]


#926050 — Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6

FromRussel Winder <russel@winder.org.uk>
Date2018-11-04 08:40 +0100
SubjectBug#912624: firehol: Firehol fails to work after upgrade to 3.1.6
Message-ID<wQlaO-4sE-7@gated-at.bofh.it>
In reply to#925626
Package: firehol
Version: 3.1.6+ds-1
Followup-For: Bug #912624

Dear Maintainer,

After upgrade of firehol to 3.1.6 from the working 3.1.5, I now get:

Errors were encountered while processing:
 firehol
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up firehol (3.1.6+ds-1) ...
insserv: warning: current start runlevel(s) (empty) of script `firehol' overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol' overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
   Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor preset: enabled)
   Active: failed (Result: exit-code) since Sun 2018-11-04 07:08:41 GMT; 10ms ago
     Docs: man:firehol(1)
           man:firehol.conf(5)
  Process: 25632 ExecStart=/usr/sbin/firehol start (code=exited, status=1/FAILURE)
 Main PID: 25632 (code=exited, status=1/FAILURE)

Nov 04 07:08:41 anglides systemd[1]: Starting Firehol stateful packet filtering firewall for humans...
Nov 04 07:08:41 anglides firehol[25632]: Cannot access /usr/lib/firehol/services.common
Nov 04 07:08:41 anglides systemd[1]: firehol.service: Main process exited, code=exited, status=1/FAILURE
Nov 04 07:08:41 anglides systemd[1]: firehol.service: Failed with result 'exit-code'.
Nov 04 07:08:41 anglides systemd[1]: Failed to start Firehol stateful packet filtering firewall for humans.
dpkg: error processing package firehol (--configure):
 installed firehol package post-installation script subprocess returned error exit status 1
Errors were encountered while processing:
 firehol

I'd classify this is as a critical bug, since it prevents any set up/changes of a firewall.

(I tried to submit this with reportbug twice immediately after the upgrade, but my email appears not to have
been accepted by the reportbug system. :-( )


-- System Information:
Debian Release: buster/sid
  APT prefers unstable
  APT policy: (500, 'unstable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages firehol depends on:
ii  firehol-common  3.1.6+ds-1
ii  lsb-base        9.20170808

Versions of packages firehol recommends:
pn  fireqos  <none>

Versions of packages firehol suggests:
ii  firehol-doc    3.1.6+ds-1
ii  firehol-tools  3.1.6+ds-1
pn  ulogd2         <none>

-- Configuration Files:
/etc/firehol/firehol.conf changed [not included]

-- no debconf information

[toc] | [prev] | [next] | [standalone]


#926071 — Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6

FromJerome BENOIT <calculus@rezozer.net>
Date2018-11-04 10:30 +0100
SubjectBug#912624: firehol: Firehol fails to work after upgrade to 3.1.6
Message-ID<wQmTg-5vM-15@gated-at.bofh.it>
In reply to#926050

[Multipart message — attachments visible in raw view] — view raw

Thanks for the report, I have just forwarded the issue to the upstream maintainer.
Jerome

