New Package: Arno's iptables firewall scripts

I made a PKGBUILD for Arno IPTABLES firewall script. This script has protected my home network for long time and I realized that some other Archers would also like to use it. Also, syslog-ng.conf example is included to get iptable logs into their own log file.
Script has clear, easy and well commented configuration file. Nice list of
Features
Very secure stateful filtering firewall
Both kernel 2.4 & 2.6 support
It can be used for both single- and multi(eg. dual)-homed boxes
Masquerading (NAT) and SNAT support
Multiple external (internet) interfaces
Support multiroute NAT & SNAT (load balancing over multiple (internet) interfaces)
Port forwarding (NAT)
Support MAC address filtering
Support for DSL/ADSL modems
Support for PPPoE, PPPoA and bridging modem setups
Support for static and ISP assigned (DHCP) IPs
Support for (transparent) proxies
Full support for DMZ's and DMZ-2-LAN forwarding. You can also use it to isolate your eg. wireless LAN.
(Nmap)(stealth) portscan detection
Protection against SYN-flooding (DoS attacks)
Protection against ICMP-flooding (DoS attacks)
Extensive user-definable logging with rate limiting to prevent log flooding
Includes options to optimize your throughput
User definable open ports, closed ports, trusted hosts, blocked hosts etc.
Log & protection options are both highly customizable
Support for custom iptables rules in a seperate file
It can be used with chkconfig runlevel system (eg. RedHat/Fedora)
Main focus on TCP/UDP/ICMP but additional support for *ALL* IP protocols
It works with Freeswan IPSEC (VPN) & SSH Sentinel (http://www.freeswan.org) (+virtual IP's)
It works with PoPTop PPTP (http://www.poptop.org)
It works with UPnP
DRDOS protection/detection (experimental)
It's easy to configure
And much more...
(edit) PKGBUILD is in the AUR.
This is my first package ever so tell me what to fix. I will put this to AUR if supported and this really works.

1c3d0g wrote:
Is this similar to QuickTables?
http://qtables.radom.org/
Arno's iptables has a config file that will be edited as needed and script reads the config file everytime it is executed.
I can put this pkgbuild to AUR. The init script is not Arch like. I decided to use Arno's script as is in /etc/rc.d/ because I want to see what happens. I could do a Arch type of init script that executes the firewall script arch way.
What do you think?

Similar Messages

Arno-iptables-firewall and CUPS

Hello everyone.
I'm having a problem with my firewall and CUPS. The thing is, when I try to print when the firewall is active the programs (kword, kcontrol, etc) can't contact cups daemon. But when the firewall is stopped I can print normally. The problem is obviously something with the firewall configuration.
So, the question is, does anyone know how should I configure the firewall (Arno's iptables firewall) in order to solve this problem?. I thought about opening the cups port (631) but this wouldn't be the best solution. I don't want to open a port that shouldn't be open.
The weird thing is that I can access cups thru localhost:631 using konqueror but incredibly slowly. I don't know why the firewall is blocking cups.
I almost forget. Before you ask the printer is connected direcly to my computer. Is not a network printer. I have the needed module loaded (usblp) and the cups server is running.
Thanks in advance,
Gonza
Last edited by Gonzakpo (2008-06-20 20:16:20)

