[SOLVED] Mageia 3 shorewall trouble

[mla]

I've now installed Mageia 3 on two machines on the home network -- and very smoothly it all went. Until I've hit the buffers with shorewall. Setting up permitted services via the Mageia Control Center has no effect. I tick the services I need, I click on OK, I get the confirmatory screen showing what got enabled and I click on OK again. But instead of asking me which interfacess are to be protected, it throws me right back to the Security page of MCC (or to the command line prompt if I just run drakfirewall instead of going through MCC.

All the supposedly enabled services (ssh, nfs, http, ping) remain stubborny disabled. And, indeed, atrying to configure shorewall again brings up the list of services to enable with none of them ticked.

Help! This is a complete show-stopper for me!

[pasaman]

Same problem with firewal/ shorewall here in DVD x64. I'm not able to setup smb folder share, turn off firewall. Please've ever tested this feature before the final release

[mla]

Yes, sorry, I should have said... My machines are x64 too.

[MontyWilliams]

May be related to bug 9329

mageia 3 x86-64

Attempt to open ports (for skype, torrent). Using MCC "Set up personal Firewall"
Changes not accepted.

Edit:
Just checked my cauldron partition. Still works fine here.
I note that in cauldron, on running the curser down the list of options, the check boxes become highlighted as the cursor passes over them - not so in mageia 3.

Edit: Finally read the mga 3 errata entry on this problem.

drakfirewall doesn't generate shorewall6 config

edit doktor5000: merged into existing thread

[mhoke63]

I know this has been posted about before, but I have yet to find a fix for it. Trying to get ps3 media server working. Appears to be an issue with the firewall. However, It wont let me disable the firewall. I don't know a whole lot about networking, so I don't want to mess with ports and protocols as I don't know what the software uses. I have a physical router, so I don't really need a firewall installed in my desktop. When I try to disable it via MCC, it doesn't take effect. Clicking OK after checking "Everything, no firewall" brings me back to the control center. Clicking the firewall again shows that no changes have been made. Even checking one of the options doesn't take affect. Is there a fix to it? I simple want to disable the firewall.

[MontyWilliams]

Read the errata entry about this:

drakfirewall doesn't generate shorewall6 config

[pasaman]

Unfortunatelly tip mentioned in errata does not work with x64 systems. I simply want to make samba share on my Mageia PC work and all requests from other computers are firewalled out. Already tried uninstall shorewall and shorewall6 too but nothing help. It's posted in bugzilla here https://bugs.mageia.org/show_bug.cgi?id=9329 and it is still not fixed on x64 systems.

[mla]

My experience is different -- that errata suggestion *does* cure the problem on my x64 machines.

Specifically, as root, do "urpme shorewall-ipv6;drakfirewall", set the services you need and let in reinstall the removed package.

I originally ignored the errata item since it specifically referenced iv6: "drakfirewall doesn't generate shorewall6 config ", to which my response was "don't care, I am on iv4". But the does actually go on to say that the effect is to disable firewall management through MCC.

[wintpe]

yes ive also just seen this after posting same, you can disable it via command line with chkconfig iptables off

and service iptables stop.

theres definitly some problems in mageia control center

regards peter

[wintpe]

there is a better solution on the errata

urpme shorewall-ipv6

then try again

regards peter

[doktor5000]

I know this has been posted about before, but I have yet to find a fix for it.

I've merged it with the existing thread(s).

[jiunnyik]

Hi,

Just installed Mageia 3 , 32 bit.

There is no way to disable firewall, during installation/configuration , or after with Mageia Control Center.

Please help.

Thanks.

~merged by moderator

[doktor5000]

FWIW, has been reported quite some time ago as https://bugs.mageia.org/show_bug.cgi?id=9329

[turgon]

there is a better solution on the errata

urpme shorewall-ipv6

then try again

regards peter

See this post for solution!
S O L V E D ! ! !
Thank you very much Piter!!!!!!!!!!!!!!!

[cavokmed]

shorewall6 service launch at startup fails
as a consequence, management of firewall through mageia control center is not
efficient.

This can be fixed as follow :

1/ uninstall shorewall-ipv6
2/ try to edit your firewall configuration
3/ mageia control center complains that you must install shorewall-ipv6
4/ accept to install it
5/ all works now