Author Topic: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado] (Read 2332 times)

com_gunner · « **on:** July 24, 2013, 12:21:49 am »

Saludos, en la nueva actualización, no puedo hacer ninguna Excepcion del Proxy Transparente, con cualquier dominio que intento genera el mismo error, antes de la actualización su funcionaba, espero puedan orientarme:

2013/07/23 16:59:41 INFO> GlobalImpl?.pm:603 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall squid logs 2013/07/23 16:59:41 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: firewall 2013/07/23 16:59:43 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: squid 2013/07/23 16:59:54 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: logs 2013/07/23 16:59:54 INFO> GlobalImpl?.pm:687 EBox::GlobalImpl::saveAllModules - Changes saved successfully 2013/07/23 17:02:52 INFO> GlobalImpl?.pm:603 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall squid logs 2013/07/23 17:02:52 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: firewall 2013/07/23 17:02:54 ERROR> Sudo.pm:233 EBox::Sudo::_rootError - root command set -e /sbin/iptables -t nat -A premodules -p tcp -d speedtest.net --dport 80 -j iaccept /sbin/iptables -t nat -A premodules -i eth3 ! -d 192.168.1.254 -p tcp --dport 80 -j REDIRECT --to-ports 3128 /sbin/iptables -t filter -A imodules -m state --state NEW -i eth3 -p tcp --dport 3128 -j iaccept /sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3129 -j DROP /sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3130 -j DROP /sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 80 -j oaccept /sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 443 -j oaccept failed. Error output: iptables v1.4.12: Couldn't load target `iaccept':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

Command output: . Exit value: 2 2013/07/23 17:02:54 ERROR> Iptables.pm:660 EBox::Iptables::ANON - Error executing firewall rules for module squid

2013/07/23 17:03:06 WARN> GlobalImpl?.pm:685 EBox::GlobalImpl::saveAllModules - Changes saved with some warnings:

El firewall no ha podido añadir reglas para los siguientes módulos:squid. Probablemente esto sea causado por una falta de conectividad, comprueba la configuración o deshabilita esos módulos.

Zentyal Software:

ntivirus 3.0.3

Backup 3.0.6

Bandwidth Monitor 3.0.1

Captive Portal 3.0.5

Certification Authority 3.0.3

Cloud Client 3.0.24

DHCP Service 3.0.3

DNS Service 3.0.10

FTP 3.0.1

File Sharing and Domain Services 3.0.21

Firewall 3.0.5

Groupware (Zarafa) 3.0.3

HTTP Proxy (Cache and Filter) 3.0.13

IPsec 3.0.3

Intrusion Detection System 3.0.3

Jabber (Instant Messaging) 3.0.2

Layer-7 Filter 3.0

Mail Filter 3.0.6

Mail Service 3.0.6

Monitor 3.0.3

NTP Service 3.0.1

Network Configuration 3.0.6

Network Objects 3.0.2

Network Services 3.0.4

PPTP 3.0.1

Printer Sharing Service 3.0.4

RADIUS 3.0.2

Thin Clients 3.0.2

Traffic Shaping 3.0.2

UPS Management 3.0.1

User Corner 3.0.6

Users and Groups 3.0.21

VPN Service 3.0.6

Virtualization Manager 3.0.7

VoIP 3.0.2

Web Mail Service 3.0.1

Web Server 3.0.4

http://doc.zentyal.org/es/proxy.html

A su vez, puede interesarnos que ciertas páginas no se sirvan a través del proxy, sino que se conecte directamente desde el navegador del cliente, ya sea por cuestiones de funcionamiento incorrecto o de privacidad de los usuarios. En esos casos, podemos añadir una excepción en Excepciones del Proxy Transparente.

