Controlling Application Layer Firewall from Command Line Not Working

We are trying to manage the OS X Application Layer Firewall for Mountain Lion from the command-line. We have several hundred Macs that we need to manage and it isn't possible to have someone log in to each one to modify settings. We have used socketfilterfw in the past, and can still use it to add items but we can't seem to manage it at all. We are also having issues trying to remove certain items although it appears we can still add items.
When we try to block or unblock the feedback we get is that the item has been configured however when we do a list the item attributes haven't changed.
When we try to verify if the item has been signed we get an error Killed: 9
When we try to sign an item we get the same error, Killed: 9
With one item specifically, when we try to remove it we get a Segmentation Fault 11 although we can add that same item just fine.
It should be noted that doing all of this through the GUI works fine.
Does anyone have any ideas on how to manage the firewall from te command-line that works? Has socketfilterfw been depricated and replaced by something else? Is this just a bug? I am placing the same information in a bugreport but just wanted to check with the co

It's a known issue that apparently hasn't been fixed. Not a high priority for Apple Engineering, it seems.

Similar Messages

Create an Application Object schedule from command line?

Hi everyone - long-time lurker, first-time poster here.
Is there a way create an availability schedule for an Application Object via a command line (or any other programmatic method)? The utilities I've obtained from Cool Solutions are great for replicating AOs (Application Objects) and setting certain properties, but none of them seem to have a method of creating a schedule that you would otherwise create within the AO's property book via Availability > Schedule. BTW, we are using Zen 6.5.
We have a rollout around the corner for which there are several AOs that drive the process, and we are going to have an instance of each of these AOs for every target group (of which there are dozens), and each group will have their own distinct schedule. The schedules are basically going to be "wait until day X to become available and then remain available for the next 2 months".
For some of the AOs we can use the Schedule Type of Range of days, which is not so terrible to set manually because you just specify a start date and an end date. But most of the AOs must have the Schedule Type of Specified days in order to ensure they do not ever launch during business hours; manually selecting 60 days from the date picker for a single instance is a daunting task, and I shudder at the thought of having to do so for dozens of AO instances.
I believe that the field in the ZENworks database that corresponds with an Application Object's schedule has a data type of Binary (which may be why there doesn't seem to be an existing solution), but does anyone have any ideas for accomplishing what I'm talking about?
Thanks in advance,
Gavin

Originally Posted by AndersG
Jeemo,
> basically going to be "wait until day X to become available and then
> remain available for the next 2 months".
>
Just to clarify, you want:
Range of days, start date, end date. Nothing fancier than that?
- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)
In a perfect world this is what I would like to be able to do:
For the AOs where we're going to use the "Range of Days" schedule type, be able to specify the start date, end date and also the days of the week when we do not want it to run (or just the days we do want it, if easier).
For the AOs with the "Specified days" schedule type, we would like to add (or remove) a specific date, and optionally be able to specify that Start Time and End Time that applies to the dates. As for adding multiple dates, I was planning on having a script that enumerates all the dates in our desired range, and for each date in the range it would call the utility with that date passed as a parameter to add it or remove it.
If all of the above is too much to put together then I would not complain if it is only partially fulfilled. To be honest I would not mind building a mechanism myself that could handle this, it's just that I don't know where to start. I'd be happy to take a crack at it if someone could point me in the right direction for how to send commands to the database (or directory).
Thank you again for your help.

Change Application-Based firewall via command line

I'm looking for the command line method of changing the application-based firewall. I am not referring to ipfw, which I already have configured. Basically, all I want to do is change "Set access for specific services and applications" to "Allow all incoming connections" under Security > Firewall. However, I need to do this via ssh, so I need the command line method.

sysadmin wrote:
It has been included in several Apple packages dating back to Tiger. However, you have to dig it out of one of the packages in /Library/Receipts. Use the "locate" command and you'll find it in a few packages. Apparently they were using it internally long before they included it in the OS.
Interesting. The same thing was true for SetFile, which was/is present in Developer Tools. If you hadn't installed the latter, you could still find it in some of the system update for Tiger.
Using 'defaults' for nested values can be downright painful,
Yes

