Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #264936 > unrolled thread

Mason service on personal computer

Back to article view | Back to linux.debian.user

Contents

  Mason service on personal computer Daniel Rodriguez <alearningmagnus@gmail.com> - 2023-12-20 01:00 +0100
    Re: Mason service on personal computer Charles Curley <charlescurley@charlescurley.com> - 2023-12-20 05:20 +0100
    Re: Mason service on personal computer glasswings <glasswings363@disroot.org> - 2023-12-20 08:10 +0100
    Re: Mason service on personal computer john doe <johndoe65534@mail.com> - 2023-12-20 08:50 +0100

#264936 — Mason service on personal computer

[Multipart message — attachments visible in raw view] — view raw

Hello,

I want to understand the purpose of a service that I found on my personal
PC. it's mason.service, I am troubleshooting, some services and it shows
the following output with systemctl status mason.service:

● mason.service - LSB: Starts the mason firewall script
>      Loaded: loaded (/etc/init.d/mason; generated)
>      Active: failed (Result: exit-code) since Tue 2023-12-19 17:51:40 -05;
> 18min ago
>        Docs: man:systemd-sysv-generator(8)
>     Process: 1250 ExecStart=/etc/init.d/mason start (code=exited,
> status=1/FAILURE)
>         CPU: 4ms


Dec 19 17:51:40 DantiteisMagno systemd[1]: Starting LSB: Starts the mason
> firewall script...
> Dec 19 17:51:40 DantiteisMagno mason[1250]: /etc/init.d/mason: 111:
> /var/lib/mason/samlib: cannot create /dev/stderr: No such device or address
> Dec 19 17:51:40 DantiteisMagno systemd[1]: mason.service: Control process
> exited, code=exited, status=1/FAILURE
> Dec 19 17:51:40 DantiteisMagno systemd[1]: mason.service: Failed with
> result 'exit-code'.
> Dec 19 17:51:40 DantiteisMagno systemd[1]: Failed to start LSB: Starts the
> mason firewall script.


I read on the web and it suggests that it works when one uses a firewall in
the middle of the network to administrate. I don't have a firewall, it's a
simple personal PC, but I would like to confirm if this is a service that
is working for no reason on my personal PC; otherwise, does it have a
different purpose?

[toc] | [next] | [standalone]

#264943

On Tue, 19 Dec 2023 18:57:52 -0500
Daniel Rodriguez <alearningmagnus@gmail.com> wrote:

> I read on the web and it suggests that it works when one uses a
> firewall in the middle of the network to administrate. I don't have a
> firewall, it's a simple personal PC, but I would like to confirm if
> this is a service that is working for no reason on my personal PC;
> otherwise, does it have a different purpose?

You may not have a physical box that sits between your computer and the
Internet. But you almost certainly have some sort of software firewall
on your PC, which does much the same thing.

https://en.wikipedia.org/wiki/Firewall_(computing)

apt-cache show mason

-- 
Does anybody read signatures any more?

https://charlescurley.com
https://charlescurley.com/blog/

[toc] | [prev] | [next] | [standalone]

#264953

On Tue, Dec 19, 2023 at 06:57:52PM -0500, Daniel Rodriguez wrote:
> I want to understand the purpose of a service that I found on my personal
> PC. it's mason.service,

=> http://www.stearns.org/mason/mason-2.html

It's a tool for building firewall rules based on typical traffic.  But
as far as I can tell it's only to run with manual monitoring and
configuration, so if you don't know why it's there there's no point
running it or having it installed.

> I don't have a firewall, it's a simple personal PC,

Networked Linux is typically shipped with the ability to understand
and enforce firewall rules - that means you have firewall features -
but if you're behind a port-blocking home router it's probably not
worth setting those rules up.  This is most likely the setup you have,
but you can check with 

    ip addr

Your ethernet or wifi probably has a 192.168.x.x local-only address,
which means you only get incoming traffic through NAT, which means you
also have a firewall.  If you're connected directly to the public
Internet (shockingly rare in these days) you wouldn't.

When you get upgraded to IPv6 you'll get a real global address with no
NAT (no NAT for native 6-to-6 traffic) but typically home routers
still give you a strict firewall.

[toc] | [prev] | [next] | [standalone]

#264956

On 12/20/23 00:57, Daniel Rodriguez wrote:
> Hello,
>
> I want to understand the purpose of a service that I found on my personal
> PC. it's mason.service, I am troubleshooting, some services and it shows
> the following output with systemctl status mason.service:
>
> ● mason.service - LSB: Starts the mason firewall script
>>       Loaded: loaded (/etc/init.d/mason; generated)
>>       Active: failed (Result: exit-code) since Tue 2023-12-19 17:51:40 -05;
>> 18min ago
>>         Docs: man:systemd-sysv-generator(8)
>>      Process: 1250 ExecStart=/etc/init.d/mason start (code=exited,
>> status=1/FAILURE)
>>          CPU: 4ms
>
>
> Dec 19 17:51:40 DantiteisMagno systemd[1]: Starting LSB: Starts the mason
>> firewall script...
>> Dec 19 17:51:40 DantiteisMagno mason[1250]: /etc/init.d/mason: 111:
>> /var/lib/mason/samlib: cannot create /dev/stderr: No such device or address
>> Dec 19 17:51:40 DantiteisMagno systemd[1]: mason.service: Control process
>> exited, code=exited, status=1/FAILURE
>> Dec 19 17:51:40 DantiteisMagno systemd[1]: mason.service: Failed with
>> result 'exit-code'.
>> Dec 19 17:51:40 DantiteisMagno systemd[1]: Failed to start LSB: Starts the
>> mason firewall script.
>
>
> I would like to confirm if this is a service that
> is working for no reason on my personal PC; otherwise, does it have a
> different purpose?
>

As shown in the above output the service has failed to start.

We do not have enough informations to say if it is working or being used.

Given that this is FW related, it might not hurt to ensure that incoming
traffic is blocked by using a front-end to nftables (built-in FW
capability).

--
John Doe

[toc] | [prev] | [standalone]

Back to top | Article view | linux.debian.user

csiph-web