Results 1 to 10 of 10
-
03-08-2006, 06:12 PM #1Disabled
- Join Date
- Jan 2006
- Posts
- 919
ping: icmp open socket: Operation not permitted
ping: icmp open socket: Operation not permitted
I get that when using a network cgi tool I installed on my web page. I'm guessing APF firewall conflict?
How can I correct this?
-
03-09-2006, 01:38 AM #2Disabled
- Join Date
- Apr 2005
- Location
- Cochin
- Posts
- 2,452
try this..should work
http://wiki.tuxedo-es.org/Lowering_p...ities_tutorial
-
03-09-2006, 01:47 AM #3Disabled
- Join Date
- Jan 2006
- Posts
- 919
That didn't work. Don't hav vsecurity installed and do not wish for it to conflict with everything else (Security)
-
03-09-2006, 04:10 AM #4Web Hosting Master
- Join Date
- Jun 2000
- Location
- Washington, USA
- Posts
- 5,990
Sounds like a firewall policy is blocking the ICMP packet.
-
03-09-2006, 05:16 AM #5Junior Guru
- Join Date
- Mar 2006
- Posts
- 222
Disable APF firewall on the server if its installed and then try if it works.
$ service apf stop
Make sure that there are no rules in Iptables using
$ iptables -L
Regards,
Rose
rose@instacarma.com
-
03-09-2006, 11:14 AM #6Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 703
No idea what kind of server you have but *good* setups prevent users from using ping.
You need to set the suid bit to get around your problem, it has nothing to do with the firewall imho.ReflexNetworks means Happy Clients!
-
03-09-2006, 12:19 PM #7Web Hosting Master
- Join Date
- Apr 2003
- Location
- UK
- Posts
- 2,569
what andren said - Operation not permitted is an OS thing, not a firewall problem (which would probably just drop the packet and put something in syslog)
Chances are your machine doesnt allow non-root users to open icmp sockets
-
03-09-2006, 12:42 PM #8Disabled
- Join Date
- Jan 2006
- Posts
- 919
Do you know of a work around? For example, i want to add some tools like the ones found on dnsstuff.com
-
03-09-2006, 01:11 PM #9Web Hosting Master
- Join Date
- Apr 2003
- Location
- UK
- Posts
- 2,569
run:
ls -l /bin/ping
-
03-10-2006, 12:31 PM #10Web Hosting Master
- Join Date
- Jun 2005
- Posts
- 703
Originally Posted by UnrealSilence
You can add tools like dnsstuff - but I wouldn't recommend it on a shared server.ReflexNetworks means Happy Clients!