Re: [Security Firewall] Building from CVS

Nigel Tingle <[email protected]> Thu, 11 Aug 2005 19:36:15 +0000
Newsgroups gmane.linux.mandrake.security.firewall
Message-ID <[email protected]>
I'm creating a new 10.0 build environment - which will also be my 
initial test environment.

At present the box has only one physical interface.

I suspect I got in trouble with 10.2 - partly because it was using dhcp.

I will make sure that the new environment has a fixed ip long before
MNF2 gets anywhere near it.

Andreas Hasenack wrote:

>On Thu, Aug 11, 2005 at 03:01:50AM +0000, Nigel Tingle wrote:
>  
>
>>Also:
>>
>>https://localhost:8443/
>>
>>does not generate the login screen, (just naatd is running ...)
>>
>>but
>>
>>https://localhost:8443/en
>>
>>works as expected.
>>
>>A general comment is that this still feels like beta code :(
>>    
>>
>
>This error obviously doesn't happen in the product. It must be due
>to something else in this setup based on 10.2. Have you tried using the
>hostname instead of localhost, btw?
>
>  
>
>>Using the MNF2 interface I managed to get it completely confused about about
>>what interfaces /IP addresses were configured.  I was then unable to connect
>>using the MNF2 interface to localhost or 127.0.0.1.  It appeared to 
>>insist on
>>redirecting to a non-existent IP address.
>>    
>>
>
>The zone<->interface association has to be done in two places and is
>*very* important for the firewall to work. Take a look at this ticket:
>http://qa.mandriva.com/show_bug.cgi?id=14227
>
>
>  
>
>------------------------------------------------------------------------
>
>____________________________________________________
>Want to buy your Pack or Services from Mandriva? 
>Go to http://store.mandriva.com
>Join the Club : http://www.mandrivaclub.com
>____________________________________________________
>  
>