weird login problem after implementing IPTABLES
Clint M. Sand
Mon, 11 Nov 2002 14:07:14 -0600
On Mon, Nov 11, 2002 at 02:39:52PM -0500, Ben Russo wrote:
> On Mon, 2002-11-11 at 14:15, Clint M. Sand wrote:
> > Greetings.
> > I have a Redhat 7.1 box that acts as a main router/gateway for several
> > segments on my network. It is currently filtering on each interface
> > using ipchains. I would like to migrate these services to iptables to
> > take advantage of the ftp connection tracking module and other stateful
> > matching features.
> > I migrated my ruleset, hacked up the redhat init script to load my
> > script on boot and tried it out on the box. The script loads fine with
> > no errors, and all the clients on each segment work as expected, even
> > active ftp.
> > The problem is, once the script is loaded, even though network-wise
> > everything is fine, i can no longer login at the console on any tty!
> > (ctrl+alt+f2 for example) I enter my username, and hit enter and it just
> > goes into nevernever land. If i log out of the tty that i was in to
> > activate iptables, i'm also unable to log back in on that one either. I
> > have to kill the power to the box and boot single user and switch back
> > to ipchains to restore the box back to production.
> > I have a test box with very similar hardware which is also running rh
> > 7.1 and i'm not able to duplicate the problem on it. Both of these boxes
> > use redhats "up2date" and have all the latest security and bug patches
> > applied.
> > Anyone have any ideas on what might be causing this? I have posted all
> > my rules, my init script, dmesg and iptables version here:
> > http://neotrance.dyndns.org/~schwack/iptables/
> > ANY help would be GREATLY appreciated.
> > Thanks,
> > Clint
> What type of authentication methods are you using?
> Have you done anything to nsswitch or the pam.d config files?
> Did you touch the /etc/inittab file?
> What do you have in your .bash_profile and /etc/bashrc ?
I haven't touched bashrc, nsswitch, anything in /etc/pam.d nor inittab. Since i'm
also not the only admin, i did a diff on my test box of the defaults and
the ones in production to make sure. Nothing changed. I did make a small change to
roots .bash_profile to export a few additional env variables needed for
ADSM. I posted the changed file as well, incase i'm just blind and
something about that is incorrect. Edited .bash_profile: