Firewall is not starting

[donald]

In Porteus-XFCE-v2.1-i486 (32) The Firewall is not starting at boot-up,
no matter what you choose in PSC.
You have to make /etc/rc.d/rc.FireWall executeable,otherwise you have
no Firewall

Error-massage:

Code: Select all

init: Entering runlevel:4
/etc/rc4.d/S-firewall.sh: Line 8: /etc/rc.d/FireWall: Permission denied

This could also be a general Problem, not only XFCE related.

[wread]

You must make it executable, so the firewall can start. Open the core.xzm pack find /etc/rc.d/rc.firewall do chmod +x and repack and reboot. You will have your firewall running.

Grüsse

[donald]

@wread

I know, but all others should it also know.

And as usual the Firewall settings fallback from "Block all" to "strict".
after a reboot.
You can check it with iptables -L -v

[francois]

Isn't being covered by a router, or hardware firewall enough?

[donald]

@francois

A good (not cheap) Hardware-Firewall is the best solution

The Security of a NAT-Router ( NAT= Network address translation),
depends on how bugfree the Firmware is.And many user use them
"out of the Box" without configuration.(remote connections)
Just googeling for the default (Factory) Passwords for the configuration-menue,
and you are in.

But really important is a secure Firewall,even with Linux,when you go
out of your Home with your Laptop and a WiFi or UMTS-Stick

But never mind...use clonezilla...make Images of your Partitions/HDD's,
and if something looks suspicious,restore them. 8)

[ncmprhnsbl]

this should probly be in the bug section as this is a core issue. (also in lxde 64)
as to its importance, i see it like this: if you're offering a function, it should probably work.
even though the fix is easy enough,
this might be an opportunity to use the "Porteus Updater"?

[fanthom]

@brokenman
this commit must broke firewall function in PCS:

Code: Select all

- added a check to rc.services to start firewall if rc.FireWall is executable

exec bit is taken off by default in 2.1 so PSC should be updated to reflect that.
please push updated PSC through 'updates' - sorry for hassle.

[francois]

Just googeling for the default (Factory) Passwords for the configuration-menue,
and you are in.

Thus, one has to use a strong password on its hardware firewall. Is there a particular setup of the router that could be stronger than any other one?

[donald]

@francois
http://forum.porteus.org/viewtopic.php? ... 850#p16850