Jump to content

rohitsz

OTW
  • Posts

    98
  • Joined

  • Last visited

Posts posted by rohitsz

  1. Hi,

    Bin the DVD's you have burned, use k3b to image the original DVD to an ISO image, and then burn that ISO instead as many times as you wish.

    Simple, isn't it?

     

    thanks for the tip :-)

    I am quite happy to follow what you said and got a bootable dvd :thumbs:

     

    Anyways i'll give the non-bootable to someone who ain't gona remove mandriva from their systems.

    So i'll most certainly put that to use too :-)

     

    thanks again both to scarecrow and pmpatrick(for step by step instructions) :-)

     

    regards,

    rohit.

  2. Greetings there,

     

    i am in need of couple of mandriva dvd's to be given to users of systems where i installed mandriva.

    So i copied my mandriva dvd to hard disk, and used k3b to write it all to the blank dvd media.

    Now when i boot using the newly written dvd, it does not boot from it.

    I guess i need to attach a boot file(image file) to the dvd to make it bootable...i really do not know which file that it is... i think it is in the isolinux folder.

    here are its contents:

    [rohitsz@localhost isolinux]$ ls
    advanced.msg*  alt1/	  boot.msg*  isolinux.bin*  test/
    alt0/		  boot.cat*  help.msg*  isolinux.cfg*  xbox/
    [rohitsz@localhost isolinux]$

    kindly help me finding that.

    The topmost dir of the dvd is as follows:

    [rohitsz@localhost cdrom]$ ls
    autorun.inf*  dosutils/   INSTALL.txt*  linuxboot.cfg*  pkg-2006.0.idx*
    copying*	  export*	 isolinux/	 md5sum*		 README.txt*
    default.xbe*  index.htm*  lang/		 media/		  release-notes.txt*
    doc/		  install/	LICENSE.txt*  misc/		   version*
    [rohitsz@localhost cdrom]$

     

    And can i now make the dvd that i wrote bootble or do i need to get another media!?

     

    thanks,

    rohit.

  3. Greetings there,

     

    Well actually i was handed over the system in this state, so really don't know how it landed in this state what i know is that there was extensive use of a 3D drawing package for quite some long time...

    Also i did run scan disk but it says to free up disk space.

    But that is windows incapability...

     

    Is there any way that i do not mount the partition or using the dd command anyways to delete those files?

    i need to dig more deeper..i am not favoring formatting of the partition, as the re-install of software is a big bore on windows!

     

    anyways, thanks for all your help, i am looking for more,will put here if i find anything..

     

    regards,

    rohit.

  4. Hi ian,

     

    If you type this:

     

    mount

     

    it should show your mounted drives, does it show the fat32 mounted, and does it show as rw? If as ro, try this from my website:

     

    http://www.buziaks.com/ian/mdk10xmountdiskreadwrite.htm

     

    My partition is mounted rw...

    [root@localhost win_c]# mount |grep /dev/hda1
    /dev/hda1 on /mnt/win_c type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    [root@localhost win_c]#

     

    As you can see it is mounted in rw mode.

    What i can make of this is probably, due to large files, some how this error is cropping up. I am looking for a low level file deletion utility, if that fits in this situation.

     

    thanks,

    rohit.

  5. Greetings there.

     

    Well i am in a kind of a weird situation.

    This problem is created by windows, but i think linux can get me out of this.

    So it happened one day, that my win98 partition somehow got corrupted, and it left a hell lot of files that range from 500M to 2+G.

    A screen shot of the same is here

     

    So i tried to mount that partition as rw, but whenever i try to delete any file(with a little less strange names than the ones in the pic), i get a read-only file system error.

    I have tried tools like 'rm -f', 'shred -f'.

    But still no success.

    Also i even tried writing a small piece of code in java to truncate the files, but still the same 'read-only' file system error.

    Here's the proof:

    (see /dev/hda1 mounted rw on /mnt/win_c)

    [root@localhost win_c]# mount
    /dev/hdb8 on / type ext3 (rw)
    none on /proc type proc (rw)
    none on /sys type sysfs (rw)
    none on /proc/bus/usb type usbfs (rw,devmode=0664,devgid=43)
    /dev/hdb2 on /boot type ext3 (rw)
    /dev/hdb10 on /home type ext3 (rw)
    none on /mnt/floppy type supermount (rw,sync,dev=/dev/fd0,fs=ext2:vfat,--)
    /dev/hda1 on /mnt/win_c type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hdb5 on /mnt/win_c2 type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hda5 on /mnt/win_d type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hdb6 on /mnt/win_d2 type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hda6 on /mnt/win_e type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hda7 on /mnt/win_f type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hda8 on /mnt/win_g type vfat (rw,umask=0,iocharset=iso8859-1,codepage=850)
    /dev/hdb9 on /usr type ext3 (rw)
    [root@localhost win_c]# ls ding_com.pon
    ding_com.pon*
    [root@localhost win_c]# shred -f ding_com.pon
    shred: ding_com.pon: Read-only file system
    [root@localhost win_c]#

     

    Kindly help me how can i remove those files thru linux.

     

    thanks,

    rohit.

  6. Hi,

     

    My Mandriva 2005 box does not have a DVD burner. I do have a package called k3b-dvd-0.11.20-7mdk installed. I believe this is the package Ixthusdan is referring to.

     

    yes.. i guess my silly mistake!

    maybe i need a little sleep. :zzz:

    the package is called k3b-dvd.

    and here's what i got...

    [root@localhost Desktop]# urpmi k3b-dvd
    To satisfy dependencies, the following 2 packages are going to be installed (0 MB):
    dvd+rw-tools-5.21.4.10.8-2mdk.i586
    k3b-dvd-0.12.3-11mdk.i586
    Is this OK? (Y/n) Y

     

    next time i'll be more aware before posting :wall:

     

    thanks again.

    rohit

  7. Greetings there,

    i have added a new SONY DVD R/RW device, and have started k3b first time.

    My previous cd r/rw is configured correctly and is able to read/write cd r/rw.

     

    now i got the following error:

    Unable to find growisofs executable
    K3b uses growisofs to actually write dvds. Without growisofs you won't be able to write dvds. Make sure to install at least version 5.10.
    Solution: Install the dvd+rw-tools package.
    
    Unable to find dvd+rw-format executable
    K3b uses dvd+rw-format to format DVD-RWs and DVD+RWs.
    Solution: Install the dvd+rw-tools package.

     

    how to i implement the above suggested solution?

