[Nufw-users] Re: setting up nuFW

[Muhammad]

I examined the case further and guess there is something wrong with nufw because tcpdump shows no activity about it. Seems nufw does not even peek the packets from the QUEUE.

 

--Muhammad

----- Original Message -----

From: Muhammad

To: address@hidden

Sent: Monday, October 24, 2005 1:19 PM

Subject: Re: setting up nuFW

I examined the case further and guess there is something wrong with nufw because tcpdump shows no activity about it. Seems nufw does not even peek the packets from the QUEUE.

 

--Muhammad

----- Original Message -----

From: Muhammad

To: address@hidden

Sent: Monday, October 24, 2005 12:26 PM

Subject: setting up nuFW

Hi

I have been having a tough time setting up nuFW. Having installed the package (with it's own pains of course! ;-)) I followed the instruction from nuFW howto to test my nuFW but with no luck.

I start 'nuauth' and 'nufw' processes on a  same machine. I use plaintext mode for user list as well as acls. When I set netfilter rules, I start nutcpc and the authentication seemingly takes place successfully (by entering username and passwrod). But I see no log about authenticating a user in nuath output (though I use -vvvvvvvvv for most verbose mode). Moreover, when I try 'ssh' or there is no sign of activity in the nufw output and packets are dropped as if never taken from the QUEUE. Am I losing any details in configuration?

 

*netfilter rules:

$iptables -A OUTPUT -p tcp --dport ssh -m state --state NEW --syn -j QUEUE

$iptables -A OUTPUT -p tcp -m state --state ESTABLISHED,RELATED -j ACCEPT

 

*services:

$nuauth -vvvvvvvvv

$nufw -vvvvvvvvv

 

* and the config file:

same as default except for the following lines:

nuauth_client_listen_addr="192.168.70.85"

nuauth_nufw_listen_addr="192.168.70.85"

nufw_gw_addr="192.168.70.85"

nuauth_user_check_module="libplaintext"

Thanks,

--Muhammad