Install Adobe Air application (.air file) from command line in Mac OS X

Hello everybody
I would like to install an air application on many systems (Mac OS X) using remote install. Is there a way to achieve this?
Is there a pure command line utility to install Adobe AIR applications (.air files) in Mac OS X?
Thanks. Masteradi

Thanks for your reply. I already knew that command but it's good to see it again.
In the meantime I have found a tool called ARH (AIR Redistribution Helper) which can be used to install an air application, uninstall an air application, etc.
Now I would like to create a .pkg file (for Mac OS X) that will use ARH together with my .air file and that will install or update (uninstall/install) the application. But I guess this is no more an issue for Adobe AIR. I have to learn the tools specific for Mac (Iceberg, Xcode).
Best regards
Masteradi

BCDEDIT command line not work in WinRE

Hi,
I am legally blind. When I created USB Recovery Drive by using “Create a recovery drive” in Control Panel, I restart my computer then bootup USB flash drive,
I choose Command Prompt and I typed “bcdedit /set {default} bootmenupolicy legacy” in WinRE’s command line but it not working.
I can not read screen in WinRE because background color is too bright cyan screen. See picture of WinRE.
How do I change background color fron cyan to black or dark blue in WinRE’s screen? I want black or dark blue background color because I can read screen with
black or dark blue background color.
Steve

Hi,
Sorry for my dilatory reply, as far as I know, this is not possible. Actually, I find other similar thread you had submit, but still no solution. I'm sorry for this, if there any solution
about this problem, I would reply to you.
Thanks for your understanding and hope the issue will be resolved soon！
Roger Lu
TechNet Community Support

[SOLVED] Bleachbit command line not working

I am trying to incorporate bleachbit into a script "bleachbit -c". I have tried bleachbit from community and bleachbit-svn and bleachbit-cli from the aur. No matter what I do I get this error:
info: starting BleachBit version 0.9.2
warning: cannot find GPLv3 license text file
Traceback (most recent call last):
File "/usr/bin/bleachbit", line 47, in <module>
bleachbit.CLI.process_cmd_line()
File "/usr/share/bleachbit/CLI.py", line 197, in process_cmd_line
preview_or_clean(operations, True)
File "/usr/share/bleachbit/CLI.py", line 105, in preview_or_clean
worker = Worker.Worker(cb, really_clean, operations).run()
File "/usr/share/bleachbit/Worker.py", line 67, in __init__
raise RuntimeError("No work to do")
RuntimeError: No work to do
Not sure if it is a python issue or if I need to go into my system and delete some files and try again or what. Just curious if anyone has run into this problem and knows a solution.
Last edited by dodo3773 (2012-03-22 16:26:39)

graysky wrote:
Works fine... example:
sudo bleachbit --clean system.cache system.localizations system.trash system.tmp
See my .bashrc on github. Just setup an alias; no script needed.
Thanks. I did not know it was so simple. Although, I do need a script to restart and empty pdnsd and my system dns cache etc.. Thanks again graysky. Marking as solved.
Edit: I think I will steal your rc.d functions though.
Last edited by dodo3773 (2012-03-22 16:28:11)

How to restore or backup Apex application from Command line ? URGENT

We have Oracle apex 4.1 installed in Oracle 11g R2 database (windows 64-bit) 2008 R2
For some reason our database dictionary objects are corrupted.
We wanted to backup our Apex applications in some workspaces ASAP.
We are not able to access apex from http://localhost:7777/pls/apex/htmldb_login
We have an underlying database schema export (expdp).
1) Is there a way to export or backup the apex application without logging into the apex URL ? if yes how ?
2) Does Oracle has any of its own native tool to backup and restore from command line ?
Thanks in advance

