Faheem Mitha wrote:
Dear People, I have a minor but annoying problem with lokkit. It does not start at bootup. The runlevel look normal eg. etc/rc0.d/K99lokkit etc/rc1.d/K99lokkit etc/rc2.d/S01lokkit etc/rc3.d/S01lokkit etc/rc4.d/S01lokkit etc/rc5.d/S01lokkit etc/rc6.d/K99lokkit but I get errors at bootup which don't appear to be captured to any file so I can't reproduce them here. I can start it manually by Chrestomanci:~# /etc/init.d/lokkit start Starting basic firewall rules: lokkit.
I recall that lokkit never worked for me either. That prompted me just to learn how to use iptables manually, so I never figured out why lokkit was failing.
After bringing it up manually, try: # iptables -Lto be sure that it isn't just failing and suppressing the output, or failing and redirecting the ouput elsewhere.
If the rules are being loaded when you bring it up manually, it's really hard to say what the problem might be, which is why I suspect it is just silently failing.
If you could copy to the list the output of "$ ls /etc/rc*.d", "$ cat /etc/modules", "# iptables -L", "$ lsmod", and the contents of the rules script generated by lokkit, I could get a better idea of what is going on. At least these are the places I would look if I were going about diagnosing the problem on one of my own systems.
My hunch is that if it is silently failing when you bring it up manually, that the problem is that there are kernel modules not being loaded which are needed by iptables.
dircha