     

    i tried the following:

    [root@localhost Desktop]# urpmi k3b
    The package(s) are already installed
    [root@localhost Desktop]# urpmi growisofs
    no package named growisofs
    [root@localhost Desktop]#

     

    thanks,

    rohit.

  8. Greetings there,

     

    Apologies for the late update...

     

    Well thanks a lot to all people who replied..mandriva did easily allow to shrink the windows partition.

    There was just one issue regarding the install, that when i tried to shrink the partition, then the 'shrinking' took a bit too long then i rebooted the system, then again the 'shrinking' went ok. This happened two times, and it was worked ok after rebooting the system,without any loss of data on windows.

     

    Two things i had done before the 'shrinking':

    1)Defrag the windows drive.

    2)Disable and enable the page file before and after the install respectively.

     

    During the 'shrinking' process, if anyone is aware of how mandriva allows to partition disks,in color coded partitions and filesystems mappings, though scary(heh!),but the resizing is very intutive.

     

    And with this, i(& friends) were able to dual boot windows and mandriva.

    The count is 15 as of now(in one day,rather 3 hours,with lotsa fun and knowledge sharing!), but this will undoubtedly increase with the success of the dual booting process.

    So the same continues the coming week ;-)

     

    thanks to all for your help and guidance...

     

    regards,

    rohit.

  9. Greetings there,

     

    We have couple of systems at college,where gnu/linux was to be installed, but we got systems that had m$ window$ on it.

    So we can't remove it totally..so have to make compromise and have win$ and gnu/linux co-exist. As most gnu/linux distro's allow this,and with things in my (humble)hands,i have decided to install mandriva le 2006 on them.

    Untill now i have installed mandriva by making seperate partitions through window$ going thru the repartitioning of disks and re-installing of window$ .This is the first time that i won't be allowed to 'mess' with window$ install, so have to compress the win$ partition and make room for mandriva.

    I have heard(read) that fips 2.0 does the job with fat32 systems.But at a mandriva site, they list a mandriva's 'lossless partitioning tool' I have not seen it listed anywhere else.Also the same link suggests the use of fips 2.0 tool for pre mandriva 7.0 releases!

     

    So could someone tell me how and where i can find any more information on the above and proceed with a co-existing,peaceful dual boot system at these systems.

     

    thanks,

    rohit.

  10. Greetings there,

    couple of times on using urpmi, i get strange messages like the following:

    [root@localhost flash_linux]# urpmi.update Main\ \(Official2006.0-1\)
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.update_source.cz]
    retrieving source hdlist (or synthesis) of "Main (Official2006.0-1)"...
    /bin/cp: accessing `/var/cache/urpmi/partial/synthesis.hdlist_main.cz': Not a directory
    ...copying failed
    ftp://mirror2.mandrakelinux.cn/mandrivalinux/official/current/i586/media/media_info/
    synthesis.hdlist_main.cz
    retrieval of source hdlist (or synthesis) failed
    no hdlist file found for medium "Main (Official2006.0-1)"
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.Main (Official2006.0-1).cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.Contrib (Official2006.0-2).cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.jpackage.cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.plf-free.cz]
    [root@localhost flash_linux]# urpmi.update Main\ \(Official2006.0-1\)
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.update_source.cz]
    retrieving source hdlist (or synthesis) of "Main (Official2006.0-1)"...
    /bin/cp: accessing `/var/cache/urpmi/partial/synthesis.hdlist_main.cz': Not a directory
    ...copying failed
    ftp://mirror2.mandrakelinux.cn/mandrivalinux/official/current/i586/media/media_info/
    synthesis.hdlist_main.cz
    retrieval of source hdlist (or synthesis) failed
    no hdlist file found for medium "Main (Official2006.0-1)"
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.Main (Official2006.0-1).cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.Contrib (Official2006.0-2).cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.jpackage.cz]
    examining synthesis file [/var/lib/urpmi/synthesis.hdlist.plf-free.cz]
    [root@localhost flash_linux]#

     

    One may note that i tried to update Main twice,but still got the same error..

    should't the second consecutive call to update Main indicate that Main is already updated?

     

    same happened with plf_free,jpackage...

     

    what shall i do now?

     

    thanks,

    rohit.

  11. Greetings there,

    i tried to install postfix,and i got this output:

    [root@localhost rohitsz]# urpmi postfix
    To satisfy dependencies, the following 2 packages are going to be installed (4 MB):
    libpostfix1-2.2.5-7mdk.i586
    postfix-2.2.5-7mdk.i586
    Is this OK? (Y/n) y
    Please insert the medium named "Installation Free DVD " on device [/dev/hdc]
    Press Enter when ready...
    /bin/mv: cannot stat `/var/cache/urpmi/partial/libpostfix1-2.2.5-7mdk.i586.rpm': Not a directory
    unable to read rpm file [/mnt/cdrom/media/main/libpostfix1-2.2.5-7mdk.i586.rpm] from medium "Installation Free DVD (cdrom1)"
    /bin/mv: cannot stat `/var/cache/urpmi/partial/postfix-2.2.5-7mdk.i586.rpm': Not a directory
    unable to read rpm file [/mnt/cdrom/media/main/postfix-2.2.5-7mdk.i586.rpm] from medium "Installation Free DVD (cdrom1)"
    
    installing libpostfix1-2.2.5-7mdk.i586.rpm postfix-2.2.5-7mdk.i586.rpm from /mnt/cdrom/media/main
    Preparing...					 #############################################
      1/2: libpostfix1		   #############################################
      2/2: postfix			   #############################################
    Shutting down kernel logger: [  OK  ]
    Shutting down system logger: [  OK  ]
    Starting system logger: [FAILED]
    Starting kernel logger: /etc/init.d/syslog: line 41:  4083 Terminated			  $*
    [  OK  ]
    [root@localhost rohitsz]# rpm -q postfix
    postfix-2.2.5-7mdk
    [root@localhost rohitsz]# service syslog status
    syslogd (pid 4084) is running...
    klogd (pid 4092) is running...
    [root@localhost rohitsz]#

     

    Before the urpmi, i had changed my dvd drive from an acer(dvd-r) to a samsung(dvd-r/rw).Could that contribute to this error?

     

    thanks,

    rohit.

  12. Hello there,

     

    I still do not understand, how did this

    service network restart

    allowed tomcat to listen to port 8080.

     

    Well on more detailed examination, i figured out that the local loopback connection is the thing that is at the bottom of the problem.As the above command, disconnected me from internet also, i started to figure out a way to overcome it..

    I did this:

    [root@localhost rohitsz]# ifup lo
    [root@localhost rohitsz]#

    And after that starting tomcat, i could see the standard tomcat page.

