Topic: masq start errors

[paul_sc]

Hi all...would someone tell me what
Warning: wierd character in interface
means and if it can be ignored?

I am getting this on a Clean 6.01 install no mods. I only saw one reference to the issue here,

http://forums.contribs.org/index.php?topic=23651.msg94651#msg94651

but the thread really does not say what is going on or if it is ok.

I ask because I am having various issues on my production server ranging from

Remote Access update operation failues

Running event handler: /etc/e-smith/events/remoteaccess-update/S45conf-masq
WARNING in /etc/e-smith/templates//etc/rc.d/init.d/masq/00Definitions: Use of uninitialized value in concatenation (.) or string at /etc/e-smith/templates//etc/rc.d/init.d/masq/00Definitions line 5.
WARNING: Template processing succeeded for //etc/rc.d/init.d/masq: 1 fragment generated warnings
 at /etc/e-smith/events/remoteaccess-update/S45conf-masq line 46

to problems with smtpfront-qmail

http://forums.contribs.org/index.php?topic=23651.msg94651#msg94651

to inability to change my ssh port or get VPN to work

I figure something must be wrong with my setup (or me I planned to just start over, but, I am seeing similar behavior on a different unmodified setup, so maybe there is nothing wrong with my server??? ...thanks

[root]# /etc/rc.d/init.d/masq stop

Shutting down IP masquerade and firewall rules:         Done!

[root]# /etc/rc.d/init.d/masq start
Enabling IP masquerading: Warning: wierd character in interface -j' (No aliases, :, ! or *).
Bad argument ACCEPT'
Try iptables -h' or 'iptables --help' for more information.
Warning: wierd character in interface -j' (No aliases, :, ! or *).
Bad argument PostroutingOutbound'
Try iptables -h' or 'iptables --help' for more information.
Warning: wierd character in interface --jump' (No aliases, :, ! or *).
Bad argument InboundUDP'
Try iptables -h' or 'iptables --help' for more information.
Warning: wierd character in interface --jump' (No aliases, :, ! or *).
Bad argument denylog'
Try iptables -h' or 'iptables --help' for more information.
<snip>
etc........

[paul_sc]

I guess I answered my own question...I think...the wierd character in interface seems to only happen in server only mode...in server-gateway starts and stops fine. I suppose the error is happening because there is no value for a second interface?

That leaves me with the other issues to tackle

[cc_skavenger]

you are correct.  I have only seen this in server only mode.  I assume that it is because there is no second interface present.

[raem]

paul_sc

> ...the wierd character in interface seems to only > happen in server only mode...in server-gateway
> starts and stops fine.

In server only mode the firewall is disabled, so you should have a seperate external firewall to protect your server. If you are configuring masq/iptables rules in this mode then you are using the server in a way is was not designed to be used and it is likely to be insecure.