Hello.
I tried the command iptables -F but nothing. The cups server is still unreacheable by kcontrol.
After running arno's firewall, the iptables -vL output is:
Chain INPUT (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo any anywhere anywhere
15 2568 ACCEPT all -- any any anywhere anywhere state ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere state RELATED tcp dpts:1024:65535
0 0 ACCEPT udp -- any any anywhere anywhere state RELATED udp dpts:1024:65535
0 0 ACCEPT icmp -- any any anywhere anywhere state RELATED
8 1515 HOST_BLOCK all -- any any anywhere anywhere
8 1515 SPOOF_CHK all -- any any anywhere anywhere
8 1515 VALID_CHK all -- eth0 any anywhere anywhere
8 1515 EXT_INPUT_CHAIN !icmp -- eth0 any anywhere anywhere state NEW
0 0 EXT_INPUT_CHAIN icmp -- eth0 any anywhere anywhere state NEW limit: avg 60/sec burst 100
0 0 EXT_ICMP_FLOOD_CHAIN icmp -- eth0 any anywhere anywhere state NEW
0 0 LOG all -- any any anywhere anywhere limit: avg 1/sec burst 5 LOG level info prefix `Dropped INPUT packet: '
0 0 DROP all -- any any anywhere anywhere
Chain FORWARD (policy DROP 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination
0 0 ACCEPT all -- lo any anywhere anywhere
0 0 TCPMSS tcp -- any eth0 anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
0 0 ACCEPT all -- any any anywhere anywhere state ESTABLISHED
0 0 ACCEPT tcp -- any any anywhere anywhere state RELATED tcp dpts:1024:65535
0 0 ACCEPT udp -- any any anywhere anywhere state RELATED udp dpts:1024:65535
0 0 ACCEPT icmp -- any any anywhere anywhere state RELATED
0 0 HOST_BLOCK all -- any any anywhere anywhere
0 0 UPNP_FORWARD all -- eth0 !eth0 anywhere anywhere
0 0 SPOOF_CHK all -- any any anywhere anywhere
0 0 VALID_CHK all -- eth0 any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere limit: avg 1/min burst 3 LOG level info prefix `Dropped FORWARD packet: '
0 0 DROP all -- any any anywhere anywhere
Chain OUTPUT (policy ACCEPT 8 packets, 552 bytes)
pkts bytes target prot opt in out source destination
0 0 TCPMSS tcp -- any eth0 anywhere anywhere tcp flags:SYN,RST/SYN TCPMSS clamp to PMTU
7 340 ACCEPT all -- any any anywhere anywhere state ESTABLISHED
8 552 HOST_BLOCK all -- any any anywhere anywhere
0 0 LOG all -f any any anywhere anywhere limit: avg 3/min burst 5 LOG level info prefix `FRAGMENTED PACKET (OUT): '
0 0 DROP all -f any any anywhere anywhere
8 552 EXT_OUTPUT_CHAIN all -- any eth0 anywhere anywhere
Chain DMZ_INET_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain DMZ_INPUT_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain DMZ_LAN_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain EXT_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain EXT_ICMP_FLOOD_CHAIN (1 references)
pkts bytes target prot opt in out source destination
0 0 LOG icmp -- any any anywhere anywhere icmp destination-unreachable limit: avg 12/hour burst 1 LOG level info prefix `ICMP-unreachable flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp destination-unreachable
0 0 LOG icmp -- any any anywhere anywhere icmp time-exceeded limit: avg 12/hour burst 1 LOG level info prefix `ICMP-time-exceeded flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp time-exceeded
0 0 LOG icmp -- any any anywhere anywhere icmp parameter-problem limit: avg 12/hour burst 1 LOG level info prefix `ICMP-param.-problem flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp parameter-problem
0 0 LOG icmp -- any any anywhere anywhere icmp echo-request limit: avg 12/hour burst 1 LOG level info prefix `ICMP-request(ping) flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp echo-request
0 0 LOG icmp -- any any anywhere anywhere icmp echo-reply limit: avg 12/hour burst 1 LOG level info prefix `ICMP-reply(pong) flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp echo-reply
0 0 LOG icmp -- any any anywhere anywhere icmp source-quench limit: avg 12/hour burst 1 LOG level info prefix `ICMP-source-quench flood: '
0 0 DROP icmp -- any any anywhere anywhere icmp source-quench
0 0 LOG icmp -- any any anywhere anywhere limit: avg 12/hour burst 1 LOG level info prefix `ICMP(other) flood: '
0 0 DROP icmp -- any any anywhere anywhere
Chain EXT_INPUT_CHAIN (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG tcp -- any any anywhere anywhere tcp dpt:0 limit: avg 6/hour burst 1 LOG level info prefix `TCP port 0 OS fingerprint: '
0 0 LOG udp -- any any anywhere anywhere udp dpt:0 limit: avg 6/hour burst 1 LOG level info prefix `UDP port 0 OS fingerprint: '
0 0 DROP tcp -- any any anywhere anywhere tcp dpt:0
0 0 DROP udp -- any any anywhere anywhere udp dpt:0
0 0 LOG tcp -- any any anywhere anywhere tcp spt:0 limit: avg 6/hour burst 5 LOG level info prefix `TCP source port 0: '
0 0 LOG udp -- any any anywhere anywhere udp spt:0 limit: avg 6/hour burst 5 LOG level info prefix `UDP source port 0: '
0 0 DROP tcp -- any any anywhere anywhere tcp spt:0
0 0 DROP udp -- any any anywhere anywhere udp spt:0
4 1314 ACCEPT udp -- any any anywhere anywhere udp spt:bootps dpt:bootpc
0 0 ACCEPT tcp -- + any anywhere anywhere tcp dpt:4872
0 0 ACCEPT udp -- + any anywhere anywhere udp dpt:4875
0 0 LOG icmp -- any any anywhere anywhere icmp echo-request limit: avg 3/min burst 1 LOG level info prefix `ICMP-request: '
0 0 LOG icmp -- any any anywhere anywhere icmp destination-unreachable limit: avg 12/hour burst 1 LOG level info prefix `ICMP-unreachable: '
