Hi Jörg, thanks for your reply, but my ppp0 device is used and has an dynamic ip. It is also configured in SuSEFireall2. Daniel Schulz -----Ursprüngliche Nachricht----- Von: Joerg Mayer [mailto:jmayer@loplof.de] Gesendet: Sonntag, 6. Oktober 2002 15:54 An: Daniel Schulz Cc: suse-security@suse.com Betreff: Re: [suse-security] Problems with SuSEfirewall2 under 8.1 On Sun, Oct 06, 2002 at 03:09:24PM +0200, Daniel Schulz wrote:
nessaja:/etc/sysconfig # SuSEfirewall2 /sbin/SuSEfirewall2: line 696: test: 192.168.1.0/24: integer expression expected iptables v1.2.7a: host/network `ppp0' not found Try `iptables -h' or 'iptables --help' for more information. iptables v1.2.7a: Maximum prefix length 29 for --log-prefix Try `iptables -h' or 'iptables --help' for more information..
I just want to say: Me too.
It looks like there are two problems and how I worked around them:
"integer expression expected":
--- /sbin/SuSEfirewall2.orig 2002-10-05 20:38:47.000000000 +0200
+++ /sbin/SuSEfirewall2 2002-10-06 00:07:28.000000000 +0200
@@ -689,10 +689,8 @@
# skip 0/0
test "$DEV_IP" = "0/0" && continue
- PART1=${DEV_IP#/*#}
- #`echo $DEV_IP | $AWK -F/ '{print $1}'`
- PART2=${DEV_IP#*/#}
- #`echo $DEV_IP | $AWK -F/ '{print $2}'`
+ PART1=`echo $DEV_IP | $AWK -F/ '{print $1}'`
+ PART2=`echo $DEV_IP | $AWK -F/ '{print $2}'`
test '!' -z "$PART2" && test "$PART2" -lt 16 && {
echo "$PART1" | $GREP -Eq '^10\.|^172\.1' || {
echo "Warning: Netmask of $DEV_IP might be wrong, ensure
that it is correct."
"host/network xxx not found":
Looks like you have an unused interface in one of the interface lists
in /etc/sysconfig/SuSEfirewall. Remove it (unused meaning either no
ip address or 0.0.0.0 as ip address).
Ciao
Jörg
--
Joerg Mayer