| Summary: | Seems shorewall blocks urpmi in fresh MGA6D1 installation | ||
|---|---|---|---|
| Product: | Mageia | Reporter: | Rolf Pedersen <rolfpedersen> |
| Component: | RPM Packages | Assignee: | All Packagers <pkg-bugs> |
| Status: | RESOLVED OLD | QA Contact: | |
| Severity: | normal | ||
| Priority: | Normal | CC: | lists.jjorge, marja11, mrmazda, nic, sysadmin-bugs |
| Version: | Cauldron | Keywords: | 6dev1 |
| Target Milestone: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Source RPM: | shorewall | CVE: | |
| Status comment: | |||
| Attachments: |
journalctl snippet
mga6d1 x86_64 report.bug.gz |
||
|
Description
Rolf Pedersen
2016-03-28 16:14:53 CEST
From bug 18084 I understood that you used a Classical iso to install from (because you chose "Custom" in the desktop selection screen) Which iso you used to install from, is always welcome information ;-) Could you please attach journalctl.txt that is the result of running, as root, journalctl -a --since="2016-03-27" --until="2016-03-28 hh:mm" > journalctl.txt (date + time for --until should be set to shortly after seeing, after you stopped shorewall, that urpmi worked fine) Keywords:
(none) =>
6dev1, NEEDINFO (In reply to Marja van Waes from comment #1) > From bug 18084 I understood that you used a Classical iso to install from > (because you chose "Custom" in the desktop selection screen) > > Which iso you used to install from, is always welcome information ;-) > Sorry, classic iso is all that was available when I read the announcement from Anne. I got Mageia-6-dev1-x86_64-DVD.iso > Could you please attach journalctl.txt that is the result of running, as > root, > > journalctl -a --since="2016-03-27" --until="2016-03-28 hh:mm" > > journalctl.txt > > (date + time for --until should be set to shortly after seeing, after you > stopped shorewall, that urpmi worked fine) Ok. FWIW, Mar 27 21:03:31 urpmi called with "-v --auto-update" Mar 27 21:06:36 Shorewall Stopped Mar 27 21:13:03 RPM exits 0 Thanks. Created attachment 7607 [details]
journalctl snippet
journalctl -a --since="2016-03-27" --until="2016-03-27 21:14" > journalctl.txt
There are indeed a lot of such lines, when you run urpmi: kernel: Shorewall:OUTPUT:REJECT:IN= OUT=enp16s0 SRC=192.168.1.101 DST=192.168.1.1 LEN=64 TOS=0x00 PREC=0x00 TTL=64 ID=47147 DF PROTO=UDP SPT=45070 DPT=53 LEN=44 Assigning to all packagers collectively, since shorewall has no maintainer. However, no one else reported this issue, so maybe something happened to your shorewall setting while installing, after all? Could you please also attach /root/drakx/report.bug.xz Source RPM:
(none) =>
shorewall There have been similar reports but no agreement on the cause. One of them https://bugs.mageia.org/show_bug.cgi?id=17683 CC:
(none) =>
nic Created attachment 7615 [details]
mga6d1 x86_64 report.bug.gz
My recollection is that I didn't change security level from default Standard and didn't touch Security at all, except to click and view. Firewall was disabled by default, according to this recollection. Of course, something else might have happened.
Since early 2000, when Mandrake set my uid to 501, I have used the same username and configured my user to 501.501, as I did for this installation and all the others on the lan, thinking of simplifying ssh or nomachine operations, for example.
That practice seems to be falling increasingly out of favor, I've been having to run userdrake to even see my user at login, and I'm preparing myself to go with the flow, before long. I mention in case that move might have upset the apple cart, somehow. ;p After initial problems with booting to X, I've changed my uid to 1000 on this installation.
[root@p8z68 rolf]# ll /mnt/disk/home/
total 1
drwxr-xr-x 20 1000 nx 856 Mar 30 09:11 rolf/
Yes the installer does indicate that the firewall is disabled but that is an incorrect message. Shorewall can't be disabled during installation. I had the same problem. And fixed it reconfiguring the firewall. Then I added an USB WiFi dongle, and it didn't work either. And fixed it reconfiguring the firewall. I must say I only used Live media for some years, but this "Shorewall can't be disabled during installation" sounds very end user annoying for me... CC:
(none) =>
lists.jjorge (In reply to Nic Baxter from comment #7) > Yes the installer does indicate that the firewall is disabled but that is an > incorrect message. Shorewall can't be disabled during installation. I see no existing bug about doing something about this. It's annoying to uncheck the Shorewall box during installation, expecting the unneeded service to not be started on first boot, only to find the installation unusable because, X purposely not having been installed, all the vttys are constantly bombarded with "Shorewall:OUTPUT:REJECT:" messages. CC:
(none) =>
mrmazda No comments since almost 5 years ago, assuming this is no longer an issue and closing as OLD Please reopen if you still hit this problem after installing Mageia 8 Please (In reply to Felix Miata from comment #9) > (In reply to Nic Baxter from comment #7) > > Yes the installer does indicate that the firewall is disabled but that is an > > incorrect message. Shorewall can't be disabled during installation. > > I see no existing bug about doing something about this. There is, now: bug 23928 Resolution:
(none) =>
OLD |