On 04/11/18 11:19, Russel Winder wrote:
> Package: firehol
> Version: 3.1.6+ds-1
> Followup-For: Bug #912624
> 
> Dear Maintainer,
> 
> After upgrade of firehol to 3.1.6 from the working 3.1.5, I now get:
> 
> Errors were encountered while processing:
>  firehol
> E: Sub-process /usr/bin/dpkg returned an error code (1)
> Setting up firehol (3.1.6+ds-1) ...
> insserv: warning: current start runlevel(s) (empty) of script `firehol' overrides LSB defaults (2 3 4 5).
> insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol' overrides LSB defaults (0 1 6).
> Job for firehol.service failed because the control process exited with error code.
> See "systemctl status firehol.service" and "journalctl -xe" for details.
> invoke-rc.d: initscript firehol, action "restart" failed.
> ● firehol.service - Firehol stateful packet filtering firewall for humans
>    Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor preset: enabled)
>    Active: failed (Result: exit-code) since Sun 2018-11-04 07:08:41 GMT; 10ms ago
>      Docs: man:firehol(1)
>            man:firehol.conf(5)
>   Process: 25632 ExecStart=/usr/sbin/firehol start (code=exited, status=1/FAILURE)
>  Main PID: 25632 (code=exited, status=1/FAILURE)
> 
> Nov 04 07:08:41 anglides systemd[1]: Starting Firehol stateful packet filtering firewall for humans...
> Nov 04 07:08:41 anglides firehol[25632]: Cannot access /usr/lib/firehol/services.common
> Nov 04 07:08:41 anglides systemd[1]: firehol.service: Main process exited, code=exited, status=1/FAILURE
> Nov 04 07:08:41 anglides systemd[1]: firehol.service: Failed with result 'exit-code'.
> Nov 04 07:08:41 anglides systemd[1]: Failed to start Firehol stateful packet filtering firewall for humans.
> dpkg: error processing package firehol (--configure):
>  installed firehol package post-installation script subprocess returned error exit status 1
> Errors were encountered while processing:
>  firehol
> 
> I'd classify this is as a critical bug, since it prevents any set up/changes of a firewall.
> 
> (I tried to submit this with reportbug twice immediately after the upgrade, but my email appears not to have
> been accepted by the reportbug system. :-( )
> 
> 
> -- System Information:
> Debian Release: buster/sid
>   APT prefers unstable
>   APT policy: (500, 'unstable')
> Architecture: amd64 (x86_64)
> 
> Kernel: Linux 4.18.0-2-amd64 (SMP w/8 CPU cores)
> Locale: LANG=en_GB.UTF-8, LC_CTYPE=en_GB.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8), LANGUAGE=en_GB:en (charmap=UTF-8) (ignored: LC_ALL set to en_GB.UTF-8)
> Shell: /bin/sh linked to /bin/dash
> Init: systemd (via /run/systemd/system)
> 
> Versions of packages firehol depends on:
> ii  firehol-common  3.1.6+ds-1
> ii  lsb-base        9.20170808
> 
> Versions of packages firehol recommends:
> pn  fireqos  <none>
> 
> Versions of packages firehol suggests:
> ii  firehol-doc    3.1.6+ds-1
> ii  firehol-tools  3.1.6+ds-1
> pn  ulogd2         <none>
> 
> -- Configuration Files:
> /etc/firehol/firehol.conf changed [not included]
> 
> -- no debconf information
> 

-- 
Jerome BENOIT | calculus+at-rezozer^dot*net
https://qa.debian.org/developer.php?login=calculus@rezozer.net
AE28 AE15 710D FF1D 87E5  A762 3F92 19A6 7F36 C68B

[toc] | [prev] | [next] | [standalone]


#926082 — Bug#912624: firehol: Firehol fails to work after upgrade to 3.1.6

FromJerome BENOIT <calculus@rezozer.net>
Date2018-11-04 11:40 +0100
SubjectBug#912624: firehol: Firehol fails to work after upgrade to 3.1.6
Message-ID<wQnYZ-66P-1@gated-at.bofh.it>
In reply to#926050

[Multipart message — attachments visible in raw view] — view raw

Hi Again,

it appears that I forgot to update the service file from the contrib upstrema folder.
I am on my way to correct it.
Sorry for the noise,
Jerome

[toc] | [prev] | [next] | [standalone]


#926310 — Bug#912624: Firehol 3.1.6+ds-3 stillshows problem.

FromRussel Winder <russel@winder.org.uk>
Date2018-11-05 08:30 +0100
SubjectBug#912624: Firehol 3.1.6+ds-3 stillshows problem.
Message-ID<wQHuF-2dc-1@gated-at.bofh.it>
In reply to#925626

[Multipart message — attachments visible in raw view] — view raw

Hi,

I upgrade everything this morning, and firehol 3.1.6+ds-3 arrived, but:


root@anglides:~# aptitude install firehol
The following partially installed packages will be configured:
  firehol 
No packages will be installed, upgraded, or removed.
0 packages upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B of archives. After unpacking 0 B will be used.
Setting up firehol (3.1.6+ds-3) ...      
insserv: warning: current start runlevel(s) (empty) of script `firehol'
overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol'
overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error
code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
   Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Mon 2018-11-05 07:17:39 GMT; 9ms
ago
     Docs: man:firehol(1)
           man:firehol.conf(5)
  Process: 16453 ExecStart=/usr/sbin/firehol start (code=exited,
status=1/FAILURE)
 Main PID: 16453 (code=exited, status=1/FAILURE)