0 0 LOG icmp -- any any anywhere anywhere icmp time-exceeded limit: avg 12/hour burst 1 LOG level info prefix `ICMP-time-exceeded: '
0 0 LOG icmp -- any any anywhere anywhere icmp parameter-problem limit: avg 12/hour burst 1 LOG level info prefix `ICMP-param.-problem: '
0 0 DROP icmp -- any any anywhere anywhere icmp destination-unreachable
0 0 DROP icmp -- any any anywhere anywhere icmp time-exceeded
0 0 DROP icmp -- any any anywhere anywhere icmp parameter-problem
0 0 DROP icmp -- any any anywhere anywhere icmp echo-request
0 0 DROP icmp -- any any anywhere anywhere icmp echo-reply
0 0 LOG tcp -- any any anywhere anywhere tcp dpts:1024:65535 flags:!FIN,SYN,RST,ACK/SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth scan (UNPRIV)?: '
0 0 LOG tcp -- any any anywhere anywhere tcp dpts:0:1023 flags:!FIN,SYN,RST,ACK/SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth scan (PRIV)?: '
0 0 DROP tcp -- any any anywhere anywhere tcp flags:!FIN,SYN,RST,ACK/SYN
0 0 LOG tcp -- any any anywhere anywhere tcp dpts:0:1023 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (PRIV): '
0 0 LOG udp -- any any anywhere anywhere udp dpts:0:1023 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (PRIV): '
2 96 LOG tcp -- any any anywhere anywhere tcp dpts:1024:65535 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (UNPRIV): '
1 57 LOG udp -- any any anywhere anywhere udp dpts:1024:65535 limit: avg 6/min burst 2 LOG level info prefix `Connection attempt (UNPRIV): '
3 144 DROP tcp -- any any anywhere anywhere
1 57 DROP udp -- any any anywhere anywhere
0 0 DROP icmp -- any any anywhere anywhere
0 0 LOG all -- any any anywhere anywhere limit: avg 1/min burst 5 LOG level info prefix `Other-IP connection attempt: '
0 0 DROP all -- any any anywhere anywhere
Chain EXT_OUTPUT_CHAIN (1 references)
pkts bytes target prot opt in out source destination
Chain HOST_BLOCK (3 references)
pkts bytes target prot opt in out source destination
Chain INET_DMZ_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain LAN_INET_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain LAN_INPUT_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain MAC_FILTER (0 references)
pkts bytes target prot opt in out source destination
Chain POST_FORWARD_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain POST_INPUT_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain POST_OUTPUT_CHAIN (0 references)
pkts bytes target prot opt in out source destination
Chain RESERVED_NET_CHK (0 references)
pkts bytes target prot opt in out source destination
0 0 LOG all -- any any 10.0.0.0/8 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class A address: '
0 0 LOG all -- any any 172.16.0.0/12 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class B address: '
0 0 LOG all -- any any 192.168.0.0/16 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class C address: '
0 0 LOG all -- any any 169.254.0.0/16 anywhere limit: avg 1/min burst 1 LOG level info prefix `Class M$ address: '
0 0 DROP all -- any any 10.0.0.0/8 anywhere
0 0 DROP all -- any any 172.16.0.0/12 anywhere
0 0 DROP all -- any any 192.168.0.0/16 anywhere
0 0 DROP all -- any any 169.254.0.0/16 anywhere
Chain SPOOF_CHK (2 references)
pkts bytes target prot opt in out source destination
8 1515 RETURN all -- any any anywhere anywhere
Chain UPNP_FORWARD (1 references)
pkts bytes target prot opt in out source destination
Chain VALID_CHK (2 references)
pkts bytes target prot opt in out source destination
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS scan: '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS-PSH scan: '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG limit: avg 3/min burst 5 LOG level info prefix `Stealth XMAS-ALL scan: '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN limit: avg 3/min burst 5 LOG level info prefix `Stealth FIN scan: '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN,RST limit: avg 3/min burst 5 LOG level info prefix `Stealth SYN/RST scan: '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN limit: avg 3/min burst 5 LOG level info prefix `Stealth SYN/FIN scan(?): '
0 0 LOG tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE limit: avg 3/min burst 5 LOG level info prefix `Stealth Null scan: '
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,PSH,URG
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,ACK,URG
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN,SYN,RST,PSH,ACK,URG
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/FIN
0 0 DROP tcp -- any any anywhere anywhere tcp flags:SYN,RST/SYN,RST
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN/FIN,SYN
0 0 DROP tcp -- any any anywhere anywhere tcp flags:FIN,SYN,RST,PSH,ACK,URG/NONE
0 0 LOG tcp -- any any anywhere anywhere tcp option=64 limit: avg 3/min burst 1 LOG level info prefix `Bad TCP flag(64): '
0 0 LOG tcp -- any any anywhere anywhere tcp option=128 limit: avg 3/min burst 1 LOG level info prefix `Bad TCP flag(128): '
0 0 DROP tcp -- any any anywhere anywhere tcp option=64
0 0 DROP tcp -- any any anywhere anywhere tcp option=128
0 0 DROP all -- any any anywhere anywhere state INVALID
0 0 LOG all -f any any anywhere anywhere limit: avg 3/min burst 1 LOG level warning prefix `Fragmented packet: '
0 0 DROP all -f any any anywhere anywhere