FIX ... aquí esta la Solución
-----------------------------------------------------------------------------
Gracias a jacalvo que da mantenimiento al GIT

He modificado los siguientes *.pm

https://github.com/Zentyal/zentyal/blob/master/main/squid/ChangeLog

https://github.com/Zentyal/zentyal/blob/master/main/firewall/ChangeLog

cd /usr/share/perl5/EBox/

mv Firewall.pm Firewall.pm.bak
wget https://raw.github.com/Zentyal/zentyal/master/main/firewall/src/EBox/Firewall.pm

mv Squid.pm Squid.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid.pm

mv SquidFirewall.pm SquidFirewall.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/SquidFirewall.pm

cd /usr/share/perl5/EBox/Squid/

mv LogHelper.pm LogHelper.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/LogHelper.pm

cd /usr/share/perl5/EBox/Squid/Model

mv AccessRules.pm AccessRules.pm.bak

mv CategorizedLists.pm CategorizedLists.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/Model/AccessRules.pm
wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/Model/CategorizedLists.pm

biyover · « **Reply #1 on:** July 31, 2013, 05:13:06 pm »

Wait! is this an actual fix? is it included in the latest updates? I just modified something today on my box and got this message again...

It's not clear if the second part are some kind of instructions to follow.

Momento! esto es una solución? esta incluido en las últimas actualzaciones? Yo modifique algo hoy y al guardar cambios en mi servidor y recibi este mensaje de nuevo...

No me queda claro si la segunda parte son instrucciones a seguir.

---

EDIT: Err, followed the instructions and after restart got:

Can't locate object method "STANDALONE_MODE" via package "EBox::UsersAndGroups" at /usr/share/perl5/EBox/Squid.pm line 1311.

Going back to old files.

Also, from what I can see from my squid logs, a restart is not fixing (momentarily) the problem. Once it occurs, there is no firewall rule redirecting for transparent squid. Mmm, what about turning transparent off and then on again to reset the rule...

biyover · « **Reply #2 on:** July 31, 2013, 06:47:34 pm »

Mirando los registros ¿No será un problema de permisos? Veo que hay otros problemas relacionados con "iaccept" y que todos inician con el siguiente:

2013/07/31 12:28:00 ERROR> Sudo.pm:233 EBox::Sudo::_rootError - root command set -e

La documentación de iptables muestra esta comando. ¿Será que al intentar cargar las reglas del cortafuegos, falta permiso de raíz para ejecutar?

com_gunner · « **Reply #3 on:** July 31, 2013, 10:22:56 pm »

Quote from: biyover on July 31, 2013, 06:47:34 pm

Mirando los registros ¿No será un problema de permisos? Veo que hay otros problemas relacionados con "iaccept" y que todos inician con el siguiente:

2013/07/31 12:28:00 ERROR> Sudo.pm:233 EBox::Sudo::_rootError - root command set -e

La documentación de iptables muestra esta comando. ¿Será que al intentar cargar las reglas del cortafuegos, falta permiso de raíz para ejecutar?

Ya esta resuelto, gracias! tiene que ver con squid y el firewall. descargando los archivos *.pm queda resuelto, según el changelog cambiaron el iaccept por accept

com_gunner · « **Reply #4 on:** July 31, 2013, 10:31:18 pm »

Quote from: biyover on July 31, 2013, 05:13:06 pm

Wait! is this an actual fix? is it included in the latest updates? I just modified something today on my box and got this message again...

It's not clear if the second part are some kind of instructions to follow.

Momento! esto es una solución? esta incluido en las últimas actualzaciones? Yo modifique algo hoy y al guardar cambios en mi servidor y recibi este mensaje de nuevo...

No me queda claro si la segunda parte son instrucciones a seguir.

---

EDIT: Err, followed the instructions and after restart got:

Can't locate object method "STANDALONE_MODE" via package "EBox::UsersAndGroups" at /usr/share/perl5/EBox/Squid.pm line 1311.

Going back to old files.

Also, from what I can see from my squid logs, a restart is not fixing (momentarily) the problem. Once it occurs, there is no firewall rule redirecting for transparent squid. Mmm, what about turning transparent off and then on again to reset the rule...

