Re: [bwm-tools-tech] firewall rules problems

[Alejandro R. <al...@un...>]

Hi again kobe,

We did what you said about iptables-restore, and we think it worked :)
(see * bellow), but now we're having problems trying to run bwmd (see **
bellow).

*This is our iptables status now:

[root@kerrigan root]# service iptables status=20
Table: nat
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

Table: filter
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
                                                                         =
                                =20
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
                                                                         =
                                =20
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
                                                                         =
                                =20
Chain bwmd (0 references)
target     prot opt source               destination
QUEUE      all  --  anywhere             anywhere           MARK match
!0x0

Table: mangle
Chain PREROUTING (policy ACCEPT)
target     prot opt source               destination
=20
Chain INPUT (policy ACCEPT)
target     prot opt source               destination
=20
Chain FORWARD (policy ACCEPT)
target     prot opt source               destination
MARK       tcp  --  macondo.unicauca.edu.co !172.16.0.0/16      MARK set
0x3e9
MARK       udp  --  macondo.unicauca.edu.co !172.16.0.0/16      MARK set
0x3e9
MARK       tcp  --  anywhere             anywhere           MARK set
0x3f0
MARK       udp  --  anywhere             anywhere           MARK set
0x3f0
=20
Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination
=20
Chain POSTROUTING (policy ACCEPT)
target     prot opt source               destination


*And this is the problem we're having with bwmd:

[root@kerrigan root]# bwmd --foreground
BWM Daemon v0.1.8 - Copyright (c) 2003 Linux Based Systems Design
=20
BWMD: Loaded 3 flows and 2 queues
BWMD: Found 0 modules to load
IPQ runner started...
Failed to set IPQ mode
passer: Failed to send netlink message: Connection refused
Failed to get IPQ handle
Flow runner started...
Stat thread started...

Thanks for the help.

P.D.: Sorry for all these long e-mails.


--=20
Alejandro R=EDos Pe=F1a
---------------------------------------------------
| Estudiante Ing. Electr=F3nica y Telecomunicaciones
| Universidad del Cauca
| Coord. Grupo GNU/Linux Unicauca
| Socio Avatar Ltda.
| Integrante ParqueSoft
| Popay=E1n, Colombia
---------------------------------------------------=20
"Quien ha de morir, libere su software a la comunidad"
--=20
Alejandro R=EDos Pe=F1a
---------------------------------------------------
| Estudiante Ing. Electr=F3nica y Telecomunicaciones
| Universidad del Cauca
| Coord. Grupo GNU/Linux Unicauca
| Socio Avatar Ltda.
| Integrante ParqueSoft
| Popay=E1n, Colombia
---------------------------------------------------=20
"Quien ha de morir, libere su software a la comunidad"