Printable View
.
With each Knoppix new version I ask the same question
about Menu>Preferences>Knoppix firewall.
Since this GUI doesn't save any information, is there a default that
is satisfactory or might there be a problem?
I've never received AND understood any answer I've gotten.
Can someone take another try at enlightening me?
I believe you are hitting a bug. Basically the script works for a previous previous old version of Knoppix but it has not been updated since. You can look at /etc/init.d/firewall if you are interested to find out how it works and perhaps you can also try to fix the saving error.
Edit '/usr/sbin/firewall' at position 'saveconfig()'
and change 'mount | grep -q "KNOPPIX.IMG"' to 'mount | grep -q "KNOPPIX-DATA"'
Greetings Werner * http://www.wp-schulz.de/knoppix/summary.html
Own Rescue-CD with Knoppix (Knoppix V6.7.1 remaster)
@ kl522 & Werner
I'll try this.
The last time I asked, Forester told me to fix it myself.
Now I may be able to do so.
Thanks again.
So, I changed /usr/sbin/firewall line 288 from 'KNOPPIX-DATA.img' to 'KNOPPIX-DATA'.
The GUI now accepts my choices.
Now in /etc/init.d/firewall line 272, I note the default has always been 'easy'.
and in line 136 I see 'easy' means 'only-outgoing'. That's a relief.
And, I'm adding /usr/sbin/firewall to my backup list, just in case I ever change
from 'easy' to 'something else'.
'/etc/init.d/firewall' is only a symlink to '/usr/sbin/firewall'.
The settings are written to '/etc/sysconfig/firewall'.
@ Werner
That's serendipitous. I've already got that covered with etc.
I didn't think to check that /usr/sbin/firewall might have been a symlink. Thanks again.
I see on debian-knoppix mail list that KK has gotten the word on this.
When will a change actually show up in isos for download?
Will that not be until a version change?
Or are there ongoing changes with later-dated 6.7.1 isos?
KK fixed it today
http://debian-knoppix.alioth.debian....ewall-knoppix/
@ Werner & kl522
I note that for both the LiveCD and the LiveUSB
there is no /etc/sysconfig/firewall file if the Knoppix Firewall GUI
has not successfully registered any choices.
After 'correcting' /usr/sbin/firewall I note that there is now
an /etc/sysconfig/firewall file with my choices registered thus:
ACTIVE='yes'
CURRENTMODE='easy'
Which is completely satisfactory.
It is no longer obvious to me what the PRIOR state of the firewall was
before our intervention. The default for CURRENTMODE seems ok, but
I don't know how to determine whether the firewall was ever indeed
ACTIVE in the prior situation.
As an amendment to my post #7, I think it necessary to keep usr/bin/firewall in
my backup repertoire until such time as I am using one of KK's isos
that incorportate the correction.
No, it's sufficient to save '/etc/sysconfig/firewall' in your private update.tar.gz
And why not download the new firewall package and install with "dpkg -i"?