HEAD
   + Mark logs as changed when an access rule is added, updated or deleted
   + Fix duplicated entries generated by the LogHelper
   + Prerouting rules have no iaccept chain, use ACCEPT target
   + Adapted to updatedRowNotify call with no changes in values
   + Added menu icon
   + Fix parse of the dansguardian log in the LogHelper
   + Make LogHelper extract data from internal and external log files
   + Adapt firewall rules to new accept chains
   + Show correct group names in the Access Rules menu when using Users Group
   + Handle domains that are actually IP addresses in the LogHelper
   + Set transparent HTTP proxy firewall rules unless the module is
     temporary stopped
   + Added support for multiple Organizational Units
   + Updated to use the new security group concept
   + Adapted squid to new user module interface for external AD authorization

https://github.com/Zentyal/zentyal/blob/master/main/squid/ChangeLog

-------------------------------------------------------------------------

First debug mode

/etc/zentyal/zentyal.conf

debug = yes # Whether to enable the DEBUG> logs in ''/var/log/zentyal/zentyal.log'', this file will be commented below in this document. It's a good idea to enable it if we want to perform basic Zentyal troubleshooting.

dump_exceptions = yes # Show full stack trace in the Zentyal interface when you hit a bug, also very interesting for diagnosis.

My English is not very good, so let the translator.

The second part if the solution that worked ami me, however I see your error is different before trying to change anything, my recommendation is that you send the zentyal.log to see who is giving errors and where.

Show us the output of dpkg-l | grep zentyal

And I'll gladly support you can.

regards

biyover · « **Reply #5 on:** July 31, 2013, 10:53:39 pm »

En español no hay problema.

El asunto es que ya intente utilizar los nuevos archivos y no me funciono!!! Voy a revisar con cuidado e intentar nuevamente...

Yo tengo instalado:

Code: [Select]

ii  zentyal-antivirus                    3.0.3                        Zentyal - Antivirus
ii  zentyal-bwmonitor                    3.0.1                        Zentyal - Bandwidth Monitor
ii  zentyal-captiveportal                3.0.5                        Zentyal - Captive Portal
ii  zentyal-common                       3.0.7                        Zentyal - Common Library
ii  zentyal-core                         3.0.22                       Zentyal - Core
ii  zentyal-dhcp                         3.0.3                        Zentyal - DHCP Service
ii  zentyal-dns                          3.0.10                       Zentyal - DNS Service
ii  zentyal-firewall                     3.0.5                        Zentyal - Firewall
ii  zentyal-ltsp                         3.0.2                        Zentyal - Thin Clients
ii  zentyal-monitor                      3.0.3                        Zentyal - Monitor
ii  zentyal-network                      3.0.6                        Zentyal - Network Configuration
ii  zentyal-ntp                          3.0.1                        Zentyal - NTP Service
ii  zentyal-nut                          3.0.1                        Zentyal - UPS Management
ii  zentyal-objects                      3.0.2                        Zentyal - Network Objects
ii  zentyal-services                     3.0.4                        Zentyal - Network Services
ii  zentyal-software                     3.0.5                        Zentyal - Software Management
ii  zentyal-squid                        3.0.13                       Zentyal - HTTP Proxy (Cache and Filter)
ii  zentyal-usercorner                   3.0.6                        Zentyal - User Corner
ii  zentyal-users                        3.0.22                       Zentyal - Users and Groups

Voy a probar tambien encendiendo el depurador.

¿No entiendo cuando se incorporó este error? Desde que lo instalé no hubo problema. Cuando intente actualizar unas reglas del proxy me arrojo esto. Me parece que por mientras el proxy no esta recibiendo tráfico alguno (o por lo menos no aparece en el registro de squid).

¿Por que no se ha incorporado este arreglo en una actialización? ¿o fue recién hecha?

com_gunner · « **Reply #6 on:** July 31, 2013, 11:16:26 pm »

Quote from: biyover on July 31, 2013, 10:53:39 pm

En español no hay problema.

El asunto es que ya intente utilizar los nuevos archivos y no me funciono!!! Voy a revisar con cuidado e intentar nuevamente...

