firewall and internet buying

Albert Wagner

2 Jan 2002 2 Jan '02

03:52

I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction? Albert

Show replies by date

Joe & Sesil Morris (NTM)

2 Jan 2 Jan

10:48

New subject: [SLE] firewall and internet buying

Albert Wagner wrote:

...

I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel. -- Joe & Sesil Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: www.mydestiny.net/~joe_morris Registered Linux user 231871 "We can stand affliction better than we can prosperity, for in prosperity we forget God." --Dwight Lyman Moody

Albert Wagner

3 Jan 3 Jan

02:06

New subject: [SLE] firewall and internet buying

On Wednesday 02 January 2002 04:48 am, you wrote:

...

Albert Wagner wrote:

...
I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel.

Hi, Joe. Thank you for your reply. I never bothered with a firewall while on dialup, but just got digital cable. So I am on a steep learning curve. I take it that there is a difference between "personal" and "SuSE" firewall. Basically, all I did was set START_FW="yes" in /etc/rc.config. I am on Kernel 2.2.18, so I can't yet run SuSEFirewall 2 (I tried). Below are snippets of my boot log. To me it's a mixed bag of successes and failures. Can you tell me from that what my status is? Thanks again for your reply. Albert <more> Master Resource Control: previous runlevel: N, switching to runlevel: 5 Starting Firewall Initialization: (phase 1 of 3) (run 2 of 3) Warning: interface eth0 is not active. No interfaces active! exiting ... SuSEfirewall: clearing rules now ... done failed <more> Starting personal-firewall (initial) [active] done <more> Starting service dhcp client on eth0dhcpcd[284]: DHCP_NAK server response received: requested address not available done Setting up routing (using /etc/route.conf) done Starting Firewall Initialization: (phase 2 of 3) Starting RPC portmap daemon done Starting SSH daemon done <more> Starting Firewall Initialization: (phase 3 of 3) Starting personal-firewall (final) [active] done Master Resource Control: runlevel 5 has been reached Failed services in runlevel 5: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final

James Bliss

01:20

New subject: [SLE] firewall and internet buying

Looks like you do not have dhcp set up correctly for DHCP to work with your provider. Who is your provider? You may have to pass your host name statically when you are requesting the DHCP address. Jim 01/02/02 08:06:07 PM, Albert Wagner wrote:

...

On Wednesday 02 January 2002 04:48 am, you wrote:

...
Albert Wagner wrote:

...
I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel.

Hi, Joe. Thank you for your reply. I never bothered with a firewall while on dialup, but just got digital cable. So I am on a steep learning curve. I take it that there is a difference between "personal" and "SuSE" firewall. Basically, all I did was set START_FW="yes" in /etc/rc.config. I am on Kernel 2.2.18, so I can't yet run SuSEFirewall 2 (I tried). Below are snippets of my boot log. To me it's a mixed bag of successes and failures. Can you tell me from that what my status is? Thanks again for your reply.

Albert

<more> Master Resource Control: previous runlevel: N, switching to runlevel: 5 Starting Firewall Initialization: (phase 1 of 3) (run 2 of 3) Warning: interface eth0 is not active. No interfaces active! exiting ... SuSEfirewall: clearing rules now ... done failed <more> Starting personal-firewall (initial) [active] done <more> Starting service dhcp client on eth0dhcpcd[284]: DHCP_NAK server response received: requested address not available

done Setting up routing (using /etc/route.conf) done Starting Firewall Initialization: (phase 2 of 3) Starting RPC portmap daemon done Starting SSH daemon done <more> Starting Firewall Initialization: (phase 3 of 3) Starting personal-firewall (final) [active] done Master Resource Control: runlevel 5 has been reached Failed services in runlevel 5: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com

Albert Wagner

03:44

New subject: [SLE] firewall and internet buying

On Wednesday 02 January 2002 07:20 pm, James Bliss wrote:

...

Looks like you do not have dhcp set up correctly for DHCP to work with your provider. Who is your provider? You may have to pass your host name statically when you are requesting the DHCP address.

The documentation from my ISP (Cox) said that it was dynamic. I noticed that DHCP seemed to be requesting one anyway. Is this something that I should fix? How?

...