     

    So, how do i make these two steps automatic??

     

    thanks,

    rohit.

  13. Hello there,

     

    try stopping your firewall:

    service shorewall stop

    i think is the right command (either that or try firewall or iptables for the service name - i forget which is right). then try pinging and telneting - if it still doesn't work then the firewall shouldn't be your problem.

     

    I tried what you said,here's the output:

    [root@localhost rohitsz]# service iptables s
    save	start   status  stop
    [root@localhost rohitsz]# service iptables stop
    Resetting built-in chains to the default ACCEPT policy:		 [  OK  ]
    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    4 packets transmitted, 0 received, 100% packet loss, time 2999ms
    
    [root@localhost rohitsz]# service shorewall stop
    Loading /usr/share/shorewall/functions...
    Processing /etc/shorewall/params ...
    Processing /etc/shorewall/shorewall.conf...
    Loading Modules...
    Stopping Shorewall...Processing /etc/shorewall/stop ...
    iptables v1.3.3: Couldn't load target `Ifw':/lib/iptables/libipt_Ifw.so: cannot open shared object file: No such file or directory
    
    Try `iptables -h' or 'iptables --help' for more information.
    iptables: No chain/target/match by that name
    iptables: No chain/target/match by that name
    ipset v2.2.2: Unknown set
    ipset v2.2.2: Unknown set
      WARNING: DISABLE_IPV6=Yes in shorewall.conf but this system does not appear to have ip6tables
    IP Forwarding Enabled
    Processing /etc/shorewall/stopped ...
    done.
    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    5 packets transmitted, 0 received, 100% packet loss, time 3998ms
    
    [root@localhost rohitsz]#

     

    I still do not understand, how did this

    service network restart

    allowed tomcat to listen to port 8080.

     

    thank you all for bearing with my newbie-ness :-)

     

    rohit.

  14. Hello there,

     

    ping localhost doesnt work because you dont have a DNS entry assigned. the easiest way is to just add a line in /etc/hosts that points localhost to 127.0.0.1

     

    telnet 127.0.0.1 doesnt work because you arent running telnet, no distro I know of out there installs a telnet server out of the box, let alone starts it by default.

     

    James

     

    here's my telnet output(for 192.168.1.1):

    [root@localhost rohitsz]# telnet 192.168.1.1
    Trying 192.168.1.1...
    Connected to 192.168.1.1.
    Escape character is '^]'.
    
    login: root
    Password:
    
    
    BusyBox v0.61.pre (2005.08.25-07:00+0000) Built-in shell (ash)
    Enter 'help' for a list of built-in commands.
    
    # ls
    bin	  etc	  proc	 usr	  var.tar
    dev	  lib	  sbin	 var
    # Connection closed by foreign host.
    [root@localhost rohitsz]#

     

    and here's my /etc/hosts

    [root@localhost rohitsz]# cat /etc/hosts
    # generated by drakhosts
    127.0.0.1 localhost
    [root@localhost rohitsz]#

     

    But these did not make me reach to the solution of the problem...

    the main command was:

    #service network restart

    that made things going for me...

     

    Still lost!

     

    rohit.

  15. Greetings there,

     

    I posted my problem at tomcat user's mailing list, and from there i got the following reply:

    (assuming your configs are backed up)
    check out modify configs at
    /etc/rc.d/init.d/network 
    *AND*
    /etc/sysconfig/network-scripts/ifup
    *then do*
    service network restart
    *then ICMP ping*
    ping WhateverHostYouWantToPing

     

    and also this:

    I think you need to fix your networking issues before trying to setup 
    tomcat.  If the link you supplied is your support case, the lo network 
    interface isn't working or properly configured.  ifconfig on a console 
    logged in as root should show the active network interfaces including 
    at 
    least eth0 and lo.  lo should have a inet addr of 127.0.0.1.  Tomcat 
    binds it's shutdown port specifically to 127.0.0.1.  If that address 
    doesn't exist on the local system, the error below will occur.

     

    Being a newbie, i simply tried what i could understand,i could do.

     [root@localhost rohitsz]# service network restart
    Shutting down interface eth0:								   [  OK  ]
    Shutting down loopback interface:							   [  OK  ]
    Setting network parameters:									 [  OK  ]
    Bringing up loopback interface:								 [  OK  ]
    Bringing up interface sit0:									 [  OK  ]
    Bringing up interface ppp0:  pppd: unrecognized option 'No'
    pppd version 2.4.3
    Usage: pppd [ options ], where options are:
    	 <device>		Communicate over the named device
    	 <speed>		 Set the baud rate to <speed>
    	 <loc>:<rem>	 Set the local and/or remote interface IP
    					 addresses.  Either one may be omitted.
    	 asyncmap <n>	Set the desired async map to hex <n>
    	 auth			Require authentication from peer
    	 connect <p>	 Invoke shell command <p> to set up the serial line
    	 crtscts		 Use hardware RTS/CTS flow control
    	 defaultroute	Add default route through interface
    	 file <f>		Take options from file <f>
    	 modem		   Use modem control lines
    	 mru <n>		 Set MRU value to <n> for negotiation
    See pppd(8) for more options.
    															 [FAILED]
    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.086 ms
    64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.062 ms
    64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.063 ms
    64 bytes from 127.0.0.1: icmp_seq=4 ttl=64 time=0.063 ms
    64 bytes from 127.0.0.1: icmp_seq=5 ttl=64 time=0.062 ms
    64 bytes from 127.0.0.1: icmp_seq=6 ttl=64 time=0.065 ms
    64 bytes from 127.0.0.1: icmp_seq=7 ttl=64 time=0.060 ms
    64 bytes from 127.0.0.1: icmp_seq=8 ttl=64 time=0.063 ms
    64 bytes from 127.0.0.1: icmp_seq=9 ttl=64 time=0.062 ms
    
    --- 127.0.0.1 ping statistics ---
    9 packets transmitted, 9 received, 0% packet loss, time 7999ms
    rtt min/avg/max/mdev = 0.060/0.065/0.086/0.008 ms
    [root@localhost rohitsz]# /usr/local/tomcat/bin/startup.sh
    Using CATALINA_BASE:   /usr/local/tomcat
    Using CATALINA_HOME:   /usr/local/tomcat
    Using CATALINA_TMPDIR: /usr/local/tomcat/temp
    Using JRE_HOME:	   /usr/java/jdk1.5.0_06
    [root@localhost rohitsz]#

     

    From then on, things started to worked, and i have tomcat running!

    i asked for an explanation there, as to how it happened, i did got a reply, but i could not make anything out of it...