Nov 05 07:17:39 anglides systemd[1]: Starting Firehol stateful packet
filtering firewall for humans...
Nov 05 07:17:39 anglides firehol[16453]: Cannot access
/usr/lib/firehol/services.firehol
Nov 05 07:17:39 anglides systemd[1]: firehol.service: Main process exited,
code=exited, status=1/FAILURE
Nov 05 07:17:39 anglides systemd[1]: firehol.service: Failed with result
'exit-code'.
Nov 05 07:17:39 anglides systemd[1]: Failed to start Firehol stateful packet
filtering firewall for humans.
dpkg: error processing package firehol (--configure):
 installed firehol package post-installation script subprocess returned error
exit status 1
Errors were encountered while processing:
 firehol
E: Sub-process /usr/bin/dpkg returned an error code (1)
Setting up firehol (3.1.6+ds-3) ...
insserv: warning: current start runlevel(s) (empty) of script `firehol'
overrides LSB defaults (2 3 4 5).
insserv: warning: current stop runlevel(s) (0 1 2 3 4 5 6) of script `firehol'
overrides LSB defaults (0 1 6).
Job for firehol.service failed because the control process exited with error
code.
See "systemctl status firehol.service" and "journalctl -xe" for details.
invoke-rc.d: initscript firehol, action "restart" failed.
● firehol.service - Firehol stateful packet filtering firewall for humans
   Loaded: loaded (/lib/systemd/system/firehol.service; enabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Mon 2018-11-05 07:17:40 GMT; 8ms
ago
     Docs: man:firehol(1)
           man:firehol.conf(5)
  Process: 16533 ExecStart=/usr/sbin/firehol start (code=exited,
status=1/FAILURE)
 Main PID: 16533 (code=exited, status=1/FAILURE)

Nov 05 07:17:40 anglides systemd[1]: Starting Firehol stateful packet
filtering firewall for humans...
Nov 05 07:17:40 anglides firehol[16533]: Cannot access
/usr/lib/firehol/services.firehol
Nov 05 07:17:40 anglides systemd[1]: firehol.service: Main process exited,
code=exited, status=1/FAILURE
Nov 05 07:17:40 anglides systemd[1]: firehol.service: Failed with result
'exit-code'.
Nov 05 07:17:40 anglides systemd[1]: Failed to start Firehol stateful packet
filtering firewall for humans.
dpkg: error processing package firehol (--configure):
 installed firehol package post-installation script subprocess returned error
exit status 1
Errors were encountered while processing:
 firehol





 
-- 
Russel.
===========================================
Dr Russel Winder      t: +44 20 7585 2200
41 Buckmaster Road    m: +44 7770 465 077
London SW11 1EN, UK   w: www.russel.org.uk

[toc] | [prev] | [next] | [standalone]


#926507 — Bug#912624: Firehol still not working in Debian Sid

FromRussel Winder <russel@winder.org.uk>
Date2018-11-06 10:10 +0100
SubjectBug#912624: Firehol still not working in Debian Sid
Message-ID<wR5wZ-8aS-11@gated-at.bofh.it>
In reply to#925626

[Multipart message — attachments visible in raw view] — view raw

Hi,

I downloaded the 3.1.6 source distribution and copied
sbin/services.firehol to /usr/lib/firehol and things are now working.
Which is good as the SSH attackers found my unprotected server.
Hopefully order now restored.



[toc] | [prev] | [next] | [standalone]


#926671 — Bug#912624: Firehol still not working in Debian Sid

FromJerome BENOIT <calculus@rezozer.net>
Date2018-11-07 07:30 +0100
SubjectBug#912624: Firehol still not working in Debian Sid
Message-ID<wRpvH-3fi-3@gated-at.bofh.it>
In reply to#926507

[Multipart message — attachments visible in raw view] — view raw

Hi, thanks for the hint.
I may repackage firehol soon.

Jerome

On 06/11/18 13:03, Russel Winder wrote:
> Hi,
> 
> I downloaded the 3.1.6 source distribution and copied
> sbin/services.firehol to /usr/lib/firehol and things are now working.
> Which is good as the SSH attackers found my unprotected server.
> Hopefully order now restored.
> 
> 
> 

-- 
Jerome BENOIT | calculus+at-rezozer^dot*net
https://qa.debian.org/developer.php?login=calculus@rezozer.net
AE28 AE15 710D FF1D 87E5  A762 3F92 19A6 7F36 C68B

[toc] | [prev] | [next] | [standalone]


#926714 — Bug#912624: Firehol 3.1.6 seems fixed

FromRussel Winder <russel@winder.org.uk>
Date2018-11-07 14:40 +0100
SubjectBug#912624: Firehol 3.1.6 seems fixed
Message-ID<wRwdP-7aa-1@gated-at.bofh.it>
In reply to#925626

[Multipart message — attachments visible in raw view] — view raw

Hi,

I upgraded to 3.1.6+ds-4 this morning, and it appears to have installed
correctly and overwritten the file I hand installed. This would seem to
indicate this problem is now solved.