Yo tengo instalado:
Code: [Select]
ii zentyal-antivirus 3.0.3 Zentyal - Antivirus ii zentyal-bwmonitor 3.0.1 Zentyal - Bandwidth Monitor ii zentyal-captiveportal 3.0.5 Zentyal - Captive Portal ii zentyal-common 3.0.7 Zentyal - Common Library ii zentyal-core 3.0.22 Zentyal - Core ii zentyal-dhcp 3.0.3 Zentyal - DHCP Service ii zentyal-dns 3.0.10 Zentyal - DNS Service ii zentyal-firewall 3.0.5 Zentyal - Firewall ii zentyal-ltsp 3.0.2 Zentyal - Thin Clients ii zentyal-monitor 3.0.3 Zentyal - Monitor ii zentyal-network 3.0.6 Zentyal - Network Configuration ii zentyal-ntp 3.0.1 Zentyal - NTP Service ii zentyal-nut 3.0.1 Zentyal - UPS Management ii zentyal-objects 3.0.2 Zentyal - Network Objects ii zentyal-services 3.0.4 Zentyal - Network Services ii zentyal-software 3.0.5 Zentyal - Software Management ii zentyal-squid 3.0.13 Zentyal - HTTP Proxy (Cache and Filter) ii zentyal-usercorner 3.0.6 Zentyal - User Corner ii zentyal-users 3.0.22 Zentyal - Users and Groups
Voy a probar tambien encendiendo el depurador.

¿No entiendo cuando se incorporó este error? Desde que lo instalé no hubo problema. Cuando intente actualizar unas reglas del proxy me arrojo esto. Me parece que por mientras el proxy no esta recibiendo tráfico alguno (o por lo menos no aparece en el registro de squid).

¿Por que no se ha incorporado este arreglo en una actialización? ¿o fue recién hecha?

Todos estos problemas derivan del Zentyal-Core, hasta la version 3.0.16 todo estaba bien XD, si nos ayudas con tu zentyal.log, con el bug activado.

¿Reiniciaste los modulos? /etc/init.d/zentyal squid restart /etc/init.d/zentyal firewall restart?

biyover · « **Reply #7 on:** July 31, 2013, 11:32:55 pm »

OK. Desde que hice click en "Guardar cambios" hasta que me arrojo el error final de "No se efectuaron todos los cambios..." etc

Code: [Select]

2013/07/31 17:29:36 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/iptables -t filter -A omodules --protocol tcp --dport 80 -j oaccept
2013/07/31 17:29:36 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/sbin/iptables -t nat -A premodules -i eth1 ! -d 192.168.10.250 -p tcp --dport 53 -j REDIRECT --to-ports 53
/sbin/iptables -t nat -A premodules -i eth1 ! -d 192.168.10.250 -p udp --dport 53 -j REDIRECT --to-ports 53
/sbin/iptables -t nat -A premodules -i eth2 ! -d 192.168.100.250 -p tcp --dport 53 -j REDIRECT --to-ports 53
/sbin/iptables -t nat -A premodules -i eth2 ! -d 192.168.100.250 -p udp --dport 53 -j REDIRECT --to-ports 53
/sbin/iptables -t filter -A omodules --protocol udp --dport 53 -j oaccept
/sbin/iptables -t filter -A omodules --protocol tcp --dport 53 -j oaccept
2013/07/31 17:29:36 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/sbin/iptables -t nat -A premodules -p tcp -d hotmail.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d login.live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d mail.live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -i eth1 ! -d 192.168.10.250 -p tcp --dport 80 -j REDIRECT --to-ports 3128
/sbin/iptables -t nat -A premodules -i eth2 ! -d 192.168.100.250 -p tcp --dport 80 -j REDIRECT --to-ports 3128
/sbin/iptables -t filter -A imodules -m state --state NEW -i eth1 -p tcp --dport 3128 -j iaccept
/sbin/iptables -t filter -A imodules -m state --state NEW -i eth2 -p tcp --dport 3128 -j iaccept
/sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3129 -j DROP
/sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3130 -j DROP
/sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 80 -j oaccept
/sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 443 -j oaccept
2013/07/31 17:29:38 ERROR> Sudo.pm:233 EBox::Sudo::_rootError - root command set -e
/sbin/iptables -t nat -A premodules -p tcp -d hotmail.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d login.live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -p tcp -d mail.live.com --dport 80 -j iaccept
/sbin/iptables -t nat -A premodules -i eth1 ! -d 192.168.10.250 -p tcp --dport 80 -j REDIRECT --to-ports 3128
/sbin/iptables -t nat -A premodules -i eth2 ! -d 192.168.100.250 -p tcp --dport 80 -j REDIRECT --to-ports 3128
/sbin/iptables -t filter -A imodules -m state --state NEW -i eth1 -p tcp --dport 3128 -j iaccept
/sbin/iptables -t filter -A imodules -m state --state NEW -i eth2 -p tcp --dport 3128 -j iaccept
/sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3129 -j DROP
/sbin/iptables -t filter -A imodules -m state --state NEW -p tcp --dport 3130 -j DROP
/sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 80 -j oaccept
/sbin/iptables -t filter -A omodules -m state --state NEW -p tcp --dport 443 -j oaccept failed. 
Error output: iptables v1.4.12: Couldn't load target `iaccept':No such file or directory
 
