Mason Error

[Ralph Sanchez]

Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget). Just wandering what's wrong here. Here's the terminal
output...

***@FBI:~$ sudo mason
Loading options from /etc/masonrc...Check vars...ipchains was not
found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
ipfwadm was not found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
Editor default of /usr/bin/vi taken.
Load IPs, networks and nameservers...Done.
This kernel does not support ipchains, ipfwadm or iptables!
---- Mason firewall builder for Linux ----
---- see http://www.pobox.com/~wstearns/mason/ for more info. ----
---- William Stearns <***@pobox.com> ----
(This is release 1.0.0-11 - 2008-06-27 )


Also, this is my first time setting up a firewall on Debian, so if
there is a better package that's both powerful and user friendly, a
nudge towardsit would be a greatly appreciated thing

[Pascal Hambourg]

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget).

Linux 2.6 and above does not support ipchains and ipfwadm.
What does "iptables -L" report ?

[Rodary Jacques]

Post by Pascal Hambourg

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget).

Linux 2.6 and above does not support ipchains and ipfwadm.
What does "iptables -L" report ?

Sorry to tell you , it is a stupid answer. He tells you he can't run iptables and
you suggest to ask iptables to list the rules it uses! Now what (who?) is Mason
is perhaps the first question to ask.

[Adam D. Barratt]

Post by Pascal Hambourg

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or

the

Post by Pascal Hambourg

Post by Ralph Sanchez
third option...iptables is installed. Kernel version 3.16.?? (i
forget).

Linux 2.6 and above does not support ipchains and ipfwadm.
What does "iptables -L" report ?

Sorry to tell you , it is a stupid answer. He tells you he can't run
iptables

That's not what he said. There's also no reason to characterise other
poster's responses as "stupid".

and you suggest to ask iptables to list the rules it uses! Now what
(who?) is Mason is perhaps the first question to ask.

It's clearly "what", not "who", given that the original post included
the output of "sudo mason". A tiny amount of research would go a long
way:

***@jacala:~$ apt-cache search mason firewall
mason - Interactively creates a Linux packet filtering firewall

Regards,

Adam

[Rodary Jacques]

Post by Adam D. Barratt

Post by Pascal Hambourg

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or

the

Post by Pascal Hambourg

Post by Ralph Sanchez
third option...iptables is installed. Kernel version 3.16.?? (i
forget).

Linux 2.6 and above does not support ipchains and ipfwadm.
What does "iptables -L" report ?

Sorry to tell you , it is a stupid answer. He tells you he can't run
iptables

That's not what he said. There's also no reason to characterise other
poster's responses as "stupid".

and you suggest to ask iptables to list the rules it uses! Now what
(who?) is Mason is perhaps the first question to ask.

It's clearly "what", not "who", given that the original post included
the output of "sudo mason". A tiny amount of research would go a long
mason - Interactively creates a Linux packet filtering firewall
Regards,
Adam

Sorry too for the word "Stupid". It was late and I did what I don't like when others do it: I didn't
read the whole post!
Jacques

[Georgi Naplatanov]

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget). Just wandering what's wrong here. Here's the terminal
output...
Loading options from /etc/masonrc...Check vars...ipchains was not
found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
ipfwadm was not found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
Editor default of /usr/bin/vi taken.
Load IPs, networks and nameservers...Done.
This kernel does not support ipchains, ipfwadm or iptables!
---- Mason firewall builder for Linux ----
---- see http://www.pobox.com/~wstearns/mason/ for more info. ----
(This is release 1.0.0-11 - 2008-06-27 )
Also, this is my first time setting up a firewall on Debian, so if
there is a better package that's both powerful and user friendly, a
nudge towardsit would be a greatly appreciated thing

you may consider to use nftables. The package is not installed by default.

[Jonathan Plews]

Post by Ralph Sanchez
Also, this is my first time setting up a firewall on Debian, so
if there is a better package that's both powerful and user
friendly, a nudge towardsit would be a greatly appreciated
thing

try Shorewall, or for simple things 'ufw'

[Rodary Jacques]

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget). Just wandering what's wrong here. Here's the terminal
output...
Loading options from /etc/masonrc...Check vars...ipchains was not
found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
ipfwadm was not found in your path or in /sbin. You may need to copy it
or add an explicit path to it in the following commands.
Editor default of /usr/bin/vi taken.
Load IPs, networks and nameservers...Done.
This kernel does not support ipchains, ipfwadm or iptables!
---- Mason firewall builder for Linux ----
---- see http://www.pobox.com/~wstearns/mason/ for more info. ----
(This is release 1.0.0-11 - 2008-06-27 )
Also, this is my first time setting up a firewall on Debian, so if
there is a better package that's both powerful and user friendly, a
nudge towardsit would be a greatly appreciated thing

I have been using iptables since 2004 (at least). It is difficult at first but http://netfilter.org
/documentation you should do it. I am not very good and I did!

[Gerdriaan Mulder]

Hi Ralph,

Post by Ralph Sanchez
Mason is telling me my kernel doesnt support IPtable, Ipchains or the
third option...iptables is installed. Kernel version 3.16.?? (i
forget). Just wandering what's wrong here. Here's the terminal
output...
[snip]
(This is release 1.0.0-11 - 2008-06-27 )

I suppose that using Mason is an option you can use, but it hasn't been
updated since 2012[0]. The version you're using is from 2008, that's 8
years ago! Given that the 'latest' version is from 2012, I'm not sure
whether this is a good program to start with. It even mentions ipchains,
which was deprecated around kernel version 2.4 (see this message on this
list from 1999[3]).

As recommended earlier, Shorewall or ufw should be good options to start
with. Both are still[1] maintained and updated regularly[2].

If you want to start with 'raw' IPtables, have a look at this Arch Linux
wiki page[4], which extensively explains how to build a stateful firewall
using IPtables.

Take care :)

[0] https://packages.qa.debian.org/m/mason.html
[1] https://packages.qa.debian.org/s/shorewall.html
[2] https://packages.qa.debian.org/u/ufw.html
[3] https://lists.debian.org/debian-firewall/1999/12/msg00022.html
[4] https://wiki.archlinux.org/index.php/Simple_stateful_firewall

[Andrew Deck]

Also worth noting that you can use ferm to generate IPTables rules.