     

    You have correctly reconfigured your interfaces to accept traffic on Port 8080 from/to127.0.0.1-

    You have also correctly configured DNS/BIND entry for localhost

    The hard part will be to make sure your vendor doesnt muck with a working configuration..

     

    i did not ask more anything there, as i would have been off-topic, so could someone here explain what made tomcat listen to that port and what could be the state of my firewall!

     

    thanks,

    rohit.

  16. Hello,

     

    to really check if firewall causes that problem.. try to clear your iptables just for checking, as root..

    .

    #iptables -F

    .

    it will leave iptables empty and accepts everything, then ping loopback again..

     

    I tried flushing the firewall rules,but still nothing..

    surprisingly,i am unable to access any website,since flushing the rules...(this i am writing from another system)

     

    i just doubt,is the /etc/sysctl.conf file all ok?

     

    <edit>

    here's some more output:

    [root@localhost rohitsz]# service iptables status
    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    4 packets transmitted, 0 received, 100% packet loss, time 2999ms
    
    [root@localhost rohitsz]#

     

    i had to use shorewall to allow everything thru the firewall to enable access to sites.

    </edit>

     

    <edit2>

    [root@localhost rohitsz]# service shorewall status
    
    
    
    
    
    Shorewall-2.4.1 Status at localhost - Fri Jul  7 08:41:27 IST 2006
    
    Counters reset Thu Jul  6 11:20:15 IST 2006
    
    Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Mar  4 17:51:29 net2all:DROP:IN=ppp0 OUT= SRC=60.191.43.37 DST=203.94.241.21 LEN=404 TOS=0x00 PREC=0x00 TTL=115 ID=28699 PROTO=UDP SPT=1190 DPT=1434 LEN=384
    Mar  4 17:58:34 net2all:DROP:IN=ppp0 OUT= SRC=203.94.232.72 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=14577 DF PROTO=TCP SPT=3866 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 17:58:42 net2all:DROP:IN=ppp0 OUT= SRC=203.94.232.72 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=16476 DF PROTO=TCP SPT=3866 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 17:58:57 net2all:DROP:IN=ppp0 OUT= SRC=203.94.232.72 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=19328 DF PROTO=TCP SPT=2344 DPT=443 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:01:24 net2all:DROP:IN=ppp0 OUT= SRC=221.10.158.106 DST=203.94.241.21 LEN=928 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=34689 DPT=1027 LEN=908
    Mar  4 18:04:55 net2all:DROP:IN=ppp0 OUT= SRC=212.176.49.56 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=113 ID=42993 PROTO=TCP SPT=61072 DPT=1080 WINDOW=65535 RES=0x00 SYN URGP=0
    Mar  4 18:08:36 net2all:DROP:IN=ppp0 OUT= SRC=221.208.208.86 DST=203.94.241.21 LEN=485 TOS=0x00 PREC=0x00 TTL=49 ID=0 DF PROTO=UDP SPT=54781 DPT=1027 LEN=465
    Mar  4 18:09:03 net2all:DROP:IN=ppp0 OUT= SRC=203.94.92.207 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=64084 DF PROTO=TCP SPT=1654 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:09:06 net2all:DROP:IN=ppp0 OUT= SRC=203.94.92.207 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=112 ID=64282 DF PROTO=TCP SPT=1654 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:01 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=3684 DF PROTO=TCP SPT=4296 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:04 net2all:DROP:IN=ppp0 OUT= SRC=71.137.195.210 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=109 ID=16327 DF PROTO=TCP SPT=3293 DPT=1080 WINDOW=64240 RES=0x00 SYN URGP=0
    Mar  4 18:11:04 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=3870 DF PROTO=TCP SPT=4296 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:10 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=4184 DF PROTO=TCP SPT=4296 DPT=80 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:22 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=4888 DF PROTO=TCP SPT=4731 DPT=443 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:26 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=5065 DF PROTO=TCP SPT=4731 DPT=443 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:11:31 net2all:DROP:IN=ppp0 OUT= SRC=203.94.234.7 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=119 ID=5341 DF PROTO=TCP SPT=4731 DPT=443 WINDOW=8760 RES=0x00 SYN URGP=0
    Mar  4 18:14:28 net2all:DROP:IN=ppp0 OUT= SRC=217.159.217.218 DST=203.94.241.21 LEN=48 TOS=0x00 PREC=0x00 TTL=114 ID=7395 PROTO=TCP SPT=49093 DPT=1080 WINDOW=65535 RES=0x00 SYN URGP=0
    Mar  4 18:15:57 net2all:DROP:IN=ppp0 OUT= SRC=222.171.27.36 DST=203.94.241.21 LEN=485 TOS=0x00 PREC=0x00 TTL=46 ID=0 DF PROTO=UDP SPT=40152 DPT=1027 LEN=465
    Mar  4 18:16:45 net2all:DROP:IN=ppp0 OUT= SRC=221.208.208.202 DST=203.94.241.21 LEN=485 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=50731 DPT=1026 LEN=465
    Mar  4 18:16:45 net2all:DROP:IN=ppp0 OUT= SRC=221.208.208.202 DST=203.94.241.21 LEN=485 TOS=0x00 PREC=0x00 TTL=48 ID=0 DF PROTO=UDP SPT=50731 DPT=1027 LEN=465
    
    NAT Table
    
    Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Mangle Table
    
    Chain PREROUTING (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain INPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain OUTPUT (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    Chain POSTROUTING (policy ACCEPT 0 packets, 0 bytes)
    pkts bytes target	 prot opt in	 out	 source			   destination 
    
    
    IP Configuration
    
    1: lo: <LOOPBACK> mtu 16436 qdisc noop
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    2: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
    3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:40:05:3e:5c:d4 brd ff:ff:ff:ff:ff:ff
    inet 192.168.1.2/24 brd 192.168.1.255 scope global eth0
    inet6 fe80::240:5ff:fe3e:5cd4/64 scope link
       valid_lft forever preferred_lft forever
    