INSTALL ARCHLINUX (new installation system by Arch Install Script)

After many failed installations, I've resolved and written a mini-guide how to do an easy installation of Arch Linux. I've added it to Manualinux on point 44b.
However, I report it below, maybe could be useful to someone:
44b)INSTALL ARCHLINUX (new installation system by Arch Install Scripts)
Choice if install ArchLinux 32 or 64 bit, following type these commands:
-loadkeys it (choice your language)
-Use cfdisk to create your partitions
cfdisk /dev/sda o /dev/sdx
-Format Partitions Using mkfs and Create Swap
mkfs.reiserfs /dev/sda1
or
mkfs.ext4 /dev/sda1
mkswap /dev/sda2
-Reboot system with installation cd
reboot
-Mount Partition:
cd /
mount /dev/sda1 /mnt
-Make and mount swap partition:
swapon /dev/sda2
-Active wireless or ethernet connection
wifi-menu (choice your wireless connection, I suggest your to disable temporarely your password on router-modem)
dhcpcd (attach ethernet wire)
-Install Base System:
pacstrap /mnt base base-devel
-Install Grub2:
pacstrap /mnt grub-bios
-Install Syslinux:
pacstrap /mnt syslinux
-Generate fstab:
genfstab -p /mnt >> /mnt/etc/fstab
-Login to arch-chroot:
arch-chroot /mnt
-Install package wifi-select
ip link set wlan0 up
pacman -S wifi-select
-Configure Network:
vi /etc/rc.conf
add interface="eth0"
add interface="wlan0"
-Edit Hostname:
vi /etc/hostname
and add desired hostname
-Set Timezone:
ln -s /usr/share/zoneinfo/Europe/Rome /etc/localtime
-Generate Locale:
vi /etc/locale.gen
enable:
it_IT.UTF-8 UTF-8
it_IT ISO-8859-1
it_IT@euro ISO-8859-15
-Execute locale-gen on shell:
locale-gen
-Configure Kernel:
mkinitcpio -p linux
-Configure Bootloader:
grub-mkconfig -o /boot/grub/grub.cfg
grub-install --recheck /dev/sda
-Set root password:
passwd root
-Exit from arch-chroot:
exit
-Unmount Partition:
umount /mnt
-Reboot your system
reboot
-If ethernet wire is attached:
dhcpcd
-If you want configure wireless network:
ip link set wlan0 up
wifi-select (if you have not password on router-modem)
pacman -Syu kde wicd wicd-gtk (insert kdm wicd in /etc/rc.conf)
reboot system and configure your router wireless/wifi connection
Reinsert wireless password on your router/modem
Last edited by Pantera (2012-09-17 20:14:31)

