Hello All, I am having a big problem with the Java IDE Eclipse - both with the version packed with SuSE 9.0 Pro and with latest 3.0 Milestone.I am posting this message to this particular list because the problem is actually a SuSE Firewall config problem.When starting a debug session with the firewall NOT running everything works fine.However when the firewall is up the first time I run the debugger it displays a "Finding free socket .... 66%" message and looks dead for the next 15 minutes.Eventually it connects and works properly.The next time I start the debugger in the same eclipse session it connects immediately , no waiting.I suspect Eclipse is doing some sort of port-probing to find out where the java remote debugging infrastructure is listening for connections and the firewall is making this scan a VERY slow process.I have experimented with different firewall configs , but no effect.Since localhost is scanning itself this can not be considered an attack.My exact question is : How do it tell the firewall to allow localhost to do ANYTHING with itself and other hosts , ie how do disable any processing on packets comming from localhost. Thanks in advance , I am really desperate. Ivan Yosifov.
Hello All,
I am having a big problem with the Java IDE Eclipse - both with the version packed with SuSE 9.0 Pro and with latest 3.0 Milestone.
[...]
connects immediately , no waiting.I suspect Eclipse is doing some sort of port-probing to find out where the java remote debugging infrastructure is listening for connections and the firewall is making this scan a VERY slow process.
If that is so, try rejecting packets instead of dropping them See /etc/sysconfig/SuSEfirewall2: ## Type: yesno ## Default: no # # 26.) # Do you want to REJECT packets instead of DROPing? # # DROPing (which is the default) will make portscans and attacks much # slower, as no replies to the packets will be sent. REJECTing means, that # for every illegal packet, a connection reject packet is sent to the # sender. # # Choice: "yes" or "no", if not set defaults to "no" # FW_REJECT="no" HTH Jörn -- ------------------------------------------------------------ Jörn Ott Telefon: (0 22 24) 94 08 - 73 EDV Service & Beratung Telefax: (0 22 24) 94 08 -74 Lohfelder Str. 33 E-Mail: mailto:white@ott-service.de 53604 Bad Honnef WWW: http://www.ott-service.de/
On Thursday 25 March 2004 11:30, Jörn Ott wrote:
Hello All,
I am having a big problem with the Java IDE Eclipse - both with the version packed with SuSE 9.0 Pro and with latest 3.0 Milestone.
[...]
connects immediately , no waiting.I suspect Eclipse is doing some sort of port-probing to find out where the java remote debugging infrastructure is listening for connections and the firewall is making this scan a VERY slow process.
If that is so, try rejecting packets instead of dropping them
See /etc/sysconfig/SuSEfirewall2: ## Type: yesno ## Default: no # # 26.) # Do you want to REJECT packets instead of DROPing? # # DROPing (which is the default) will make portscans and attacks much # slower, as no replies to the packets will be sent. REJECTing means, that # for every illegal packet, a connection reject packet is sent to the # sender. # # Choice: "yes" or "no", if not set defaults to "no" # FW_REJECT="no"
HTH Jörn
-- ------------------------------------------------------------ Jörn Ott Telefon: (0 22 24) 94 08 - 73 EDV Service & Beratung Telefax: (0 22 24) 94 08 -74 Lohfelder Str. 33 E-Mail: mailto:white@ott-service.de 53604 Bad Honnef WWW: http://www.ott-service.de/
Hi, I tried REJECTing , no effect. Ivan Yosifov
participants (2)
-
Ivan Yosifov
-
Jörn Ott