PDA

View Full Version : Problem with the Firewall?


hares
5th December 2005, 10:55 AM
Hi, since a view days i have a big problem with my internet connection.

When i startup my computer everything is fine. the internet works also fine. but after a view minutes all the connections get closed.

when this happens i found out that i only have to run this command as root.
/usr/sbin/lokkit

then i have to click on ok and the connection is still there again.

i realy dont know why :confused: . it is no provider problem, because in windows it works fine.

i m using fedora core 3 and i have a connection via the cabletv to the internet.

please help me!

thank you

hiberphoptik
5th December 2005, 12:34 PM
sounds like a needle inthe haystack problem..

have you tried tail -f /var/log/messages in a terminal window and see if any special error message happens when your connectiondies?

If something is happening that causes an error I bet that will help you find the culprit ;)

mndar
5th December 2005, 01:51 PM

Try disabling iptables and using the connection for a while.
Create a proper iptables configuration using lokkit and then enable iptables.

hares
5th December 2005, 03:53 PM
These are the messages which i get from the tail:

Dec 5 16:50:59 pc-80 last message repeated 2 times
Dec 5 16:50:59 pc-80 kernel: ip_tables: (C) 2000-2002 Netfilter core tea m
Dec 5 16:50:59 pc-80 kernel: ip_conntrack version 2.1 (2048 buckets, 16384 max) - 272 bytes per conntrack

and this is the message after lokkit:
Dec 5 16:51:00 pc-80 iptables: succeeded

can someone help me, what does this mean?

hares
5th December 2005, 05:23 PM
Yes it is a iptable problem!

wenn i disable the iptables it works fine, but when i configure them with the lokkit and restart the iptables
there is still the same problrem.

i dont know what i should do!

mndar
5th December 2005, 06:42 PM
Double check your configuration. Try some other configuration tool like FWBuilder. You can try firestarter which is the simplest of all but tis not a rule builder. Its a frontend to iptables.
The best option is to write your own rules. Refer this site for a start http://www.siliconvalleyccie.com/linux-hn/iptables-intro.htm
You can make simple yet very secure rule sets with little reading. Refer this thread for an example http://fedoraforum.org/forum/showthread.php?t=85693