 Try `iptables -h' or 'iptables --help' for more information.

Command output: . 
Exit value: 2
2013/07/31 17:29:38 ERROR> Iptables.pm:660 EBox::Iptables::__ANON__ - Error executing firewall rules for module squid
2013/07/31 17:29:38 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: squid
2013/07/31 17:29:39 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - find '/var/lib/zentyal/files/squid/categories/shallas_main'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/pLNGVn4wVN '/etc/squid3/squid.conf'
/bin/chmod 0640 '/etc/squid3/squid.conf'
/bin/chown 0.0 '/etc/squid3/squid.conf'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - squid3 -k parse /etc/squid3/squid.conf
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/logrotate.d/squid3'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/GR_Zy7ieyW '/etc/logrotate.d/squid3'
/bin/chmod 0644 '/etc/logrotate.d/squid3'
/bin/chown 0.0 '/etc/logrotate.d/squid3'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/adzapper.conf'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/MEdie870qS '/etc/adzapper.conf'
/bin/chmod 0644 '/etc/adzapper.conf'
/bin/chown 0.0 '/etc/adzapper.conf'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/PXNbM8NkL4 '/etc/squid3/squid-external.conf'
/bin/chmod 0640 '/etc/squid3/squid-external.conf'
/bin/chown 0.0 '/etc/squid3/squid-external.conf'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - squid3 -k parse /etc/squid3/squid-external.conf
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/squid3/errorpage.css'
2013/07/31 17:29:40 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/TeIPmxHlvH '/etc/squid3/errorpage.css'
/bin/chmod 0644 '/etc/squid3/errorpage.css'
/bin/chown 0.0 '/etc/squid3/errorpage.css'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/dansguardian.conf'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/leakBzczIx '/etc/dansguardian/dansguardian.conf'
/bin/chmod 0644 '/etc/dansguardian/dansguardian.conf'
/bin/chown 0.0 '/etc/dansguardian/dansguardian.conf'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/bannedphraselist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/nYYayJ1Rjg '/etc/dansguardian/lists/bannedphraselist'
/bin/chmod 0644 '/etc/dansguardian/lists/bannedphraselist'
/bin/chown 0.0 '/etc/dansguardian/lists/bannedphraselist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/exceptionphraselist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/izkcDUB8U6 '/etc/dansguardian/lists/exceptionphraselist'
/bin/chmod 0644 '/etc/dansguardian/lists/exceptionphraselist'
/bin/chown 0.0 '/etc/dansguardian/lists/exceptionphraselist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/pics'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/fY992zSek1 '/etc/dansguardian/lists/pics'
/bin/chmod 0644 '/etc/dansguardian/lists/pics'
/bin/chown 0.0 '/etc/dansguardian/lists/pics'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/bannedregexpurllist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/TdOTaGLr53 '/etc/dansguardian/lists/bannedregexpurllist'
/bin/chmod 0644 '/etc/dansguardian/lists/bannedregexpurllist'
/bin/chown 0.0 '/etc/dansguardian/lists/bannedregexpurllist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/filtergroupslist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/qIue3k5812 '/etc/dansguardian/lists/filtergroupslist'
/bin/chmod 0644 '/etc/dansguardian/lists/filtergroupslist'
/bin/chown 0.0 '/etc/dansguardian/lists/filtergroupslist'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/authplugins/ipgroups'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/t2Iiwp5u8O '/etc/dansguardian/lists/authplugins/ipgroups'
/bin/chmod 0644 '/etc/dansguardian/lists/authplugins/ipgroups'
/bin/chown 0.0 '/etc/dansguardian/lists/authplugins/ipgroups'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/contentscanners/clamdscan.conf'
2013/07/31 17:29:41 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/kpLAohRoRU '/etc/dansguardian/contentscanners/clamdscan.conf'
/bin/chmod 0644 '/etc/dansguardian/contentscanners/clamdscan.conf'
/bin/chown 0.0 '/etc/dansguardian/contentscanners/clamdscan.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/dansguardianf1.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/Lrgrit0fT7 '/etc/dansguardian/dansguardianf1.conf'