    IP Stats
    
    1: lo: <LOOPBACK> mtu 16436 qdisc noop
    link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
    RX: bytes  packets  errors  dropped overrun mcast
    0		  0		0	   0	   0	   0
    TX: bytes  packets  errors  dropped carrier collsns
    0		  0		0	   0	   0	   0
    2: sit0: <NOARP> mtu 1480 qdisc noop
    link/sit 0.0.0.0 brd 0.0.0.0
    RX: bytes  packets  errors  dropped overrun mcast
    0		  0		0	   0	   0	   0
    TX: bytes  packets  errors  dropped carrier collsns
    0		  0		0	   0	   0	   0
    3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 1000
    link/ether 00:40:05:3e:5c:d4 brd ff:ff:ff:ff:ff:ff
    RX: bytes  packets  errors  dropped overrun mcast
    227239	 316	  0	   0	   0	   0
    TX: bytes  packets  errors  dropped carrier collsns
    95035	  349	  0	   0	   0	   0
    
    /proc
    
      /proc/sys/net/ipv4/ip_forward = 0
      /proc/sys/net/ipv4/icmp_echo_ignore_all = 0
      /proc/sys/net/ipv4/conf/all/proxy_arp = 0
      /proc/sys/net/ipv4/conf/all/arp_filter = 0
      /proc/sys/net/ipv4/conf/all/rp_filter = 0
      /proc/sys/net/ipv4/conf/all/log_martians = 0
      /proc/sys/net/ipv4/conf/default/proxy_arp = 0
      /proc/sys/net/ipv4/conf/default/arp_filter = 0
      /proc/sys/net/ipv4/conf/default/rp_filter = 1
      /proc/sys/net/ipv4/conf/default/log_martians = 0
      /proc/sys/net/ipv4/conf/eth0/proxy_arp = 0
      /proc/sys/net/ipv4/conf/eth0/arp_filter = 0
      /proc/sys/net/ipv4/conf/eth0/rp_filter = 1
      /proc/sys/net/ipv4/conf/eth0/log_martians = 0
      /proc/sys/net/ipv4/conf/lo/proxy_arp = 0
      /proc/sys/net/ipv4/conf/lo/arp_filter = 0
      /proc/sys/net/ipv4/conf/lo/rp_filter = 0
      /proc/sys/net/ipv4/conf/lo/log_martians = 0
    
    Routing Rules
    
    0:	  from all lookup local
    32766:  from all lookup main
    32767:  from all lookup default
    
    Table default:
    
    
    Table local:
    
    broadcast 192.168.1.0 dev eth0  proto kernel  scope link  src 192.168.1.2
    local 192.168.1.2 dev eth0  proto kernel  scope host  src 192.168.1.2
    broadcast 192.168.1.255 dev eth0  proto kernel  scope link  src 192.168.1.2
    
    Table main:
    
    192.168.1.0/24 dev eth0  proto kernel  scope link  src 192.168.1.2  metric 10
    default via 192.168.1.1 dev eth0  metric 10
    
    ARP
    
    ? (192.168.1.1) at 00:15:E9:25:C7:89 [ether] on eth0
    
    Modules
    
    ip_conntrack		   40824  1 iptable_nat
    ip_tables			  20416  3 iptable_mangle,iptable_nat,iptable_filter
    [root@localhost rohitsz]#

    </edit2>

     

    i am clueless!

     

    regards,

    rohit.

  17. Hello,

     

    off the top of my head

    iptables -A FORWARD -d 127.0.0.1 -j ACCEPT

     

    i tried what you said...

    [root@localhost rohitsz]# iptables -A FORWARD -d 127.0.0.1 -j ACCEPT
    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    7 packets transmitted, 0 received, 100% packet loss, time 5998ms
    
    [root@localhost rohitsz]#

     

    Still,nothing...

     

    regards,

    rohit.

  18. Greetings there,

     

    I had *messed* with my firewall couple of months back, at that time i was pretty happy that i got good results from grc!

    But now, for a couple of days my *messing* has cost me too much that i am unable to work on a local college project.

    I have configured tomcat,but am unable to connect neither to http://localhost:8080 nor am i getting satisfactory status messgae from the tomcat startup script.

    I am attaching couple of screen output, if anyone of you can draw any conclusion, in making me talk to localhost!

    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    3 packets transmitted, 0 received, 100% packet loss, time 1999ms
    
    [root@localhost rohitsz]# ping 192.168.1.1
    PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
    64 bytes from 192.168.1.1: icmp_seq=1 ttl=255 time=1.12 ms
    64 bytes from 192.168.1.1: icmp_seq=2 ttl=255 time=0.871 ms
    64 bytes from 192.168.1.1: icmp_seq=3 ttl=255 time=0.780 ms
    64 bytes from 192.168.1.1: icmp_seq=4 ttl=255 time=0.730 ms
    
    --- 192.168.1.1 ping statistics ---
    4 packets transmitted, 4 received, 0% packet loss, time 2999ms
    rtt min/avg/max/mdev = 0.730/0.877/1.128/0.154 ms
    [root@localhost rohitsz]# ping localhost
    PING localhost (127.0.0.1) 56(84) bytes of data.
    
    --- localhost ping statistics ---
    3 packets transmitted, 0 received, 100% packet loss, time 1999ms
    
    [root@localhost rohitsz]# telnet 127.0.0.1
    Trying 127.0.0.1...
    
    [root@localhost rohitsz]#telnet 192.168.1.1
    Trying 192.168.1.1...
    Connected to 192.168.1.1.
    Escape character is '^]'.
    
    login: Connection closed by foreign host.
    [root@localhost rohitsz]#traceroute 127.0.0.1
    traceroute to 127.0.0.1 (127.0.0.1), 30 hops max, 38 byte packets
    1  * * *
    2  * * *
    3  * * *
    4  * * *
    5  * * *
    6  * * *
    7  * * *
    8  * * *
    9  * * *
    10  * * *
    
    [root@localhost rohitsz]#

     

    My recent (trimmed) firewall policy is as follows:

     

    [root@localhost rohitsz]#service iptables status
    Table: mangle
    Chain PREROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain INPUT (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain FORWARD (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain OUTPUT (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain POSTROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    Table: nat
    Chain PREROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain POSTROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain OUTPUT (policy ACCEPT)
    target	 prot opt source			   destination
    Table: filter
    Chain INPUT (policy DROP)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    ACCEPT	 all  --  anywhere			 anywhere
    
    Chain FORWARD (policy DROP)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    
    Chain OUTPUT (policy ACCEPT)
    target	 prot opt source			   destination
    [root@localhost rohitsz]#

     

    I also *messed* with the following,But i ahve commented that part out... but still nothing.

    [root@localhost rohitsz]# cat /etc/sysctl.conf
    # Kernel sysctl configuration file for Mandriva Linux
    #
    # For binary values, 0 is disabled, 1 is enabled.  See sysctl(8) and
    # sysctl.conf(5) for more details.
    