Thanks, for getting this repackaging done quickly, it is much
appreciated.
 
Russel.

[toc] | [prev] | [next] | [standalone]


#927269 — Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)

FromCristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com>
Date2018-11-10 15:10 +0100
SubjectBug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)
Message-ID<wSC7v-7lv-1@gated-at.bofh.it>
In reply to#925626
On Wed, 7 Nov 2018, Debian Bug Tracking System wrote:
> 
> This is an automatic notification regarding your Bug report
> which was filed against the firehol package:
> 
> #912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me
> 
> It has been closed by Jerome Benoit <calculus@rezozer.net>.
> 
> Their explanation is attached below along with your original report.
> If this explanation is unsatisfactory and you have not received a 
> better one in a separate message then please contact Jerome Benoit 
> <calculus@rezozer.net> by replying to this email.

Unfortunatelly, 3.1.6+ds-4 does not solve my problem.  Postinstall 
still failes.  But at the bottom of it all is this:

# /usr/sbin/firehol stop
                    ^^^^
 WARNING: error initializing iptables: IPv4 disabled
 WARNING: error initializing ip6tables: IPv6 disabled
 ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol status
                    ^^^^^^
 WARNING: error initializing iptables: IPv4 disabled
 WARNING: error initializing ip6tables: IPv6 disabled
 ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol try
                    ^^^
 WARNING: error initializing iptables: IPv4 disabled
 WARNING: error initializing ip6tables: IPv6 disabled
 ERROR: Neither IPv4 nor IPv6 is available - exiting
# /usr/sbin/firehol debug
                    ^^^^^
 WARNING: error initializing iptables: IPv4 disabled
 WARNING: error initializing ip6tables: IPv6 disabled
 ERROR: Neither IPv4 nor IPv6 is available - exiting

I'm now back to 3.1.5+ds1-2, which works as expected.
What am I missing?


Cheers,

-- 
Cristian

[toc] | [prev] | [next] | [standalone]


#927376 — Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)

FromCristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com>
Date2018-11-11 09:40 +0100
SubjectBug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)
Message-ID<wSTrI-1sk-5@gated-at.bofh.it>
In reply to#925626
On Sun, 11 Nov 2018, Jerome BENOIT wrote:
> 
> Hello, I am sorry to read that.
> 
> When you say `This is sysV init, _not_ systemd',
> do you mean that you run on a Debian box (but not a Devuan box) ?

This is a Debian sid box with sysV init.

And I did realize shortly after sending the message bellow that I 
managed to overwrite the conf-files (both /etc/default/firehol and 
/etc/firehol/firehol.conf) in the process.

I'll continue investigation, though.

> On 10/11/2018 18:05, Cristian Ionescu-Idbohrn wrote:
> > On Wed, 7 Nov 2018, Debian Bug Tracking System wrote:
> >>
> >> This is an automatic notification regarding your Bug report
> >> which was filed against the firehol package:
> >>
> >> #912624: firehol: both 3.1.5+ds1-3 and 3.1.6+ds-1 broken for me
> >>
> >> It has been closed by Jerome Benoit <calculus@rezozer.net>.
> >>
> >> Their explanation is attached below along with your original report.
> >> If this explanation is unsatisfactory and you have not received a 
> >> better one in a separate message then please contact Jerome Benoit 
> >> <calculus@rezozer.net> by replying to this email.
> > 
> > Unfortunatelly, 3.1.6+ds-4 does not solve my problem.  Postinstall 
> > still failes.  But at the bottom of it all is this:
> > 
> > # /usr/sbin/firehol stop
> >                     ^^^^
> >  WARNING: error initializing iptables: IPv4 disabled
> >  WARNING: error initializing ip6tables: IPv6 disabled
> >  ERROR: Neither IPv4 nor IPv6 is available - exiting
> > # /usr/sbin/firehol status
> >                     ^^^^^^
> >  WARNING: error initializing iptables: IPv4 disabled
> >  WARNING: error initializing ip6tables: IPv6 disabled
> >  ERROR: Neither IPv4 nor IPv6 is available - exiting
> > # /usr/sbin/firehol try
> >                     ^^^
> >  WARNING: error initializing iptables: IPv4 disabled
> >  WARNING: error initializing ip6tables: IPv6 disabled
> >  ERROR: Neither IPv4 nor IPv6 is available - exiting
> > # /usr/sbin/firehol debug
> >                     ^^^^^
> >  WARNING: error initializing iptables: IPv4 disabled
> >  WARNING: error initializing ip6tables: IPv6 disabled
> >  ERROR: Neither IPv4 nor IPv6 is available - exiting
> > 
> > I'm now back to 3.1.5+ds1-2, which works as expected.
> > What am I missing?