/bin/chmod 0644 '/etc/dansguardian/dansguardianf1.conf'
/bin/chown 0.0 '/etc/dansguardian/dansguardianf1.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/dansguardianf2.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/LkO8Axd4yI '/etc/dansguardian/dansguardianf2.conf'
/bin/chmod 0644 '/etc/dansguardian/dansguardianf2.conf'
/bin/chown 0.0 '/etc/dansguardian/dansguardianf2.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/dansguardianf3.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/nvfbo6arPe '/etc/dansguardian/dansguardianf3.conf'
/bin/chmod 0644 '/etc/dansguardian/dansguardianf3.conf'
/bin/chown 0.0 '/etc/dansguardian/dansguardianf3.conf'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/bannedsitelist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/yMypINK_kG '/etc/dansguardian/lists/bannedsitelist3'
/bin/chmod 0644 '/etc/dansguardian/lists/bannedsitelist3'
/bin/chown 0.0 '/etc/dansguardian/lists/bannedsitelist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/exceptionsitelist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/tVOmp39AhY '/etc/dansguardian/lists/exceptionsitelist3'
/bin/chmod 0644 '/etc/dansguardian/lists/exceptionsitelist3'
/bin/chown 0.0 '/etc/dansguardian/lists/exceptionsitelist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/lists/exceptionurllist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/nbT06xal5w '/etc/dansguardian/lists/exceptionurllist3'
/bin/chmod 0644 '/etc/dansguardian/lists/exceptionurllist3'
/bin/chown 0.0 '/etc/dansguardian/lists/exceptionurllist3'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/cron.d/zentyal-squid'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/0Eb16WrnPc '/etc/cron.d/zentyal-squid'
/bin/chmod 0644 '/etc/cron.d/zentyal-squid'
/bin/chown 0.0 '/etc/cron.d/zentyal-squid'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/dansguardian/languages/ukenglish/template.html'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/usIncrvZ6G '/etc/dansguardian/languages/ukenglish/template.html'
/bin/chmod 0644 '/etc/dansguardian/languages/ukenglish/template.html'
/bin/chown 0.0 '/etc/dansguardian/languages/ukenglish/template.html'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /usr/bin/stat -c%dI%iI%fI%hI%uI%gIhI%sI%XI%YI%ZI%oI%bI%tI%T '/etc/logrotate.d/dansguardian'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - set -e
/bin/mv /var/lib/zentyal/tmp/lZXjSJWXcj '/etc/logrotate.d/dansguardian'
/bin/chmod 0644 '/etc/logrotate.d/dansguardian'
/bin/chown 0.0 '/etc/logrotate.d/dansguardian'
2013/07/31 17:29:42 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/stop 'zentyal.squid3-external'
2013/07/31 17:29:47 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/start 'zentyal.squid3-external'
2013/07/31 17:29:48 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/stop 'ebox.dansguardian'
2013/07/31 17:29:49 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/start 'ebox.dansguardian'
2013/07/31 17:29:49 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/stop 'squid3'
2013/07/31 17:29:54 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/start 'squid3'
2013/07/31 17:29:54 INFO> Base.pm:229 EBox::Module::Base::save - Restarting service for module: logs
2013/07/31 17:29:54 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/stop 'ebox.loggerd'
2013/07/31 17:29:54 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/global-action --action saveAllModules --progress-id 1 (pid: 27483) - /sbin/start 'ebox.loggerd'
2013/07/31 17:29:55 WARN> GlobalImpl.pm:685 EBox::GlobalImpl::saveAllModules - Changes saved with some warnings:
	Firewall failed to add rules for the following modules: squid. Probably this is caused by a lack of connectivity, check your configuration or disable those modules
2013/07/31 17:29:56 DEBUG> Sudo.pm:181 EBox::Sudo::_root - /usr/share/zentyal/loggerd (pid: 28117) - /bin/cat /var/lib/zentyal/conf/zentyal-mysql.passwd
2013/07/31 17:29:56 DEBUG> Loggerd.pm:62 EBox::Loggerd::run - Loaded log helper classes: EBox::AntiVirus::LogHelper EBox::BWMonitor EBox::DHCPLogHelper EBox::Squid::LogHelper