    # Disables IP dynaddr
    net.ipv4.ip_dynaddr = 0
    # Disable ECN
    net.ipv4.tcp_ecn = 0
    # Controls source route verification
    net.ipv4.conf.default.rp_filter = 1
    
    # Controls the System Request debugging functionality of the kernel
    #kernel.sysrq = 0
    
    # Controls whether core dumps will append the PID to the core filename.
    # Useful for debugging multi-threaded applications.
    kernel.core_uses_pid = 1
    
    # If you set this variable to 1 then cd tray will close automatically when the
    # cd drive is being accessed. Setting this to 1 is not advised as it has been
    # known to cause problems when supermount is enabled.
    dev.cdrom.autoclose=0
    # removed to fix some digital extraction problems
    # dev.cdrom.check_media=1
    
    # to be able to eject via the device eject button (magicdev)
    dev.cdrom.lock=0
    net.ipv4.icmp_ignore_bogus_error_responses=0
    net.ipv4.conf.all.rp_filter=0
    net.ipv4.icmp_echo_ignore_broadcasts=1
    net.ipv4.icmp_echo_ignore_all=0
    net.ipv4.conf.all.log_martians=0
    kernel.sysrq=1
    
    #here i brought the changes(the *messy* part)
    #from www.siliconvalleyccie.com/linux-hn/iptales-intro.htm
    
    #---------------------------------------------------------------
    # Disable routing triangulation. Respond to queries out
    # the same interface, not another. Helps to maintain state
    # Also protects against IP spoofing
    #---------------------------------------------------------------
    #net.ipv4.conf.all.rp_filter = 1
    
    #---------------------------------------------------------------
    # Turn on protection from Denial of Service (DOS) attacks
    #---------------------------------------------------------------
    #net.ipv4.tcp_syncookies = 1
    
    #---------------------------------------------------------------
    # Disable responding to ping broadcasts
    #---------------------------------------------------------------
    #net.ipv4.icmp_echo_ignore_broadcasts = 1
    
    [root@localhost rohitsz]#

     

    eagerly waiting for any help!

     

    thanks,

    rohit

  19. Greetings there,

    Some how, i have removed tomcat(and related packages) from my system.

    So i downloaded tomcat and ant binaries and put them to /usr/local/tomcat and /usr/local/ant based on this.

    So there are couple of doubts...

     

    1)How do i confirm tomcat is running?

    I did a $CATALINA_HOME/bin/startup.sh,it return without any indication of the server has started...

     

    [root@localhost logs]# /usr/local/tomcat/bin/startup.sh
    Using CATALINA_BASE:   /usr/local/tomcat
    Using CATALINA_HOME:   /usr/local/tomcat
    Using CATALINA_TMPDIR: /usr/local/tomcat/temp
    Using JRE_HOME:	   /usr/java/jdk1.5.0_06
    [root@localhost logs]#

     

    When i shut it down,it gives this :

    [root@localhost logs]# /usr/local/tomcat/bin/shutdown.sh
    Using CATALINA_BASE:   /usr/local/tomcat
    Using CATALINA_HOME:   /usr/local/tomcat
    Using CATALINA_TMPDIR: /usr/local/tomcat/temp
    Using JRE_HOME:	   /usr/java/jdk1.5.0_06

    it stalls after the last line,so i have to do a CONTROL-C to exit.

    the log is here

     

    2)After assuming that tomcat is running, i tried to go to http://localhost:8080 but i always get a connection timeout. I have totally removed the firewall to listen to any ports,but still no change.I also tried to configure drakfirewall to allow 8080/tcp port,but still no success.

     

    Please help.

     

    <edit>

    some screen outputs that might help:

    PING:

    [root@localhost rohitsz]# ping 127.0.0.1
    PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data.
    
    --- 127.0.0.1 ping statistics ---
    4 packets transmitted, 0 received, 100% packet loss, time 2999ms
    
    [root@localhost rohitsz]# ping yahoo.com
    PING yahoo.com (216.109.112.135) 56(84) bytes of data.
    64 bytes from yahoo.com (216.109.112.135): icmp_seq=1 ttl=52 time=266 ms
    64 bytes from yahoo.com (216.109.112.135): icmp_seq=2 ttl=51 time=265 ms
    64 bytes from yahoo.com (216.109.112.135): icmp_seq=3 ttl=52 time=263 ms
    64 bytes from yahoo.com (216.109.112.135): icmp_seq=4 ttl=52 time=270 ms
    
    --- yahoo.com ping statistics ---
    4 packets transmitted, 4 received, 0% packet loss, time 3001ms
    rtt min/avg/max/mdev = 263.955/266.782/270.283/2.285 ms
    [root@localhost rohitsz]#								 
    [root@localhost rohitsz]# ping 192.168.1.1
    PING 192.168.1.1 (192.168.1.1) 56(84) bytes of data.
    64 bytes from 192.168.1.1: icmp_seq=1 ttl=255 time=1.19 ms
    64 bytes from 192.168.1.1: icmp_seq=2 ttl=255 time=0.740 ms
    64 bytes from 192.168.1.1: icmp_seq=3 ttl=255 time=0.748 ms
    64 bytes from 192.168.1.1: icmp_seq=4 ttl=255 time=0.739 ms
    64 bytes from 192.168.1.1: icmp_seq=5 ttl=255 time=0.758 ms
    
    --- 192.168.1.1 ping statistics ---
    5 packets transmitted, 5 received, 0% packet loss, time 4000ms
    rtt min/avg/max/mdev = 0.739/0.835/1.191/0.178 ms
    [root@localhost rohitsz]#

     

    IFCONFIG:

    [root@localhost rohitsz]# ifconfig
    eth0	  Link encap:Ethernet  HWaddr 00:40:05:3E:5C:D4
    	  inet addr:192.168.1.2  Bcast:192.168.1.255  Mask:255.255.255.0
    	  inet6 addr: fe80::240:5ff:fe3e:5cd4/64 Scope:Link
    	  UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
    	  RX packets:445 errors:0 dropped:0 overruns:0 frame:0
    	  TX packets:534 errors:0 dropped:0 overruns:0 carrier:0
    	  collisions:0 txqueuelen:1000
    	  RX bytes:316844 (309.4 KiB)  TX bytes:124590 (121.6 KiB)
    	  Interrupt:22 Base address:0xcc00
    
    [root@localhost rohitsz]#

    </edit>

    <edit2>

    My iptables status

    [root@localhost rohitsz]# service iptables status
    Table: mangle
    Chain PREROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain INPUT (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain FORWARD (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain OUTPUT (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain POSTROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    Table: nat
    Chain PREROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain POSTROUTING (policy ACCEPT)
    target	 prot opt source			   destination
    
