Page 1 of 1

Errors after upgrading from 7.01 to 7.02

Posted: 08 May 2014, 06:44
by Bdzzld
Hi,

An upgrade from 7.01 to 7.02 yields the following errors in the logfile :
*ERROR* line:[635]
Command:[/sbin/iptables -v -A LOGDROPOUT -p tcp --syn -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *TCP_OUT Blocked* ']
Error:[iptables v1.2.11: Unknown arg `--log-uid']
You should check through the main output carefully


*ERROR* line:[637]
Command:[/sbin/iptables -v -A LOGDROPOUT -p udp -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *UDP_OUT Blocked* ']
Error:[iptables v1.2.11: Unknown arg `--log-uid']
You should check through the main output carefully


*ERROR* line:[639]
Command:[/sbin/iptables -v -A LOGDROPOUT -p icmp -m limit --limit 30/m --limit-burst 5 -j LOG --log-uid --log-prefix 'Firewall: *ICMP_OUT Blocked* ']
Error:[iptables v1.2.11: Unknown arg `--log-uid']
You should check through the main output carefully
Please note: This is a server running CentOS 4.x.
Please note 2: The scripts still seem to work regardless.

Re: Errors after upgrading from 7.01 to 7.02

Posted: 08 May 2014, 11:42
by ForumAdmin
We cannot guarantee backwards compatibility with obsolete OS's. However, I'll see if we can put in a workaround in the next version for this issue.

Re: Errors after upgrading from 7.01 to 7.02

Posted: 09 May 2014, 09:40
by ForumAdmin
We've added a new option DROP_UID_LOGGING in v7.03 which you can now disable in csf.conf which stops csf trying to use that functionality in older OS's:
http://blog.configserver.com/

Re: Errors after upgrading from 7.01 to 7.02

Posted: 10 May 2014, 11:32
by Bdzzld
I've changed the setting of drop_uid_logging from 1 to 0, restarted the firewall and the errors stopped showing up. Thanks!