You don't need to install both grub and syslinux. You configure grub in "Configure Bootloader" so this step is unnecessary:
-Install Syslinux:
pacstrap /mnt syslinux
This next step doesn't configure the kernel, it creates an initramfs (see the Beginners' Guide):
-Configure Kernel:
mkinitcpio -p linux
Last edited by 2ManyDogs (2012-09-17 20:28:58)

Searching for and Creating New Packages -- READ THIS FIRST

This is here simply for historical reasons nowadays, to serve as a reminder to all why the AUR is such a great thing. The original text follows:
===================================
It has occurred to me that there is alot of reinventing the wheel going on around here. There are copies of virtually the same PKGBUILD made by three or four different people that failed to check if it already existed floating around.
INSTRUCTIONS FOR FINDING OUT IF A PACKAGE ALREADY EXISTS:
1. Check to see if it's in an official repo: http://www.archlinux.org/packages.php (or use pacman -Ss pkgname)
2.. Check to see if it's in an unofficial repo or tur: http://wiki2.archlinux.org/index.php/Un … positories and http://xentac.net/~tur/repos.php
3. Check if it has been posted in this forum before: http://bbs.archlinux.org/search.php in that dialogue, I suggest that you select "New and Requested Packages" from the Forum: menu, this way you get only the results you're interested in.
4. Check in incoming (soon to be deprecated, and already a mess, but you may just find it there...) ftp://ftp.archlinux.org/incoming
5. If you didn't find it in any of these places, then it has more than likely not been packaged before, and you can go ahead and follow the instructions at http://archlinux.org/docs/en/guide/inst … e.html#abs to package it, then share it on the forums.
Thank you for your cooperation, and happy packaging!

There has been some confusion going around when contributing packages. A lot of changes are going on now with the new TUR system, the AUR. The new AUR will have a nice systematic way of submitting packages. But currently, there are two ways to submit packages.
1) Post a PKGBUILD and build scripts of the New and Requested Packages category of the forum. TURs and developers will look through these PKGBUILDs and pick up any that look interesting to them, and put them in a repository.
2) Send a PKGBUILD to the tur-mailing list (http://www.archlinux.org/mailman/listinfo/tur-users/). All the TURs will definately see your PKGBUILD if you post it on the mailing list. Many TURs prefer new packages on the list, because they will definately see it. Some TURs don't look at the forum as much as others.
To be on the safe side, you can do both.
Here are some dont's:
1) DONT submit packages to incoming. No one looks at incoming. Incoming is dead. Incoming is from the old package submittal submission system, which is now being replaced with the AUR.
2) DONT submit packages without PKGBUILD scripts. No one wants a package from an untrusted source that could contain malicious code.
3) DONT forget to include all files in your submission: .install files, PKGBUILDs, startup scripts, etc.
4) DONT put patchfiles up on the forum: the forum will mess up the formatting of the patch. Upload the patch somewhere and post a link.
5) DONT use namcap as your only resource for dependencies. Check ./configure --help, README, INSTALL, and the website of the program. Namcap is a guide, don't use it as truth.
6) DONT use the license field yet. A standard hasn't been decided of what to put there yet, so don't use it yet.
7) DONT add a maintainer comment to your PKGBUILD unless you have a repository and you maintain it. Put a contributor comment instead.
There we go: If everyone reads these, that will cut down on 90% of the submissions we have to fix :twisted: :evil:

