Fair enough :-) Better secure by default than explicitly allowing everything. I should be able to console into the box... Else I will just mount the CF card with my OSX and edit the gui.network.conf file. Thanks for the precise steps to recover. It should be very easy.
Cheers ----- Original Message ---- From: Lonnie Abelbeck <[email protected]> To: AstLinux Users Mailing List <[email protected]> Sent: Sun, June 6, 2010 3:19:42 PM Subject: Re: [Astlinux-users] Weird logs On Jun 6, 2010, at 2:44 PM, Ionel Chila wrote: > Thanks much. And now call me stupid :-) > Enabled the firewall and the plug in, and lock myself outta of the box. > Is the default firewall to block everything? How in the heck I am going back > in via https or ssh? > I just checked the plugin assuming that no rule set will apply unless I > explicitly configure it... > Any ideas :-) > > Thanks By default, the firewall blocks all "non-established" inbound traffic, all outbound traffic is allowed. If you have both external and internal (LAN) interfaces, simply manage the box on the LAN side. If you only have an external interface, but have a serial console port, login and type "arno-iptables-firewall stop" and you will have full access via the external interface. Use the Network Tab -> {Firewall Configuration} to add rules, Action: "Pass EXT->Local" for your management access. If you only have an external interface, and no serial console port... mount the CF ext2 partition on another Linux box then edit the rc.conf.d/gui.network.conf text file and change the line... FWVERS="arno" to FWVERS="" then when booted the firewall will be disabled. Follow the steps above to add the appropriate rules and re-enable the firewall. Else, rebuild your CF card, and start over. Lonnie ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Astlinux-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to [email protected]. ------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo _______________________________________________ Astlinux-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/astlinux-users Donations to support AstLinux are graciously accepted via PayPal to [email protected].
