Problems with pmfirewall i just dont understand....

[LordStanley]

ok to start off i'm using redhat 6.2, roaring penguin pppoe to connect and choose the no firewall at the set up script. I'm running pmfirewall when i start pmfirewall i get this ......
Starting Pmfirewall:/sbin/ipchains: invalid mask `' specified.

whats with that?

I guess the major problem i'm having is i cant get port 80 open to run a web server. During the pmfirewall install script i said yes to running a web server on port 80. When i go to www.grc.com (http://www.grc.com) to probe my ports it says port 80 is stealthed???? how could this be? shouldnt port 80 be open??

should i post the ipchains rules pmfirewall made when i installed it?

[Fandelem]

have you edited your pmfirewall.rules.conf file at all? if so, post it -- it looks like you might have a typo somewhere that we can help you with

~kyle

[johnwebb]

If you used the default install of Pmfirewall and the RPM install of rp-pppoe the problem is that pmfirewall is starting before your adsl connection is established. If you have a static IP address what you do is run the Pmfirewall setup script, when it asks for you external interface enter ppp0, when it asks if it should detect IP address at startup enter N, then enter your IP address when prompted. This way Pmfirewall has all the information it needs to start.

If you are blocking hosts by hostname this will not work because you need DNS to resolve the hostname and to do that you need a connection.

[LordStanley]

Originally posted by johnwebb:
If you used the default install of Pmfirewall and the RPM install of rp-pppoe the problem is that pmfirewall is starting before your adsl connection is established. If you have a static IP address what you do is run the Pmfirewall setup script, when it asks for you external interface enter ppp0, when it asks if it should detect IP address at startup enter N, then enter your IP address when prompted. This way Pmfirewall has all the information it needs to start.

If you are blocking hosts by hostname this will not work because you need DNS to resolve the hostname and to do that you need a connection.


i changed the install script ( i had it looking at eth0 as the external interface) i changed it to ppp0 and it asked if i wanted to start the firewall on ppp0 connection i said yes. I went back to the grc.com site and probed my ports again and 80 is OPEN!!!! wah hoo!!!!!!!!

Thanks guys !!!!!!