Lenovo System Update shows no new packages - T430s/8.1

Dear Community,
T430s, Win 8.1 Enterprise here. I installed Lenovo System Update 5.03 and scanned for new packages. However, it states that there are no new things for me. I went to Lenovo’s support website and found numerous drivers definetly newer then my installed one. Any ideas where the problem is? (I don’t want to download and install all of them individually…)
Link to image
Moderator note: images totalling more than 50k converted to links per forum rules: Lenovo Community Participation Rules

Dear Community,
T430s, Win 8.1 Enterprise here. I installed Lenovo System Update 5.03 and scanned for new packages. However, it states that there are no new things for me. I went to Lenovo’s support website and found numerous drivers definetly newer then my installed one. Any ideas where the problem is? (I don’t want to download and install all of them individually…)
Link to image
Moderator note: images totalling more than 50k converted to links per forum rules: Lenovo Community Participation Rules

How to create a new Oracle OSB project automaticaly with script without IDE

Hello,
I want to create automatically an "Oracle service bus project" and an "Oracle service bus configuration project" with scripts (ANT or Maven or ...) without using IDE, without using workshop or Eclipse. I want to create automatically (ANT or Maven) just a skeleton of an OSB project witch i can use after in workshop.
I want to create 1 "Oracle service bus configuration project" with many "Oracle service bus project" automatically (ANT or Maven or scripts) witch i can use after in workshop. How to create a new Oracle OSB project automaticaly with script without IDE ? How can i do this ?
I'm using Oracle service bus 10.3.1
Thank you for your help.

Thank you for your response,
I do not want to just create the services (proxy services and business services) but I want to create a template for 40 OSB project with the same scripts ANT/Maven.
Template="Oracle service bus configuration project" + "Oracle service bus project" + services of 40 OSB projects
The goal is that I have more than 40 projects to create and just the name of the projects that changes (when I say the name of the project ie the name of the OSB project, the name of proxy services and the name of business services ).
So I want to give my script (ANT/Maven) the name of 40 OSB project and the script must generate the skeleton of the 40 projects at once time and after generation of skeleton of the 40 project, I will import them in the workshop to add manually mapping and routing and other things that differs from one project to another.
So i want to generate automatically a skeletons of 40 OSB projects using a script (ANT / Maven) and I give to the script juste the names of the 40 projects.
I want to create a "Oracle service bus configuration project" and "Oracle service bus project" automatically of 40 OSB projects (ANT or Maven or scripts) witch i can use after in workshop.
I want to create one 'template' of all 40 projects in the same time, with the same directory structure (Transforlation, Business services, proxy services, WSDL .....) and all 40 project have the same transport, just the names of projects and services witch changes and i can give to the script all names of projects and services and i can give also all WSDL.
Regards,
Tarik

Creating a new package for a new project

how do I create a new package? I have an existing piece of code that was written using a pacakge that looks like a file directory structure. I have found most of thoes file. how do I recreate that package?

can I use a package I create? I have seen in the wizard for JDeveloper 9i. the packages there dont match the packages I am trying to reproduce.
I have taken over an application that contains a package that needs to recreated.