My (MS Windows) experience, if I may; perhaps you'll find something useful.
You'll find the README.TXT file in /apex/utilities directory. Read it.
In order to use APEXExport, you need JDK version 1.5 or higher. Check your version by typing (and viewing the result):
C:\>java –version
java version "1.6.0_06"
Java(TM) SE Runtime Environment (build 1.6.0_06-b02)
Java HotSpot(TM) Client VM (build 10.0-b22, mixed mode, sharing)Its directory should be part of the PATH environment variable: on my computer, directory name isC:\Program Files\Java\jre1.6.0_06\binFurthermore, Oracle JDBC class libraries must be part of the CLASSPATH environment variable. Check whether it exists (in Control Panel - System - Advanced - Environment Variables). For my 10gXE, it is here:C:\oraclexe\app\oracle\product\10.2.0\server\jdbc\lib\ojdbc14.jarI couldn't make it work; didn't know that ".\" directory must be entered into CLASSPATH as well (found that information in Arie Geller's book). Therefore, my final CLASSPATH version is:.\;C:\oraclexe\app\oracle\product\10.2.0\server\jdbc\lib\ojdbc14.jarOK, setup is done. Now, go to your /apex/utilities directory and, from the command prompt, run (mind the upper case!)java oracle.apex.APEXExportwhich will show a short help.
I chose to export the whole workspace. In order to do that, I need the workspace ID (got it from Apex's SQL Workshop; that might be a problem as you can't get there, can you? I can't tell how to find that information apart from SQL Workshop, but I'm pretty sure someone, who is much more experienced than me, will know it). OK, here's how you find it:select v('WORKSPACE_ID') from dual;Finally, here's the final step - export:C:\apex\utilities>java oracle.apex.APEXExport -db localhost:1521:xe -user scott -password tiger -workspaceid 1038408092496568The result are fxxx.sql files (where "xxx" represents application number).
I hope you'll manage to export your applications; basically, nothing special here (except that ".\" directory in the CLASSPATH variable).
Best of luck!

Why not all jars picked up by ojdeloy and how to generate build.xml from command line and not JDEV GUI - quick question

Hi All
We have 11.1.1.7 ojdeploy to compile our app.
We notice in the log that not all jars are used in classpath arguments when we explicitly set them up for compilation.
eg:
<path id="classpath">
    <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/commons-el.jar"/>
    <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/jsp-el-api.jar"/>
    <pathelement location="../../Oracle/Middleware/oracle_common/modules/oracle.adf.share_11.1.1/oracle-el.jar"/>
    <pathelement location="interface/public_html/WEB-INF/lib/a.jar"/>
    <pathelement location="interface/public_html/WEB-INF/lib/b.jar"/>
    <pathelement location="interface/public_html/WEB-INF/lib/c.jar"/>
    <pathelement location="interface/public_html/WEB-INF/lib/d.jar"/>
</path>
Log Output -
[ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/bin/javac
[ora:ojdeploy] -g
[ora:ojdeploy] -Xlint:all
[ora:ojdeploy] -Xlint:-cast
[ora:ojdeploy] -Xlint:-empty
[ora:ojdeploy] -Xlint:-fallthrough
[ora:ojdeploy] -Xlint:-path
[ora:ojdeploy] -Xlint:-serial
[ora:ojdeploy] -Xlint:-unchecked
[ora:ojdeploy] -source 1.6
[ora:ojdeploy] -target 1.6
[ora:ojdeploy] -verbose
[ora:ojdeploy] -encoding Cp1252
[ora:ojdeploy] -classpath
[ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/resources.jar:
[ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/rt.jar:
[ora:ojdeploy] /path/to/Oracle/Middleware/jdk160_24/jre/lib/jsse.jar:
    [ora:ojdeploy] /path/to/interface/public_html/WEB-INF/lib/a.jar"/>
    [ora:ojdeploy] /path/to/interface/public_html/WEB-INF/lib/c.jar"/>
1- Is it because it depends on how jpr or jws are configured ?
2- How can we automatically generate a build file of the application from command-line (as opposed to using Jdev IDE to click to generate a build.xml) ?

