Re: [bwm-tools-tech] Re: Cannot run bwmd

[Nigel K. <nk...@lb...>]

Hi Victor,

You must also build in the QUEUE target for iptables and if you built
this as a module you need to modprobe queue first.

Regards
Nigel


Victor Yeo wrote:

> hi again,
> i have build iptables on kernel. i still have problems when i run
> bwmd. Please help me. Thanks.
> --------------------------------------------------------------------------------------------------------
> $ ./bwmd -f
> BWM Daemon v0.2.1 - Copyright (c) 2003-2005 Linux Based Systems Design
> BWMD: Loaded 5 flows and 4 queues
> BWMD: Found 0 modules to load
> IPQ runner started...
> Failed to set IPQ mode
> passer: Failed to send netlink message: Connection refused
> Failed to get IPQ handle
> Flow runner started...
> Stat thread started...
> Report runner started...
>
>     ----- Original Message -----
>     *From:* Yeo Siow Vic <mailto:ye...@nd...>
>     *To:* bwm...@li...
>     <mailto:bwm...@li...>
>     *Sent:* Wednesday, April 27, 2005 4:09 PM
>     *Subject:* Cannot run bwmd
>
>     hi all,
>     I have compiled Bwm successfully, and followed step 4 "Integrating
>     Bwm Tools" in the Bwm manual. However, i met with the following
>     problems. here're the steps i did: My firewall.xml file is
>     attached at the end. Do i need to install iptables in kernel??
>     Please help me. Thanks
>     ==========================================================================
>     $ ./bwm_firewall -f=iptables-restore
>     BWM Firewall v0.2.1 - Copyright (c) 2003-2005 Linux Based Systems
>     Design
>     Loading configuration from "/etc/bwm_tools/firewall.xml"...
>     ERROR: Class http_traffic_in invalid, ignoring
>     ERROR: Class smtp_traffic_in invalid, ignoring
>     ERROR: Class p2p_traffic_in invalid, ignoring
>     ERROR: Class http_traffic_out invalid, ignoring
>     ERROR: Class smtp_traffic_out invalid, ignoring
>     ERROR: Class p2p_traffic_out invalid, ignoring
>     Writing IPTables configuration to "=iptables-restore"...
>     $ iptables-restore < /etc/sysconfig/iptables
>     bash: /etc/sysconfig/iptables: No such file or directory
>     $ ./bwmd -f
>     BWM Daemon v0.2.1 - Copyright (c) 2003-2005 Linux Based Systems Design
>     BWMD: Loaded 8 flows and 0 queues
>     BWMD: Found 0 modules to load
>     IPQ runner started...
>     Failed to set IPQ mode
>     passer: Failed to send netlink message: Connection refused
>     Failed to get IPQ handle
>     Flow runner started...
>     ===========================================================
>     this is my firewall.xml file.
>     ===========================================================
>     <firewall>
>     # Global configuration and access classes
>     <global>
>     <class name="http_traffic">
>     <address dst="192.168.4.50" proto="tcp" dst-port="80"/>
>     </class>
>     <class name="ssh_traffic">
>     <address dst="192.168.4.50" proto="tcp" dst-port="22"/>
>     </class>
>     </global>
>
>     # Access control lists
>     <acl>
>     <table name="filter">
>     <chain name="INPUT" default="DROP">
>     <rule name="allowed_traffic" target="ACCEPT">
>     http_traffic
>     ssh_traffic
>     </rule>
>     </chain>
>     <chain name="FORWARD" default="DROP">
>     </chain>
>     <chain name="OUTPUT" default="ACCEPT">
>     </chain>
>     </table>
>     </acl>
>
>     # Traffic flows
>     <traffic>
>     <flow name="dsl_line_in" max-rate="64000" report-timeout="60">
>     <flow name="http_in" max-rate="32000" burst-rate="64000" nfmark="100">
>     http_traffic_in
>     </flow>
>     <flow name="smtp_in" max-rate="8000" burst-rate="32000" nfmark="101">
>     smtp_traffic_in
>     </flow>
>     <flow name="p2p_in" max-rate="24000" burst-rate="32000"
>     nfmark="102">
>     p2p_traffic_in
>     </flow>
>     </flow>
>     <flow name="dsl_line_out" max-rate="64000" report-timeout="60">
>     <flow name="http_out" max-rate="32000" burst-rate="64000"
>     nfmark="200">
>     http_traffic_out
>     </flow>
>     <flow name="smtp_out" max-rate="8000" burst-rate="32000" nfmark="201">
>     smtp_traffic_out
>    </flow>
>     <flow name="p2p_out" max-rate="24000" burst-rate="32000" nfmark="202">
>     p2p_traffic_out
>     </flow>
>     </flow>
>     </traffic>
>
>     </firewall>
>     Rgds,
>     victor
>