Which Privilege needed to create a new Package and Stored procedure usage(in HANA studio)

Hello Friends,
In my company I have access to SYSTEM user(i.e. having all required permissions) ,I wish to create new " USER(s) " for trainees thus which "System privilege" or other privileges is/are needed for the following requirements -
1>To allow the "new user" to create new Packages(and the columnar views inside it and be able to execute,edit them)
2>Create Procedures inside their schema and execute using "call " command
I have given the following privileges as suggested by an ebook (SAP certified author).
The SELECT privilege on the _SYS_BI schema
The SELECT privilege on the _SYS_REPO schema
The EXECUTE privilege on the REPOSITORY_REST procedure
According to my knowledge "create schema" should be given for new schema creation.For my other requirements which all privileges are needed.
Thanx.

In addition to Krishna if you don't want to expose all the package to the trainee, then create a new role keeping everything same as default MODELING role (open it and have a look) but in "PACKAGE PRIVILEGES" add only those package that you want to expose to the end users.
Regards
Kumar

Creation of new package and request number.

Hi frndz,
Hope everyone are doing fine. Coming to my query, its quite simple for you guys.
But me being new to BW, I would like to know how to create a new package and request number.
And I have a task to create a new IS and DS also. So do i need to create these new package and request number separately or at the time of creation of IS and DS.
Please give me clear idea.
Thanking you.
regards
Dubbu

Hi Vinay,
I hope you are speaking about Package to collect Objects and collecting them in Transport Requests.
Usually you use the same packages for all the objects. According to requirement if you want to create the Package you can goto SE80--> There you can create a New Package. Give Transport layer as SAP. and Activate it. Then you collect the package in a Transport Request. You can create the request by the create button on the screen when it ask for Transport Request.
While creating the Infosource or other objects you mention the package which you have created while saving and you can use the existing TR or new TR for collecting them.
You can use RSA1---> Transport Connection to collect the objects easily to TR's
Regards
Karthik

How to insert the new field to standard scheduling agreement script form.

Hi Gurus,
how to insert the new fields to standad sheduling agreement script form. its a need for me, i want to display the AEDAT field in scheduling agreement form ,
The below one is my requirement,
ex:- Itu2019s requested the change of Scheduling Agreement printout. Itu2019s requested for this type of document, the insertion, into the field u201CData Emissionu201D into the print, of the document last modify date instead of the document creation date. (This change will be done only for position change into the Scheduling Agreement). No change into the PO.
Change SAPSCRIPT printout. Introduction, into the Scheduling Agreement, of last modified
 document date (field EKPO-AEDAT).
Thanks & Regards
chinnu

open TNAPR table and give the output type you need to modify.... get the print program name and check if some structure already have the date you wanted... if you have it already... then open the form in SE71 tr. and provide the strcuture name - feild in the position you want to have the date...
se71--->
&<str. name>-AEDAT&

Modify and add new field in standard Purchase Order script

Hi All,
I have some problem with Modify and add some new fields in Standard Purchase Order script. From ME22n transaction code it display PO detail. In item detail with condition tab all data will display in Currently PO script output.
But I want to display ME22n->Item Detail->Invoice->Taxes Data. how to display this data in standard PO script. All data are fetch from Structure like ( KOMV,KOMVD..etc) then How it can be Display?
Waiting for Replay.
Himanshu Patel.

Work with an Abaper.Tell your requirement [ addition of a field] and ask him to include this field by using the functionality " Field Exit".

Re-contracted- new package or old?

Hi I have recontracted to the new 'totally unlimited usage' package and just wanna confirm that I have been recontracted to the new package and not the old, which I am already on. Pics to illustrate why I have doubts
Should it not be 'Unlimited BT Infinity 2'
and 50GB, not 5GB (as in the old package)
Simple yes or no answer will be helpful as I can then swap it for the right one and not waste time.
thank you!

Hi
If you are unsure about your package
I suggest you contact the forum mods they should be able to get this problem sorted for you this is a link to them http://bt.custhelp.com/app/contact_email/c/4951
They normally reply by email or phone directly to you within 3 working days they will take personal ownership of your problem until resolved and will keep you informed of progress
They are a UK based BT specialist team who have a good record at getting problems solved
This is a customer to customer self help forum the only BT presence here are the forum moderators
If you want to say thanks for a helpful answer,please click on the Ratings star on the left-hand side If the reply answers your question then please mark as ’Mark as Accepted Solution’

Opinion: new Package for every new custom Component?