The first warning is happening because you're stating drivers for input devices without need. You haven't disabled hotplug so evdev gets used instead of kbd. This is normal, and you should change the driver line from kbd to evdev so that whatever options (if any) you've specified for the keyboard get parsed.
The second warning is about you not installing acpid.
The third I have no idea about, but look at the synaptics wiki. None of the (WW) are related to your video card.
And every card that has 2 or more output ports show up as "two cards". You also don't need to specify the pci port in xorg.conf. edit: this is the general case with laptops, might be different for desktops.
When I do lspci -v I get:
00:02.0 VGA compatible controller: Intel Corporation Mobile 945GME Express Integrated Graphics Controller (rev 03) (prog-if 00 [VGA controller])
Subsystem: Micro-Star International Co., Ltd. Device 0110
Flags: bus master, fast devsel, latency 0, IRQ 16
Memory at dfe80000 (32-bit, non-prefetchable) [size=512K]
I/O ports at d0f0 [size=8]
Memory at c0000000 (32-bit, prefetchable) [size=256M]
Memory at dff00000 (32-bit, non-prefetchable) [size=256K]
Expansion ROM at <unassigned> [disabled]
Capabilities: <access denied>
00:02.1 Display controller: Intel Corporation Mobile 945GM/GMS/GME, 943/940GML Express Integrated Graphics Controller (rev 03)
Subsystem: Micro-Star International Co., Ltd. Device 0110
Flags: bus master, fast devsel, latency 0
Memory at dfe00000 (32-bit, non-prefetchable) [size=512K]
Capabilities: <access denied>
And it doesn't matter if it errs in trying to sli up with it self. That's just not a possibility.
Last edited by gog (2009-10-15 23:59:49)

Query runs from command line, but not from scheduler

We use Control-M to schedule shell scripts to be run on a Solaris server. Some of the scripts have to access an Oracle database and in that case our security team will include the DB user and password in the script, then encrypt it and the sys admin team schedules the encrypted shell script with Control-M. That works fine, but we've been trying to have the DB user and password on a separate encrypted file so that we don't have to ask for file encryption every time it's necessary to modify a script (this is a test environment).
We have the script at ~/system_name/scripts, the query at ~/system_name/sql and the encrypted file and key at ~/system_name/keys. The SQLPlus call in the script is:
${ORACLE_HOME}/bin/sqlplus "`decrypt -a 3des -k ./../keys/key.3des.system -i ./../keys/login.system`"@instance_name <<EOF
@${DIR_SQL}/TEST_QUERY.SQL
quit
EOF
The security analyst has tested is successfully from command line, but when we schedule it with Control-M the job abends and we get the following in the sysout:
+ decrypt -a 3des -k ./../keys/key.3des.system -i ./../keys/login.system
decrypt: cannot open ./../keys/key.3des.system
decrypt: invalid key.
+ /u00/app/oracle/product/11.1.0/db_1/bin/sqlplus @instance_name
+ 0<<
@/sistemas/hmp/system_name/sql/TEST_QUERY.SQL
quit
SQL*Plus: Release 11.1.0.6.0 - Production on Mon May 3 09:41:55 2010
Copyright (c) 1982, 2007, Oracle. All rights reserved.
SP2-0310: unable to open file "instance_name.sql"
Enter user-name: SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER|SYSASM}]
where <logon> ::= <username>[<password>][@<connect_identifier>] [edition=valu\
e] | /
SP2-0306: Invalid option.
Usage: CONN[ECT] [logon] [AS {SYSDBA|SYSOPER|SYSASM}]
where <logon> ::= <username>[<password>][@<connect_identifier>] [edition=valu\
e] | /
Enter password:
ERROR:
ORA-12545: Connect failed because target host or object does not exist
SP2-0157: unable to CONNECT to ORACLE after 3 attempts, exiting SQL*Plus
0000000080
Any ideas?

Looks like the command is being split in some way - the connection to sqlplus is being made before it completes the whole string
It appears to be seeing the @instance_name as a script to execute rather than a db to connect to.
Is the database on the same server as the script?
If so, try setting your environment to the correct databsae, so that you can omit the @instance_name part of the syntax and see if it helps
Also just noticed the failure to open the decrypt script. It would appear uyou are not using a full path name. Have you checked which directroy the scheduled job starts in? You may need to look at running some environment specific scripts first.
Edited by: LindaA on 05-May-2010 07:43

To run an application on iAS6sp1 on HP-Unix, while starting the kjs from command line, it gives a GDS error and crashes. Subsequently, after stopping all services and restarting iAS wouldnot come up.

