Bug#299223: better idea

[Thilo Pfennig]

Am Montag, den 14.03.2005, 18:19 -0500 schrieb Justin Pryzby:
 On Mon, Mar 14, 2005 at 06:08:39PM -0500, pryzbyj wrote:
  On second thought, I'm not sure where you are seeing the reported
  error (in a logfile?).

In Webmin.


 mkfifo /tmp/fifo;
 tee -a /tmp/iptables.out 0/tmp/fifo 
 echo -en \n$(date)\n$0 $@ /tmp/fifo;
 exec 1/tmp/fifo 21

Where to put? init_d load?


 Also, what steps are you taking in webmin to cause the error?

I don't know what specific caused the output of the error any more. 
I will, though mail the specifics if I meet the error again.

-- 
http://www.alternativ.net/~vinci
Jabber: [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#299223: better idea

[Justin Pryzby]

On Tue, Mar 15, 2005 at 01:47:17PM +0100, Thilo Pfennig wrote:
 Am Montag, den 14.03.2005, 18:19 -0500 schrieb Justin Pryzby:
  On Mon, Mar 14, 2005 at 06:08:39PM -0500, pryzbyj wrote:
   On second thought, I'm not sure where you are seeing the reported
   error (in a logfile?).
 
 In Webmin.
I see; it just displays the output of the shell commands.

  mkfifo /tmp/fifo;
  tee -a /tmp/iptables.out 0/tmp/fifo 
  echo -en \n$(date)\n$0 $@ /tmp/fifo;
  exec 1/tmp/fifo 21
 
 Where to put? init_d load?
I originally thought that it should go in /etc/init.d/iptables.  Now,
I think you should use a wrapper script around /sbin/iptables-save or
iptables-restore.

  Also, what steps are you taking in webmin to cause the error?
 
 I don't know what specific caused the output of the error any more. 
 I will, though mail the specifics if I meet the error again.
That would be very useful, if you could come up with a minimal
sequence of actions to reproduce the problem.  Then, its easy to make
a wrapper script to help diagnose the source of that problem.

Also, if you can reproduce it, please try installing an updated
iptables [0] which may fix the problem:

Changes: 
 iptables (1.2.11-9) unstable; urgency=medium
 .
[...]
   * Bug#283721, Policy match save code puts in line feed that makes
 iptables-restore error, reported and fixed by Matthew Grant.
 Thanks.

I mailed the iptables maintainer just to see if they thought that it
was likely the same thing.

Thanks,
Justin

References

[0] 
ftp://ftp.debian.org/debian/pool/main/i/iptables/iptables-dev_1.2.11-10_i386.deb


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#299223: better idea

[Justin Pryzby]

On second thought, I'm not sure where you are seeing the reported
error (in a logfile?).

It might help to use the following lines in /etc/init.d/iptables:

  mkfifo /tmp/fifo;
  tee -a /tmp/iptables.out 0/tmp/fifo 
  echo -en \n$(date)\n$0 @$ /tmp/fifo;
  exec 1/tmp/fifo 21

And if someone knows a better way of doing this, I'm all ears ..

Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Bug#299223: better idea

[Justin Pryzby]

On Mon, Mar 14, 2005 at 06:08:39PM -0500, pryzbyj wrote:
 On second thought, I'm not sure where you are seeing the reported
 error (in a logfile?).
 
 It might help to use the following lines in /etc/init.d/iptables:
It should be $@, not @$:

mkfifo /tmp/fifo;
tee -a /tmp/iptables.out 0/tmp/fifo 
echo -en \n$(date)\n$0 $@ /tmp/fifo;
exec 1/tmp/fifo 21

Also, what steps are you taking in webmin to cause the error?

Thanks,
 Justin


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]