"Mikkel L. Ellertson" <[EMAIL PROTECTED]> writes:

> > Is the printtool setting wrong permissions?  After the changes above
> > checkpc -f runs silently.
> >
> >
> It may be.  These were the permissions that 6.2 used, but it may have
> changed in 7.0.  Do you have all the updates installed?

Yup, including the latest security patched kernel yesterday (2.2.17-14)

Now I'm seeing some more confusing phenomena.  My firewall is
apparently blocking something involved in this transmission.  Or at
least I see packets being blocked going out eth0. (My internet
connection).  It seems this conversation between two machines on the
local lan should take place soley on eth1.  And in fact I don't think
that `smbclient' command would return any information if it was being
sent over eth0.

But every time I send the smbclient -L -N chub  I get a packet blocked
at the firewall on eth0, is that normal?  Syslog item:

Feb 11 08:47:51 reader kernel: Packet log: \
output REJECT eth0 PROTO=17 206.117.4.49:1039 206.117.4.255:137 \
L=78 S=0x00 I=22791 F=0x0000 T=64 (#48)

Something has changed but I can't tell what.  I was able to get feed
back from the smbclient command but cannot now.

         #  smbclient -L -N chub
        SSL: Error error setting CA cert locations: error:00000000::lib(0)
        :func(0) :reason(0)
        trying default locations.
        added interface ip=206.117.4.49 bcast=206.117.4.255 nmask=255.255.255.0
        added interface ip=192.168.xxx bcast=192.168.1.255 nmask=255.255.255.0
        Packet send failed to 206.117.4.255(137) ERRNO=Operation not permitted
        Connection to -N failed
        [206:root]>~
         # 

Doesn't say if the packet to 192.168.xxx also failed so I guess it
went thru.


Attempting to send a print job:

lpr -V FILE1

   # lpr -V FILE1
  LPRng-3.6.24, Kerberos5, Copyright 1988-2000 Patrick Powell, [snip]
  sending job 'root@reader+832' to lp@localhost
  connecting to 'localhost', attempt 1
  connected to 'localhost'
  requesting printer lp@localhost
  sending control file 'cfA832reader.local.lan' to lp@localhost
  completed sending 'cfA832reader.local.lan' to lp@localhost
  sending data file 'dfA832reader.local.lan' to lp@localhost
  completed sending 'dfA832reader.local.lan' to lp@localhost
  done job 'root@reader+832' transfer to lp@localhost
  [206:root]>~

Nothing appear in logs so maybe if I enable logging thru ipchains of
all traffic including eth1 (local network).

After browsing the ipchains manpage it isn't at all clear how I would
insert a rule that causes all traffic to be logged.

Anyone know how that is done?




_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to