    Chain OUTPUT (policy ACCEPT)
    target	 prot opt source			   destination
    Table: filter
    Chain AllowICMPs (2 references)
    target	 prot opt source			   destination
    ACCEPT	 icmp --  anywhere			 anywhere			icmp fragmentation-needed
    ACCEPT	 icmp --  anywhere			 anywhere			icmp time-exceeded
    
    Chain Drop (1 references)
    target	 prot opt source			   destination
    RejectAuth  all  --  anywhere			 anywhere
    dropBcast  all  --  anywhere			 anywhere
    AllowICMPs  icmp --  anywhere			 anywhere
    dropInvalid  all  --  anywhere			 anywhere
    DropSMB	all  --  anywhere			 anywhere
    DropUPnP   all  --  anywhere			 anywhere
    dropNotSyn  tcp  --  anywhere			 anywhere
    DropDNSrep  all  --  anywhere			 anywhere
    
    Chain DropDNSrep (2 references)
    target	 prot opt source			   destination
    DROP	   udp  --  anywhere			 anywhere			udp spt:domain
    
    Chain DropSMB (1 references)
    target	 prot opt source			   destination
    DROP	   udp  --  anywhere			 anywhere			udp dpt:135
    DROP	   udp  --  anywhere			 anywhere			udp dpts:netbios-ns:netbios-ssn
    DROP	   udp  --  anywhere			 anywhere			udp dpt:microsoft-ds
    DROP	   tcp  --  anywhere			 anywhere			tcp dpt:135
    DROP	   tcp  --  anywhere			 anywhere			tcp dpt:netbios-ssn
    DROP	   tcp  --  anywhere			 anywhere			tcp dpt:microsoft-ds
    
    Chain DropUPnP (2 references)
    target	 prot opt source			   destination
    DROP	   udp  --  anywhere			 anywhere			udp dpt:1900
    
    Chain INPUT (policy DROP)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere
    Ifw		all  --  anywhere			 anywhere
    eth0_in	all  --  anywhere			 anywhere
    Reject	 all  --  anywhere			 anywhere
    LOG		all  --  anywhere			 anywhere			LOG level info prefix `Shorewall:INPUT:REJECT:'
    reject	 all  --  anywhere			 anywhere
    
    Chain FORWARD (policy DROP)
    target	 prot opt source			   destination
    eth0_fwd   all  --  anywhere			 anywhere
    Reject	 all  --  anywhere			 anywhere
    LOG		all  --  anywhere			 anywhere			LOG level info prefix `Shorewall:FORWARD:REJECT:'
    reject	 all  --  anywhere			 anywhere
    
    Chain Ifw (1 references)
    target	 prot opt source			   destination
    RETURN	 all  --  anywhere			 anywhere			set ifw_wl src
    DROP	   all  --  anywhere			 anywhere			set ifw_bl src
    IFWLOG	 all  --  anywhere			 anywhere			state INVALID,NEW psd weight-threshold: 10 delay-threshold: 10000 lo-ports-weight: 1 hi-ports-weight: 2 IFWLOG prefix 'SCAN'
    
    Chain OUTPUT (policy DROP)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere
    fw2net	 all  --  anywhere			 anywhere
    Reject	 all  --  anywhere			 anywhere
    LOG		all  --  anywhere			 anywhere			LOG level info prefix `Shorewall:OUTPUT:REJECT:'
    reject	 all  --  anywhere			 anywhere
    
    Chain Reject (4 references)
    target	 prot opt source			   destination
    RejectAuth  all  --  anywhere			 anywhere
    dropBcast  all  --  anywhere			 anywhere
    AllowICMPs  icmp --  anywhere			 anywhere
    dropInvalid  all  --  anywhere			 anywhere
    RejectSMB  all  --  anywhere			 anywhere
    DropUPnP   all  --  anywhere			 anywhere
    dropNotSyn  tcp  --  anywhere			 anywhere
    DropDNSrep  all  --  anywhere			 anywhere
    
    Chain RejectAuth (2 references)
    target	 prot opt source			   destination
    reject	 tcp  --  anywhere			 anywhere			tcp dpt:auth
    
    Chain RejectSMB (1 references)
    target	 prot opt source			   destination
    reject	 udp  --  anywhere			 anywhere			udp dpt:135
    reject	 udp  --  anywhere			 anywhere			udp dpts:netbios-ns:netbios-ssn
    reject	 udp  --  anywhere			 anywhere			udp dpt:microsoft-ds
    reject	 tcp  --  anywhere			 anywhere			tcp dpt:135
    reject	 tcp  --  anywhere			 anywhere			tcp dpt:netbios-ssn
    reject	 tcp  --  anywhere			 anywhere			tcp dpt:microsoft-ds
    
    Chain all2all (0 references)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    Reject	 all  --  anywhere			 anywhere
    LOG		all  --  anywhere			 anywhere			LOG level info prefix `Shorewall:all2all:REJECT:'
    reject	 all  --  anywhere			 anywhere
    
    Chain dropBcast (2 references)
    target	 prot opt source			   destination
    DROP	   all  --  anywhere			 anywhere			PKTTYPE = broadcast
    DROP	   all  --  anywhere			 anywhere			PKTTYPE = multicast
    
    Chain dropInvalid (2 references)
    target	 prot opt source			   destination
    DROP	   all  --  anywhere			 anywhere			state INVALID
    
    Chain dropNotSyn (2 references)
    target	 prot opt source			   destination
    DROP	   tcp  --  anywhere			 anywhere			tcp flags:!FIN,SYN,RST,ACK/SYN
    
    Chain dynamic (2 references)
    target	 prot opt source			   destination
    
    Chain eth0_fwd (1 references)
    target	 prot opt source			   destination
    dynamic	all  --  anywhere			 anywhere			state INVALID,NEW
    
    Chain eth0_in (1 references)
    target	 prot opt source			   destination
    dynamic	all  --  anywhere			 anywhere			state INVALID,NEW
    net2fw	 all  --  anywhere			 anywhere
    
    Chain fw2net (1 references)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    ACCEPT	 all  --  anywhere			 anywhere
    
    Chain net2all (1 references)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    Drop	   all  --  anywhere			 anywhere
    LOG		all  --  anywhere			 anywhere			LOG level info prefix `Shorewall:net2all:DROP:'
    DROP	   all  --  anywhere			 anywhere
    