com_gunner · « **Reply #8 on:** July 31, 2013, 11:39:42 pm »

Es el mismo problema que yo tenia, si se corrige con lo que hice.

Error output: iptables v1.4.12: Couldn't load target `iaccept':No such file or directory

Try `iptables -h' or 'iptables --help' for more information.

todos los *.pm tienen que ser remplazados por esos que puse al principio del post.

https://github.com/Zentyal/zentyal/blob/master/main/firewall/ChangeLog
HEAD
   + Added menu icon
   + Set iaccept, faccept and oaccept chains instead of ACCEPT target
     to be able to analyse traffic using IPS
   + Add restartOnTemporaryStop attribute to firewall helper to
     indicate to core if firewall must be restart on temporary stop
     events

Es necesario sustituirlos en la ruta correcta tanto del firewall y el squid, tengo 2 servidores zentyal, y ya estan funcionando bien

cd /usr/share/perl5/EBox/

mv Firewall.pm Firewall.pm.bak
wget https://raw.github.com/Zentyal/zentyal/master/main/firewall/src/EBox/Firewall.pm

mv Squid.pm Squid.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid.pm

mv SquidFirewall.pm SquidFirewall.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/SquidFirewall.pm

cd /usr/share/perl5/EBox/Squid/

mv LogHelper.pm LogHelper.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/LogHelper.pm

cd /usr/share/perl5/EBox/Squid/Model

mv AccessRules.pm AccessRules.pm.bak

mv CategorizedLists.pm CategorizedLists.pm.bak

wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/Model/AccessRules.pm
wget https://raw.github.com/Zentyal/zentyal/master/main/squid/src/EBox/Squid/Model/CategorizedLists.pm

biyover · « **Reply #9 on:** August 01, 2013, 06:06:55 pm »

OK. Voy a probar de nuevo.

¿Hay que agregar el permiso de ejecucción (chmod +x)?

¿Una vez que los remplazo debo reiniciar?

Gracias por tu ayuda.

biyover · « **Reply #10 on:** August 01, 2013, 06:18:10 pm »

Err...

A esto me refiero:

Code: [Select]

Trace
Can't locate object method "STANDALONE_MODE" via package "EBox::UsersAndGroups" at /usr/share/perl5/EBox/Squid.pm line 1311.

biyover · « **Reply #11 on:** August 01, 2013, 06:49:36 pm »

Hoy hubo una actualización de zentyal-squid...

Decidí instalar esta y parece que, o arreglo el problema, o al instalar se "recargaron" los modulos... no sabría decir, pero se soluciono el problema.

Nuevamente, gracias por tu ayuda.

com_gunner · « **Reply #12 on:** August 01, 2013, 07:11:51 pm »

Olvide comentar que todo fue realizado desde el usuario Root

Cookies usage

Author Topic: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado] (Read 2332 times)

com_gunner

iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

com_gunner

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

com_gunner

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

com_gunner

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

com_gunner

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

biyover

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]

com_gunner

Re: iptables v1.4.12: Couldn't load target `iaccept'[Solucionado]