Jim

01/02/02 08:06:07 PM, Albert Wagner wrote:

...
On Wednesday 02 January 2002 04:48 am, you wrote:

...
Albert Wagner wrote:

...
I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel.

Hi, Joe. Thank you for your reply. I never bothered with a firewall while on dialup, but just got digital cable. So I am on a steep learning curve. I take it that there is a difference between "personal" and "SuSE" firewall. Basically, all I did was set START_FW="yes" in /etc/rc.config. I am on Kernel 2.2.18, so I can't yet run SuSEFirewall 2 (I tried). Below are snippets of my boot log. To me it's a mixed bag of successes and failures. Can you tell me from that what my status is? Thanks again for your reply.

Albert

<more> Master Resource Control: previous runlevel: N, switching to runlevel: 5 Starting Firewall Initialization: (phase 1 of 3) (run 2 of 3) Warning: interface eth0 is not active. No interfaces active! exiting ... SuSEfirewall: clearing rules now ... done failed <more> Starting personal-firewall (initial) [active] done <more> Starting service dhcp client on eth0dhcpcd[284]: DHCP_NAK server response received: requested address not available

done Setting up routing (using /etc/route.conf) done Starting Firewall Initialization: (phase 2 of 3) Starting RPC portmap daemon done Starting SSH daemon done <more> Starting Firewall Initialization: (phase 3 of 3) Starting personal-firewall (final) [active] done Master Resource Control: runlevel 5 has been reached Failed services in runlevel 5: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com

James Bliss

03:03

New subject: [SLE] firewall and internet buying

Did they give you a hostname for your computer? If so, in yast2, you should setup your NIC as DHCP, include your hostname which they assigned and set it so that the hostname is sent when you are requesting a DHCP address. DHCP is dynamic request for an IP address. yast2 - network setup (expert) - select your interface card, select edit, seletc automatic address, select hostname and name server, enter host name, make sure that change host name via dhcp is not checked. This should do it for you. you may need to add the suffix for cox in the domani search list (cox.com or whatever). Good luck, Jim 01/02/02 09:44:41 PM, Albert Wagner wrote:

...

On Wednesday 02 January 2002 07:20 pm, James Bliss wrote:

...
Looks like you do not have dhcp set up correctly for DHCP to work with your provider. Who is your provider? You may have to pass your host name statically when you are requesting the DHCP address.

The documentation from my ISP (Cox) said that it was dynamic. I noticed that DHCP seemed to be requesting one anyway. Is this something that I should fix? How?

...
Jim

01/02/02 08:06:07 PM, Albert Wagner wrote:

...
On Wednesday 02 January 2002 04:48 am, you wrote:

...
Albert Wagner wrote:

...
I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel.

Hi, Joe. Thank you for your reply. I never bothered with a firewall while on dialup, but just got digital cable. So I am on a steep learning curve. I take it that there is a difference between "personal" and "SuSE" firewall. Basically, all I did was set START_FW="yes" in /etc/rc.config. I am on Kernel 2.2.18, so I can't yet run SuSEFirewall 2 (I tried). Below are snippets of my boot log. To me it's a mixed bag of successes and failures. Can you tell me from that what my status is? Thanks again for your reply.

Albert

<more> Master Resource Control: previous runlevel: N, switching to runlevel: 5 Starting Firewall Initialization: (phase 1 of 3) (run 2 of 3) Warning: interface eth0 is not active. No interfaces active! exiting ... SuSEfirewall: clearing rules now ... done failed <more> Starting personal-firewall (initial) [active] done <more> Starting service dhcp client on eth0dhcpcd[284]: DHCP_NAK server response received: requested address not available

done Setting up routing (using /etc/route.conf) done Starting Firewall Initialization: (phase 2 of 3) Starting RPC portmap daemon done Starting SSH daemon done <more> Starting Firewall Initialization: (phase 3 of 3) Starting personal-firewall (final) [active] done Master Resource Control: runlevel 5 has been reached Failed services in runlevel 5: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com

-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq and the archives at http://lists.suse.com

Joe & Sesil Morris (NTM)

10:50

New subject: [SLE] firewall and internet buying

Albert Wagner wrote:

...

The documentation from my ISP (Cox) said that it was dynamic. I noticed that DHCP seemed to be requesting one anyway. Is this something that I should fix? How?

