firewall

[Jim Douglas]

  I have enabled the 'root' account...but now I get this error,

Copying /root/emma.fw -> 127.0.0.1:/etc 
/etc/ssh/ssh_config: line 52: Bad configuration option: PermitRootLogin 
/etc/ssh/ssh_config: line 53: Bad configuration option: AllowUsers 
/etc/ssh/ssh_config: terminating, 2 bad configuration options 
SSH session terminated, exit status: -1 
Error: Terminating install sequence 

When I look at the documentation, I don't see what's wrong with those two lines

...this is my ssh_config,


# This is the ssh client system-wide configuration file.  See
# ssh_config(5) for more information.  This file provides defaults for
# users, and the values can be changed in per-user configuration files
# or on the command line.

# Configuration data is parsed as follows:
#  1. command line options
#  2. user-specific file
#  3. system-wide file
# Any configuration value is only changed the first time it is set.
# Thus, host-specific definitions should be at the beginning of the
# configuration file, and defaults at the end.

# Site-wide defaults for some commonly used options.  For a comprehensive
# list of available options, their meanings and defaults, please see the
# ssh_config(5) man page.

Host *
#   ForwardAgent no
#   ForwardX11 no
#   ForwardX11Trusted yes
#   RhostsRSAAuthentication no
#   RSAAuthentication yes
#   PasswordAuthentication yes
#   HostbasedAuthentication no
#   GSSAPIAuthentication no
#   GSSAPIDelegateCredentials no
#   GSSAPIKeyExchange no
#   GSSAPITrustDNS no
#   BatchMode no
#   CheckHostIP yes
#   AddressFamily any
#   ConnectTimeout 0
#   StrictHostKeyChecking ask
#   IdentityFile ~/.ssh/identity
#   IdentityFile ~/.ssh/id_rsa
#   IdentityFile ~/.ssh/id_dsa
#   Port 22
#   Protocol 2,1
#   Cipher 3des
#   Ciphers aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,arcfour,aes192-cbc,aes256-cbc
#   MACs hmac-md5,hmac-sha1,umac-64 at openssh.com,hmac-ripemd160
#   EscapeChar ~
#   Tunnel no
#   TunnelDevice any:any
#   PermitLocalCommand no
    SendEnv LANG LC_*
    HashKnownHosts yes
    GSSAPIAuthentication yes
    GSSAPIDelegateCredentials no
    PermitRootLogin yes
    AllowUsers root

I also tried     AllowUsers root root at localhost.com



Jim


> Date: Fri, 4 Jul 2008 19:00:37 +0200
> From: fred.schaer at free.fr
> To: kubuntu-users at lists.ubuntu.com
> Subject: Re: firewall
> 
> firewall builder is trying to setup the firewall using *root* account :
> it connects via ssh to 127.0.0.1 for you, so you'll probably want to
> check that root account has a password (and enter this one when asked),
> and that root is allowed to connect via ssh on 127.0.0.1. I don't think
> fwbuiled is able to use sudo (and that's a pity) when installing the
> firewall, so don't try with your standard user account (I guess this is
> the cause of the permission denied error)
> 
> Personnally, to secure a bit the ssh thing, I have this line in
> /etc/ssh/sshd_config :
> 
> PermitRootLogin yes
> AllowUsers me root at localhost
> 
> Hope that helps...
> Cheers
> 
> Jim Douglas a écrit :
> > I am trying to install FirewallBuilder on Kubuntu and keep getting
> > this error,
> >
> > Copying /home/sa/emma.fw -> 192.168.1.1:/etc
> > SSH session terminated, exit status: -1
> > Error: Terminating install sequence
> >
> > I tried this,
> >
> > http://sourceforge.net/forum/message.php?msg_id=4586134
> >
> > ...but now I get this error,
> >
> > Copying /home/sa/emma.fw -> 127.0.0.1:/etc
> > *** Fatal error :
> > --**--**-- Done bash: /etc/emma.fw: Permission denied
> > Error: Terminating install sequence
> >
> >
> > ....any suggestions?
> >
> > Perhaps someone could suggest a similar, easy to use firewall??  I'ts
> > a simple network...my Kubuntu server/router allows internet access to
> > one other machine...
> >
> >
> > Thank you,
> > Jim
> >
> >
> >
> > ------------------------------------------------------------------------
> > The i’m Talkaton. Can 30-days of conversation change the world? Find
> > out now.
> > <http://www.imtalkathon.com/?source=EML_WLH_Talkathon_ChangeWorld>
> 
> -- 
> kubuntu-users mailing list
> kubuntu-users at lists.ubuntu.com
> Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/kubuntu-users

_________________________________________________________________
Making the world a better place one message at a time.
http://www.imtalkathon.com/?source=EML_WLH_Talkathon_BetterPlace
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/kubuntu-users/attachments/20080705/196d97f2/attachment.html>