Hi there,
I am just thinking of some possibilities to structurize my Components I made.
I wonder if it is useful/good programming to define a new package for each new custom Component?
So if I define a new MyComponent class extending JFrame should I make a new package:
"mycomponent"
containing these subfolders:
"view"
"model"
"controler"
subfolging "controler" in:
"listeners"
"adapters"
"events"
Is there any sense to do so? I think this would be the best way to structurize one's components.
But if you do, you have to include millions of packages if you want to use one of these components :(.
Please post, what you think.
Thank you
Sincerely
Karlheinz Toni

nope ;). I would most certainly not want to put every file in a single directory.
But I like sturctured things. If things belong to each other, it should be visible at once, that they have something to to with each other. And the best method I can figure you is putting them in one package.
The subpackages should be created, because of the model, that is used for all swing componentd (UI-delegete, MVC...) so that each structural component is where it belongs to.
I don't like it if tere are 100 events one object could possibly create and you don't know the events from the component (of course you can guess by the name Event :)), but if they are in the same package, you would have to scroll a long way to get the thing you want (either m, v or c).
So this is why I would do it ;).
Anyway: do includes make the program run slower (I have read many threads about it, but there are way to many opinions, so I would be grateful if you post your opinions here, thx ;).
Thanks for your answer,
Sincerely
Karlheinz Toni
p.s.: why wouldn't you put them in a seperate directory (just overkill?), would you use classes that are structured like this if you are looking for a implementation of something and find it in this structure?

How to add new package in SAP transport layer?

hello,
as part of requirement, i have to add a new package to SAP transport layer.
can anyone tell how it is done?
as in STMs,add new package is not coming.
Regards,
Chaitanya

Hi
go thru the below links
http://help.sap.com/saphelp_nw04/helpdata/en/57/38de0c4eb711d182bf0000e829fbfe/content.htm
http://help.sap.com/saphelp_sm32/helpdata/en/57/38de194eb711d182bf0000e829fbfe/content.htm
Regards
S

Creating a package such that its postinstall script runs as a non-root user

The pkgmap(4) man page I have (says "Last change: 30 Apr 1999"; from SUNWman 42.6,REV=6.1) says of the owner and group fields in a pkgmap entry line:
"This field is not used for linked files or non-installable files. It is used optionally with a package information file. If used, it indicates with what [owner/group] an installation script will be executed."
The pkgmap file I get after running pkgmk on my prototype file contains a line like
 1 i postinstall 292 23672 1166416139for the postinstall script. The man page quote above suggests that if I want the script to be run with user and group fred/staff (say), I can hand-edit this line to instead be
 1 i postinstall fred staff 292 23672 1166416139However, pkgadd doesn't like this, complaining and failing thus:
 pkgadd: ERROR: bad entry read in pkgmap
 pathname=postinstall
 problem=extra tokens on input line
 pkgadd: ERROR: unable to process pkgmapFurthermore, there doesn't seem to be anything I can put in my prototype file to get these fields into the generated pkgmap. The corresponding owner/group fields are syntax errors for a package information file in a prototype file.
All this, and the wording in the Application Packaging Developer's Guide, suggest that the pkgmap man page is wrong and there isn't a way to specify a non-root user and group as which you want your package's install scripts to run.
On the other hand, the pkgadd confirmation "This package contains scripts which will be executed with super-user permission during the process of installing this package. / Do you want to continue with the installation of <PCBBserv> [y,n,?]" suggests that there might be some way to make a package such that it contains scripts which will be executed with ordinary user permissions, and thus not warrant a confirmation.
Any suggestions?
Thanks,
John

tpolich wrote:One more quick question, is rc.local run the backround or say if I asked for input would the system boot hang?
Yes, rc.local itself would hang, but if you background the process inside rc.local using the '&' symbol at the end of the command, then that command will be backgrounded and rc.local can continue.

New Package: Arno's iptables firewall scripts

Similar Messages

Maybe you are looking for