A DHCP client will request it's last address if it has not expired. If COX is giving you a fairly long lease, and you shutdown, it will request it's last address. You should check /etc/dhclient.conf and also check man dhclient.conf, etc. -- Joe & Sesil Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: www.mydestiny.net/~joe_morris Registered Linux user 231871 "We can stand affliction better than we can prosperity, for in prosperity we forget God." --Dwight Lyman Moody

Joe & Sesil Morris (NTM)

10:04

New subject: [SLE] firewall and internet buying

Albert Wagner wrote:

...

Hi, Joe. Thank you for your reply. I never bothered with a firewall while on dialup, but just got digital cable. So I am on a steep learning curve. I take it that there is a difference between "personal" and "SuSE" firewall.

There is. If you are using the 2.2.18 kernel, go with SuSEFirewall, which uses ipchains. I am using it (6.4) and it works very well. I have had no problem with online purchases.

...

Basically, all I did was set START_FW="yes" in /etc/rc.config. I am on

Sorry, I am haven't used the personal firewall, but SuSEFirewall I found pretty clear with the comments in the firewall.rc.config file.

...

Kernel 2.2.18, so I can't yet run SuSEFirewall 2 (I tried). Below are snippets of my boot log. To me it's a mixed bag of successes and failures. Can you tell me from that what my status is? Thanks again for your reply.

Master Resource Control: previous runlevel: N, switching to runlevel: 5 Starting Firewall Initialization: (phase 1 of 3) (run 2 of 3) Warning: interface eth0 is not active.

eth0 is not active because it gets its address from your ISP's DHCP server.

...

Starting personal-firewall (initial) [active] done

It looks like you are srarting both SuSEFirewall AND the personal firewall. You should only use one

...

Starting service dhcp client on eth0dhcpcd[284]: DHCP_NAK server response received: requested address not available

You may need to check your dhclient.conf file and make sure it is set up properly. Or maybe you snipped additional info.

...

Starting Firewall Initialization: (phase 2 of 3) Starting Firewall Initialization: (phase 3 of 3) Starting personal-firewall (final) [active] done

It might work if you uninstalled SuSEFirewall and just used personal firewall, but you can't use both. I would recommend SuSEFirewall as it is very flexible and configurable, and works well.

...

Failed services in runlevel 5: SuSEfirewall_init SuSEfirewall_setup SuSEfirewall_final

HTH -- Joe & Sesil Morris New Tribes Mission Email Address: Joe_Morris@ntm.org Web Address: www.mydestiny.net/~joe_morris Registered Linux user 231871 "We can stand affliction better than we can prosperity, for in prosperity we forget God." --Dwight Lyman Moody

Doug McGarrett

02:07

New subject: [SLE] firewall and internet buying

At 18:48 01/02/2002 +0800, Joe & Sesil Morris (NTM) wrote:

...

Albert Wagner wrote:

...
I just installed the personal firewall that came with SuSE 7.1. And coincidentally cannot order anything on the internet: my basket is always empty. Does the firewall interfere with this kind of transaction?

It might. Try opening up port 443 (https) in your firewall. Some sites use this port for secure ordering. You may not be able to do this with the personal firewall, you may need to set up SuSEFirewall or SuseFirewall2, depending on your kernel.

/snip/ I'm using a Linksys BEFSR cable router as my firewall. I believe it has embedded Linux on it. I have no problem ordering things over the internet. I am no maven, so hopefully there will be some comments that elucidate the situation. --doug

Albert Wagner

03:48

New subject: [SLE] firewall and internet buying

On Wednesday 02 January 2002 08:07 pm, Doug McGarrett wrote: <snip>

...

I'm using a Linksys BEFSR cable router as my firewall. I believe it has embedded Linux on it. I have no problem ordering things over the internet. I am no maven, so hopefully there will be some comments that elucidate the situation. --doug

Thanks, Doug. (I had to look maven up. Cool word)

Albert Wagner

4 Jan 4 Jan

01:46

New subject: [SLE] firewall and internet buying

Thanks to everyone. I now have enough direction to see just what I have to read and the things I have to look for. Your advice and encouragement is much appreciated. Albert

8159

Age (days ago)

8161

Last active (days ago)

List overview

Download

10 comments

4 participants

participants (4)

Albert Wagner
Doug McGarrett
James Bliss
Joe & Sesil Morris (NTM)