Hi,
Not a problem, please post the KJS error logs for me to hunt the
exact reason for the error.
Thanks & Regards
Raj
Neel John wrote:
To run an application on iAS6sp1 on HP-Unix, while starting the kjs
from command line, it gives a GDS error and crashes. Subsequently,
after stopping all services and restarting iAS wouldnot come up.
Try our New Web Based Forum at http://softwareforum.sun.com
Includes Access to our Product Knowledge Base!

Windows 7 Defrag from command line does not work

We are running Windows 7 in a virtualized environment. When running windows defrag using schedule or from command line, it does not work. The command that I am executing as administrator is
C:\Windows\system32>defrag /c
Microsoft Disk Defragmenter
Copyright (c) 2007 Microsoft Corp.
It displays the above message and exits back to the command prompt. However if I run the command defrag C: it does work. Defragmenting from the GUI works as well as long as both the disks (C: and System Reserved) are selected and when I click on
Defragment disks, works fine.
I am concerned about defrag running from the task scheduler with the command "defrag /c" (auto scheduled using Configure Schedule... from Disk Defragmenter) does not work and the system never gets defragmented automatically.
This happens only with some of the windows 7 VM's that we have.
There are no entries in Event Log that point to the defrag (using task scheduler). Any ideas what may be going on?

Hi,
Could you defrag as below method:
1. Open Disk Defragmenter by clicking the Start button. In the search box, type
Disk Defragmenter, and then, in the list of results, click
Disk Defragmenter.
2.Under Current status, select the disk you want to defragment.
3.To determine if the disk needs to be defragmented or not, click Analyze disk. Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
Once Windows is finished analyzing the disk, you can check the percentage of fragmentation on the disk in the
Last Run column. If the number is above 10%, you should defragment the disk.
4.Click Defragment disk. Administrator permission required If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
For more information, please read this article:
Ways to improve your computer's performance
http://windows.microsoft.com/en-in/windows/improve-performance-defragmenting-hard-disk#1TC=windows-7
Meanwhile, read this article:
Defrag from the Command-Line for More Complete
Control
http://technet.microsoft.com/en-us/magazine/ff458356.aspx
Karen Hu
TechNet Community Support

I can not uninstall Office 2013 from command line

Hi, I have been stuck for a while trying to uninstall Office 2013 via command line. Installation file was downloaded from Volume Licensing Service Center, Uninstall.xml file for silent uninstallation looks like this:
<Configuration Product=”ProPlus”>
<Display Level=”basic” CompletionNotice=”yes” SuppressModal=”yes” AcceptEula=”yes” />
</Configuration>
From command line the following will not work:
setup /uninstall ProPlus /config .\ProPlus.ww\Uninstall.xml
Error: Setup can not find or validate an installation file. Please try reinstalling Office . . .
setup /uninstall ProPlus gives me GUI to continue process - it seems /config .\ProPlus.ww\Uninstall.xml part does not work as it should be
This is very important to me since I used above command line in SCCM 2012 R2 to allow user to uninstall Office 2013 by itself via Software Center. When this failed I tried locally but the error was the same. This should have been trivial task - silent uninstallation
using .xml file. It is not a rocket science. I am very angry because losing time for something like this is unacceptable for system engineers working with SCCM 2012 R2.

Hi,
This error might occurs due to lots of reasons. Where is the installation file stored? If it's stored on a network share, please copy it to your local disk, and then manually run the command again. This way, we'll see if the installation file is the
problem.
If issue persists in this case, then this generally means that something wrong with the installation file. Please try to redownload it and then try again.
Please also make sure that you're executing the command with elevated privileges (run as administrator).
Regards,
Ethan Hua
Forum Support
Come back and mark the replies as answers if they help and unmark them if they provide no help.
If you have any feedback on our support, please click
here

How to programatically start j2ee application/service from command line

Hi all
We have developed a j2ee application and deployed the .ear file on SAP J2EE (Netweaver'04) engine.
We are able to successfully start/stop the application from Visual administrator -> Deploy -> Service -> Start application (or) Stop application.
We need to start and stop the same application programatically or via command line instead of doing it from VA. Any thoughts from anyone on how to do it ?
Thanks in advance.
Regards
Nagesh

