I'm running FreeBSD 10. I've installed the security/fwbuilder package. I created the default policy from the single web server template. When I go to install the Policy, it compiles and when it starts the Policy Install, it just stops, until I hit cancel. Google did not come with a fix for this error.
The installation log:
As you can tell I'm running this a root. I have configured ssh to allow root to login. (I know, bad idea. Will change once I get this going)
Initially there was no /etc/fw directory, I created one. I also made it world writable (777). I've put wireshark on the interface and from what I can tell, the connection is being established.
If I execute the last command,
In rc.conf I've added:
And finally:
Any suggestions on how to get this going?
Thank you.
-JJ
The installation log:
Code:
Summary:
* Running as user : jjthomas
* Firewall name : Firewall
* Installer uses user name : root
* Management address : 127.0.0.1
* Platform : ipfw
* Host OS : freebsd
* Loading configuration from file /home/jjthomas/FW100414.fwb
Installation plan:
Copy file: /home/jjthomas/Firewall.fw --> /etc/fw/Firewall.fw
Copy data file: FW100414.fwb --> /etc/fw/
Run script echo '--**--**--';
chmod +x /etc/fw/Firewall.fw;
sh /etc/fw/Firewall.fw && ( echo 'Policy activated'; sleep 2; echo)
Copying /home/jjthomas/Firewall.fw -> 127.0.0.1:/etc/fw/Firewall.fw
Running command '/usr/local/bin/fwbuilder -Y scp -o ConnectTimeout=30 -q /home/jjthomas/Firewall.fw root@127.0.0.1:/etc/fw/Firewall.fw'As you can tell I'm running this a root. I have configured ssh to allow root to login. (I know, bad idea. Will change once I get this going)
Initially there was no /etc/fw directory, I created one. I also made it world writable (777). I've put wireshark on the interface and from what I can tell, the connection is being established.
If I execute the last command,
/usr/local/bin/fwbuilder -Y scp -o ConnectTimeout=30 -q /home/jjthomas/Firewall.fw [email=root@127.0.0.1]root@127.0.0.1[/email]:/etc/fw/Firewall.fw everything runs fine. I'm asked for my (root) password and the command finishes out successfully.In rc.conf I've added:
Code:
firewall_enable="YES"
firewall_type="open"
firewall_logging="YES"And finally:
Code:
FreeBSD anthem.027esc.net 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan 16 22:34:59 UTC 2014 root@snap.freebsd.org:/usr/obj/usr/src/sys/GENERIC amd64Any suggestions on how to get this going?
Thank you.
-JJ