Topic: Recovering firewall settings

[John Pritchard]

I am new to this forum, so if I misuse, please feel free to flame

Have experience with Unix, Linux (primarily RedHat) but not much with the e-smith product.  A company with an e-smith server had a hard drive crash and less-than-reliable backups.  To make a long story short, we loaded a new drive with SME 5.6 (they swear 5.6 was on the old system).  We restored a tape using the e-smith restoration that had a partial restore on it (if I could do it again, I would restore an older full restore and then restore the partial on top).

We have the system running again, but we have some configuration issues that I am looking for ideas on:
 1) Biggest issue is that the init.d/masq script seems messed up.  When booting an error occurs in the script.  Looks like two sets of :: are in the start section.  I removed one set and attempted a masq start and received errors saying /bin/ipchains not there.   They were right, the binary is not there... is it supposed to be?  Did the install of 5.6 not install it?  or is the references in the script coming from a script that was restored?  Is there a way for me to 'reconfigure' the firewall so I have a working version?  Users now use the proxy to get to the Internet, but are unable to use other protocols (like ftp from the command line, AOL, POP mail to external servers, etc.)
  2) some of the system-manager interface is messed up.  For example the users were restored, but if you click on the users in the manager interface, it says there are none.  This is also true of our ibays.  I got that up and available by creating a new one and copying the files to it (sorry).  Is there a way to 're-sychronize' this?

I have been toying with simply rebuilding a new box and moving the data over.  What do you think?

PS - All-in-all... I kinda like this e-smith.  I have a couple Net Integrators installed, which are nice commercial version with a neat backup scheme, but this e-smith looks like a nice flexible version of that.

John Pritchard, CISSP
Catalyst Solutions
http://www.YourNetExperts.com

[%sig%]

[Ray Mitchell]

Sorry can't help resolve that mess. It sounds like the partial backup is the source of your problems ie only data backed up and not config information etc ??

A clean start sounds like a good idea, but I would add a second drive in a RAID1 software array, sme supports that.
Then they are covered if a drive fails again.

And make sure the backup system is working correctly (and do a test full restore so you know you can trust the backup/restore process).

Regs
Ray

[Graeme Fleming]

.. also if its looking for ipchains rather than iptables it woz prob running SME 5.5 not 5.6 as SME went from kernel 2.2.x to 2.4.x between these versions.

Have a good read on these forums to decide if v5.6 or the latest v6.0 is best for your client (there are a couple of gotchas with 6.0 but it is solid) - RAID1 is a good suggestion!

HTH