The cammands are there in the respective folders, these are just the batch files / .sh scripts that can be run from command line.
/usr/sap/<instance>JC<client>/j2ee/admin
go.sh and go.bat can run either on command line
j2ee/configtool
configtool.sh / configtool.bat
similarly for other smaller utilities. For the main server, the related commands are in exe directory of sapmnt
/sapmnt/<instance>/exe
Regards,
Nitin
Edited by: Nitin Mahajan on Jun 16, 2009 11:16 PM

How to automatically generate a build file of the application from command-line

Hi All
How can we automatically generate a build file of the application from command-line (as opposed to using Jdev IDE to click to generate a build.xml) ?
Thanks

User, which jdev version do you use?
I don't think you can do this. You can only create an ant build.xml from the project inside jdev.
You can use ojdeploy to build the project. This is the only method which will also make the necessary changes to the descriptors.
Timo

Work from command line but did not work from JSP call

I have a test class that should perform Triple DES. When I run it from command line work ok, but when runs from JSP it give me an error:
Exception:
======================================
javax.crypto.IllegalBlockSizeException: Input length not multiple of 8 bytes
put 3 check points inside the code, and run it from command line and here is the result:
C:\Documents and Settings\salasadi\Desktop\DigitalMailer>java TDESStringEncrypto
r 123456781234567812345678 "CID=103&A
this is pass 3
this is pass 1
this is pass 2
here is the class:
import javax.crypto.*;
import javax.crypto.spec.*;
import java.security.*;
import java.io.*;
public class TDESStringEncryptor
static final int DATA_STRING_LENGTH = 64;
public static void main(String[] args)
try
TDESStringEncryptor enc = new TDESStringEncryptor();
String value = enc.Encrypt(args[0], args[1]);
System.err.println(value);
catch (Exception ex)
System.err.println(ex);
public String Encrypt(String inkey, String data)
throws Exception
// convert key to byte array and get it into a key object
byte[] rawkey = inkey.getBytes();
DESedeKeySpec keyspec = new DESedeKeySpec(rawkey);
SecretKeyFactory keyfactory = SecretKeyFactory.getInstance("DESede");
SecretKey key = keyfactory.generateSecret(keyspec);
Cipher cipher = Cipher.getInstance("DESede/ECB/NoPadding");
cipher.init(Cipher.ENCRYPT_MODE, key);
byte[] out = cipher.doFinal( padString(data).getBytes( ) );
System.out.println("this is pass 1");
return byteArrayToHexString( out );
private String byteArrayToHexString(byte in[])
byte ch = 0x00;
int i = 0;
if ( in == null || in.length <= 0 )
return null;
String pseudo[] = {"0", "1", "2", "3", "4", "5", "6", "7", "8",
"9", "A", "B", "C", "D", "E", "F"};
StringBuffer out = new StringBuffer( in.length * 2 );
while ( i < in.length )
ch = (byte) ( in[i] & 0xF0 );
ch = (byte) ( ch >>> 4 );
ch = (byte) ( ch & 0x0F );
out.append( pseudo[ (int) ch] );
ch = (byte) ( in[i] & 0x0F );
out.append( pseudo[ (int) ch] );
i++;
String rslt = new String( out );
System.out.println("this is pass 2");
return rslt;
private String padString( String s )
StringBuffer str = new StringBuffer( s );
int strLength = str.length();
for ( int i = 0; i <= DATA_STRING_LENGTH ; i ++ )
if ( i > strLength ) str.append( ' ' );
System.out.println("this is pass 3");
return str.toString();
And here is the JSP call:
TDESStringEncryptor encryptz = new TDESStringEncryptor();
String cryptodata1 = encryptz.Encrypt(Keyz,cryptodata);
Thanks

Please use [ code ] tags when posting code.
Please indicate the line that causes the exception.
Please indicate what Keyz and cryptodata is.

Controlling Application Layer Firewall from Command Line Not Working

Similar Messages

Maybe you are looking for