    Chain net2fw (1 references)
    target	 prot opt source			   destination
    ACCEPT	 all  --  anywhere			 anywhere			state RELATED,ESTABLISHED
    ACCEPT	 udp  --  anywhere			 anywhere			udp dpt:postgres
    ACCEPT	 tcp  --  anywhere			 anywhere			multiport dports postgres,webcache
    net2all	all  --  anywhere			 anywhere
    
    Chain reject (11 references)
    target	 prot opt source			   destination
    DROP	   all  --  anywhere			 anywhere			PKTTYPE = broadcast
    DROP	   all  --  anywhere			 anywhere			PKTTYPE = multicast
    DROP	   all  --  255.255.255.255	  anywhere
    DROP	   all  --  BASE-ADDRESS.MCAST.NET/4  anywhere
    REJECT	 tcp  --  anywhere			 anywhere			reject-with tcp-reset
    REJECT	 udp  --  anywhere			 anywhere			reject-with icmp-port-unreachable
    REJECT	 icmp --  anywhere			 anywhere			reject-with icmp-host-unreachable
    REJECT	 all  --  anywhere			 anywhere			reject-with icmp-host-prohibited
    
    Chain shorewall (0 references)
    target	 prot opt source			   destination
    
    Chain smurfs (0 references)
    target	 prot opt source			   destination
    LOG		all  --  255.255.255.255	  anywhere			LOG level info prefix `Shorewall:smurfs:DROP:'
    DROP	   all  --  255.255.255.255	  anywhere
    LOG		all  --  BASE/4			   anywhere			LOG level info prefix `Shorewall:smurfs:DROP:'
    DROP	   all  --  BASE/4			   anywhere
    [root@localhost rohitsz]#

    </edit2>

     

    thanks,

    rohit.

  20. Hi ian,

     

    /dev/hda1 /mnt/windows ntfs umask=0,nls=iso8859-15,ro 0 0

     

    so after where it says vfat in your fstab, put umask=0 on the options line. If there are other options, make sure a comma is placed to separate them like my example above.

     

    The entry for my usb(vfat) is as follows:

    /dev/sda1			   /mnt/ROHIT			  vfat	rw,noauto,exec,user,quiet,iocharset=iso8859-1,codepage=850 0 0

     

    Is there anything wrong/missing anything in this?(except umask=0).

    I know where to add umask.. but what is umask?

     

    regards,

    rohit.

  21. Hello Again,

     

    All needed modules are loaded, so there shouldn't be a real problem.

    Please try in a root console:

    urpmi dosfstools

    and then mounting the pendrive again, and performing I/O operations. Linux does need the above package to perform several tasks on vfat volumes.

     

    i did try what you said.

    i have this package installed...

    but i still face the same problem.

    Also my drive mounts read only thru GUI. is there a way that i can make it mount in read-write mode when i double click /dev/sda1 in Devices?

     

    thanks,

    rohit.

  22. Hello there,

    sorry for the late reply...

     

    I assume its formatted as vfat/ FAT32?

    Can you pass an lsmod with the pendrive already mounted?

     

    Yes it is FAT32 formatted..

    here's the output:

    [root@localhost rsz]# lsmod
    Module				  Size  Used by
    sd_mod				 16240  2
    usb_storage			82020  2
    scsi_mod			  121064  2 sd_mod,usb_storage
    af_packet			  16392  0
    radeon				 76672  1
    drm					60404  2 radeon
    md5					 3584  1
    ipv6				  234016  8
    raw					 6592  0
    i810_audio			 33556  1
    ac97_codec			 18156  1 i810_audio
    soundcore			   7008  2 i810_audio
    ipt_IFWLOG			  2788  1
    ipt_psd				43428  1
    ip_set_iptree		   5544  2
    ipt_REJECT			  4256  4
    ipt_LOG				 6272  7
    8139too				21760  0
    mii					 4704  1 8139too
    ipt_state			   1312  13
    ipt_pkttype			 1184  4
    ipt_set				 1920  2
    ipt_CONNMARK			1696  0
    ipt_MARK				1984  0
    ipt_ROUTE			   4260  0
    ipt_connmark			1216  0
    ipt_owner			   2432  0
    ipt_recent			  9292  0
    ipt_iprange			 1312  0
    ipt_physdev			 1744  0
    ipt_multiport		   2112  0
    ipt_conntrack		   1792  0
    iptable_mangle		  2016  0
    ip_set_portmap		  3840  0
    ip_set_macipmap		 3780  0
    ip_set_ipmap			3872  0
    ip_set_iphash		   5924  0
    ip_set				 18876  11 ip_set_iptree,ipt_set,ip_set_portmap,ip_set_macipmap,ip_set_ipmap,ip_set_iphash
    ip_nat_irc			  1824  0
    ip_nat_tftp			 1216  0
    ip_nat_ftp			  2560  0
    iptable_nat			20212  3 ip_nat_irc,ip_nat_tftp,ip_nat_ftp
    ip_conntrack_irc	   70352  1 ip_nat_irc
    ip_conntrack_tftp	   3088  1 ip_nat_tftp
    ip_conntrack_ftp	   71408  1 ip_nat_ftp
    ip_conntrack		   40824  9 ipt_state,ipt_conntrack,ip_nat_irc,ip_nat_tftp,ip_nat_ftp,iptable_nat,ip_conntra
    ck_irc,ip_conntrack_tftp,ip_conntrack_ftp
    iptable_filter		  2080  1
    ip_tables			  20416  20 ipt_IFWLOG,ipt_psd,ipt_REJECT,ipt_LOG,ipt_state,ipt_pkttype,ipt_set,ipt_CONNMARK
    ,ipt_MARK,ipt_ROUTE,ipt_connmark,ipt_owner,ipt_recent,ipt_iprange,ipt_physdev,ip
    t
    _multiport,ipt_conntrack,iptable_mangle,iptable_nat,iptable_filter
    ide_cd				 37988  0
    loop				   14504  0
    nls_iso8859_1		   3680  8
    nls_cp850			   4480  8
    supermount			 31956  1
    vfat				   10592  8
    fat					45980  1 vfat
    intel_agp			  20636  1
    agpgart				29032  2 drm,intel_agp
    hw_random			   4244  0
    tsdev				   5984  0
    uhci_hcd			   29136  0
    usbcore			   108348  3 usb_storage,uhci_hcd
    evdev				   7648  0
    ext3				  124744  4
    jbd					48568  1 ext3
    [root@localhost rsz]#

     

    rohit.

×
×
  • Create New...