-- 
Cristian

[toc] | [prev] | [next] | [standalone]


#927383 — Bug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)

FromCristian Ionescu-Idbohrn <cristian.ionescu-idbohrn@axis.com>
Date2018-11-11 11:10 +0100
SubjectBug#912624: closed by Jerome Benoit <calculus@rezozer.net> (Bug#912624: fixed in firehol 3.1.6+ds-4)
Message-ID<wSUQN-2ss-1@gated-at.bofh.it>
In reply to#927376

[Multipart message — attachments visible in raw view] — view raw

On Sun, 11 Nov 2018, Cristian Ionescu-Idbohrn wrote:
> On Sun, 11 Nov 2018, Jerome BENOIT wrote:
> > 
> > Hello, I am sorry to read that.
> > 
> > When you say `This is sysV init, _not_ systemd',
> > do you mean that you run on a Debian box (but not a Devuan box) ?
> 
> This is a Debian sid box with sysV init.
> 
> And I did realize shortly after sending the message bellow that I 
> managed to overwrite the conf-files (both /etc/default/firehol and 
> /etc/firehol/firehol.conf) in the process.
> 
> I'll continue investigation, though.

Repeating the upgrade process I found out that /etc/firehol/firehol.conf 
is _forcebly_ overwritten.  So, that's one bug:

	Installing new version of config file /etc/firehol/firehol.conf ...

I'm asked if I want to keep /etc/default/firehol, though.

The second bug is that the /usr/sbin/firehol has the ip*tables* paths 
hardcoded to /usr/sbin/, but most of those binaries are installed in 
/sbin/ (in the iptables package version I use; see bellow).  Why on 
earth would one hardcode program paths, when /etc/profile sets the 
PATH:

	# /etc/profile: system-wide .profile file for the Bourne shell (sh(1))
	# and Bourne compatible shells (bash(1), ksh(1), ash(1), ...).

	if [ "`id -u`" -eq 0 ]; then
	  PATH="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
	else
	  PATH="/usr/local/bin:/usr/bin:/bin:/usr/local/games:/usr/games"
	fi
	export PATH

and create lots of maintenance problems, I never understood :/  Is the 
PATH variable going away?

Creating these symlinks:

	lrwxrwxrwx 1 root root   20 Nov 11 10:12 ip6tables -> ../../sbin/ip6tables
	lrwxrwxrwx 1 root root   28 Nov 11 10:16 ip6tables-restore -> ../../sbin/ip6tables-restore
	lrwxrwxrwx 1 root root   25 Nov 11 10:14 ip6tables-save -> ../../sbin/ip6tables-save
	lrwxrwxrwx 1 root root   19 Nov 11 10:12 iptables -> ../../sbin/iptables
	lrwxrwxrwx 1 root root   27 Nov 11 10:15 iptables-restore -> ../../sbin/iptables-restore
	lrwxrwxrwx 1 root root   24 Nov 11 10:15 iptables-save -> ../../sbin/iptables-save

saved my day ;)

I'm staying with iptables:

	Installed: 1.6.2-1.1

as I do experience problems with:

	Candidate: 1.8.1-2

which _does_ install compatibility symlinks, the other way around.

	iptables (1.8.1-2) unstable; urgency=medium

	  * [5edbd6e] iptables: introduce /sbin compatibility symlinks (Closes: #911777)

	 -- Arturo Borrero Gonzalez <arturo@debian.org>  Thu, 25 Oct 2018 13:27:15 +0200


-- 
Cristian

[toc] | [prev] | [standalone]


Back to top | Article view | linux.debian.bugs.dist


csiph-web