Talk:Firewall, Monitoring - Revision history

203.222.88.23 at 04:03, 19 March 2005

2005-03-19T04:03:41Z

2005-03-17T16:26:38Z

/var/log/security ownership/permissions

2005-03-17T10:30:41Z

2005-03-17T10:29:03Z

2005-03-17T05:02:28Z

formatting errors

2005-03-17T05:02:09Z

formatting errors

2005-03-16T21:59:53Z

2005-03-16T21:57:27Z

2005-03-16T16:21:19Z

you're getting these errors how?

2005-03-16T11:56:01Z

← Older revision		Revision as of 04:03, 19 March 2005
Line 76:		Line 76:

	----		----
		+
		+
		+	Thanks Heaps,was wondering why the monitor didn't load cause i didn't add it to newsyslog.conf. Your site has been heaps of help. Without it I wouldn't have got this far with FreeBSD.
		+
		+	Keep up the good work
		+
		+	gaZooGA

← Older revision		Revision as of 16:26, 17 March 2005
Line 65:		Line 65:

	gaZooGA		gaZooGA
		+
		+	== /var/log/security ownership/permissions ==
		+
		+	----
		+	That's correct - you need to either chmod /var/log/security 644 (and don't forget to update the permissions settings for it in /etc/newsyslog.conf or your change will get reset the next time the logs rotate!) or else change the ownership / group ownership of it to allow reading by the www user.
		+
		+	Of course, considering that www is the most commonly compromised system account (scripting vulnerabilities in hosted forums allowing write/execute is a VERY common form of webserver compromise), you might as well just mod it 644, 'cause really, if ANY uid is going to get sloppy it'll be www's. =)
		+
		+	--[[User:Jimbo\|Jimbo]] 11:26, 17 Mar 2005 (EST)
		+
		+	----

@@ Line 60: / Line 60: @@
 ----
-Thanks for that. The script now compiles fine. Only problem it is still not populating. does this mean that it can't read the /var/log/security file. do i have to use a chmod command on it to allow it to work?
+Thanks for that. The script now compiles fine. i set a chmod of the /var/log/security to 644 to allow the scipt to read it. I assume this is the correct command.
-once again thanks for this
+Thanks once again.
 gaZooGA

← Older revision		Revision as of 10:29, 17 March 2005
Line 59:		Line 59:
	Hope you like the setup! --[[User:Jimbo\|Jimbo]] 00:02, 17 Mar 2005 (EST)		Hope you like the setup! --[[User:Jimbo\|Jimbo]] 00:02, 17 Mar 2005 (EST)
	----		----
		+
		+	Thanks for that. The script now compiles fine. Only problem it is still not populating. does this mean that it can't read the /var/log/security file. do i have to use a chmod command on it to allow it to work?
		+
		+	once again thanks for this
		+
		+	gaZooGA

← Older revision		Revision as of 05:02, 17 March 2005
Line 57:		Line 57:
	The wiki was automatically converting <nowiki>''</nowiki> to an attempt to italicize code, where I was using it in the script for the usual purpose - to represent a null string. I added <nowiki> tags to nerf the problem - grab a copy again and replace yours with it, and all should be well.		The wiki was automatically converting <nowiki>''</nowiki> to an attempt to italicize code, where I was using it in the script for the usual purpose - to represent a null string. I added <nowiki> tags to nerf the problem - grab a copy again and replace yours with it, and all should be well.

−	Hope you like the setup!	+	Hope you like the setup! --[[User:Jimbo\|Jimbo]] 00:02, 17 Mar 2005 (EST)
		+	----

← Older revision		Revision as of 05:02, 17 March 2005
Line 52:		Line 52:

	gaZooGA		gaZooGA
		+
		+	== formatting errors ==
		+
		+	The wiki was automatically converting <nowiki>''</nowiki> to an attempt to italicize code, where I was using it in the script for the usual purpose - to represent a null string. I added <nowiki> tags to nerf the problem - grab a copy again and replace yours with it, and all should be well.
		+
		+	Hope you like the setup!

← Older revision		Revision as of 21:59, 16 March 2005
Line 42:		Line 42:

	the script compliles and runs but only prints the tops of the tables.		the script compliles and runs but only prints the tops of the tables.
		+
		+	here is the link http://rarm.gazooga.net/cgi-bin/firewall.pl

	so i am just wondering what to put afte the two eq statements.		so i am just wondering what to put afte the two eq statements.

← Older revision		Revision as of 21:57, 16 March 2005
Line 27:		Line 27:
	you know that that's a cgi script, not intended to be run from a command line, right? are you getting those errors from a browser when you try to browse into it, or...? --[[User:Jimbo\|Jimbo]] 11:21, 16 Mar 2005 (EST)		you know that that's a cgi script, not intended to be run from a command line, right? are you getting those errors from a browser when you try to browse into it, or...? --[[User:Jimbo\|Jimbo]] 11:21, 16 Mar 2005 (EST)
	----		----
		+
		+	Hi Sorry i should have given more information.
		+
		+	I am getting the errors from the browser. The error logs are from apache2 httpd. If I put a numerical value like 1 after the eq's:
		+
		+	unless ($log[$loop][6] eq 1 ) { <-----This line
		+	print "<tr>\n";
		+
		+	for ($element=0; $element<12; $element++) {
		+	unless ($element eq 2) {print $bodycellbegin . $log[$loop][$element] . $bodycellend;}
		+	if ($host_lookups * ($element eq 6)) {
		+	my $hostname = `$dig_cmd $log[$loop][6] $dig_opts`;
		+	if (($hostname =~ m/\<\<\>\>/) + ($hostname eq 1 )) {$hostname = ' ';} <-----And this line
		+
		+	the script compliles and runs but only prints the tops of the tables.
		+
		+	so i am just wondering what to put afte the two eq statements.
		+
		+	unless ($log[$loop][6] eq ) & if (($hostname =~ m/\<\<\>\>/) + ($hostname eq 1 )) {$hostname = ' ';}
		+
		+	Thanks for getting back to me.
		+
		+	gaZooGA

← Older revision		Revision as of 16:21, 16 March 2005
Line 21:		Line 21:

	gaZooGA		gaZooGA
		+
		+	== you're getting these errors how? ==
		+
		+	----
		+	you know that that's a cgi script, not intended to be run from a command line, right? are you getting those errors from a browser when you try to browse into it, or...? --[[User:Jimbo\|Jimbo]] 11:21, 16 Mar 2005 (EST)
		+	----

@@ Line 5: / Line 5: @@
 [Wed Mar 16 22:30:17 2005] [error] [client 192.168.0.2] syntax error at /usr/local/www/cgi-bin/firewall.pl line 186, near "eq
 [Wed Mar 16 22:30:17 2005] [error] [client 192.168.0.2] syntax error at /usr/local/www/cgi-bin/firewall.pl line 193, near "eq
 [Wed Mar 16 22:30:17 2005] [error] [client 192.168.0.2] syntax error at /usr/local/www/cgi-bin/firewall.pl line 200, near "}"
 [Wed Mar 16 22:30:17 2005] [error] [client 192.168.0.2] Execution of /usr/local/www/cgi-bin/firewall.pl aborted due to compil
 [Wed Mar 16 22:30:17 2005] [error] [client 192.168.0.2] Premature end of script headers: firewall.pl
 just wondering if you have an updated version of this file