Iptables and FMS on RHEL V3

Sorry for awful english.
After successfuly instalaltion of FMS on my Linux box, FMS
works fine with iptables.
INIT: Entering runlevel: 3
Entering non-interactive startup
Applying iptables firewall rules: [ OK ]
Setting network parameters: [ OK ]
Bringing up loopback interface: [ OK ]
Bringing up interface bond0: [ OK ]
Bringing up interface bond1: [ OK ]
Starting system logger: [ OK ]
Starting kernel logger: [ OK ]
Starting irqbalance: [ OK ]
Starting portmapper: [ OK ]
Starting NFS statd: [ OK ]
Initializing random number generator: [ OK ]
Mounting NFS filesystems: floppy0: no floppy controllers
found
[ OK ]
Mounting other filesystems: [ OK ]
Starting xinetd: [ OK ]
Starting postfix: postalias: warning: My hostname khfms01 is
not a fully qualified name - set myhostname or mydomain in
/etc/postfix/main.cf
[ OK ]
Starting fms: [ OK ]
Starting console mouse services: [ OK ]
Starting crond: [ OK ]
Starting atd: [ OK ]
Red Hat Enterprise Linux ES release 3 (Taroon Update 8)
Kernel 2.4.21-47.0.1.ELsmp on an i686
But when I reboot the server, it stop at
/etc/rc6.d/K92iptables. And nothing happens.
root@khfms01 rc0.d]# init 6
INIT: Sending processes the TERM signal
INIT: Sending processes the KILL signal
Stopping atd: [ OK ]
Shutting down console mouse services: [ OK ]
Stopping postfix: [ OK ]
Stopping xinetd: [ OK ]
Stopping crond: [ OK ]
Unmounting NFS filesystems: [ OK ]
Saving random seed: [ OK ]
Stopping NFS statd: [ OK ]
Stopping portmapper: [ OK ]
Shutting down kernel logger: [ OK ]
Shutting down system logger: [ OK ]
Shutting down interface bond0: bonding: bond0: released all
slaves
[ OK ]
Shutting down interface bond1: bonding: bond1: released all
slaves
[ OK ]
Shutting down loopback interface: [ OK ]
Stopping iptables:
Do you have any idea?
Thank you.

I had the same problem on CentOS 6.2 x86_64, albeit not on EC2. It seems that the installer creates a symlink to the i686 libpcap (libcap.so.1 -> /lib/libcap.so.2) and fmsedge won't run with it. Manually removing that symlink and instead linking to the libcap.so.2 in /lib64 solved the problem for me.
cd /opt/adobe/fms
rm libcap.so.1
ln -s /lib64/libcap.so.2 libcap.so.1
HTH, Jeremy

Similar Messages

Oracle 10g and 11G on RHEL 6

Hi,
Is it fine to install oracle 10g and 11g on RHEL 6?
Please guide!!
thanks

Hi;
Is it fine to install oracle 10g and 11g on RHEL 6?Its not certified as mention. But if you want to make installation on that release see Tim's site:
http://www.oracle-base.com/blog/2011/02/13/oracle-11gr2-on-oracle-linux-6/
Regard
Helios

Viewcast GoStream Surf and FMS

Viewcast GoStream Surf and FMS,
I am looking for a good tutorial how to set this up or any
other links, tips.
Or even better someone who has the knowledge to set-up the
FMS so the
Niagara
GoStream SURF can do live streaming.
This will be rewarded please sent me a e-mail
[email protected]
Regards,
RickHB

In my experience with the FMS team (over the 7+ years I've been working with FMS/FCS), the FMS engineers typically don't say anything about feature updates unless they are already in the works, or if the statement is qualified by an additional statement indicating the feature is in a beta or prototype and is not guaranteed for release (not sure if that's a rule at Adobe, or just good politics on the part of the engineers).
The fact that Asa openly stated that the team is aware and working on it suggests to me that they are planning for a solution to the problem in a not-too-distant update. Do I know that for a fact? Of course not.... but I have no reason to doubt that there will be a solution before too long. So yeah... I genuinely do believe my previous statement.
Something to consider... FMIS and FMSS use the same binaries. My understanding is that the limitations imposed by the streaming server license are merely rules, so it shouldn't be a huge undertaking to change those rules. It might even be as simple as making changes to the signed live and vod apps that ship with FMS. So, the required functionality is supported by streaming server, it's just not implemented (big difference there in terms of what it would take to fix the problem)
So, for the short term, the only solution is to pony up the cash for an interactive license, but based on Asa's statement, that will change.

FMS 3 and FMS 3.5

Hi Folks...
What is the difference between FMS 3 and FMS 3.5? Is 3.5 a totally new version or just some kind of service upgrade?

DVR is supported from FMS 3.5 and not from FMS 3.
Now coming to the question, yes DVR is done via server-side code (though you can do direct client-side record - but its not preferred way of doing it)
There is no built-in player as such but Adobe does provide ready-to-use solution for DVR which is called dvrcast. You can find dvrcast application on FMS tools page - http://www.adobe.com/products/flashmediaserver/tool_downloads/ . The solution comes with two server-side applications + FLVPlayback component which can be used on client side.

Flash Player 10 and FMS 3: compatible ?

Hi,
Do you know about some problems that may occur between Flash Player 10 and FMS 3 right after bandwidth detection and before the video actually starts playing ?
In our player based on FLVPlayback, the video does not always play.
When it doesn't, we see that the FLVPlayback component establishes a connection then right after the TCP/IP connection with FMS is reset and nothing plays.
Regards,
Karl.

Hi, thanks for the info. You have the correct Flash files for IE. Look in manage add ons for Shockwave Flash Object and make sure it is Enabled.
Now you need to Install Flash Player into Firefox. Download the Flash Player Installer for Firefox and SAVE it to your Desktop:
http://fpdownload.macromedia.com/get/flashplayer/current/install_flash_player.exe
Once you have done that, then Close all browser windows, you only want to be looking at your Desktop.
RUN the Installer and when it is finished, Reboot(restart) your computer.
Now look in you plugins for that SWF and make sure it is Enabled.
You had Installed Flash Player in IE, you just had not Installed it in FF yet. Now you should be fine and those Flash files should be in your Flash folder.
eidnolb

[SOLVED] Problem with Iptables and DNS-resolving

So I'm changing my iptables default policy from ALLOW to DROP, and are tightening up the rules too.
However, I'm having troubles with allowing DNS-queries, while keeping things as locked down as possible.
/etc/resolv.conf
domain home
nameserver 192.168.1.1
Relevant rules:
# Allow HTTP
$CMD -A OUTPUT -o wlan0 -p tcp --dport 80 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -p tcp --dport 80 -m conntrack --ctstate ESTABLISHED -j ACCEPT
# Allow HTTPS
$CMD -A OUTPUT -o wlan0 -p tcp --dport 443 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -p tcp --dport 443 -m conntrack --ctstate ESTABLISHED -j ACCEPT
# DNS-related rules
$CMD -A INPUT -i wlan0 -s 192.168.1.1 -p tcp --sport 53 -m conntrack --ctstate ESTABLISHED -j ACCEPT
$CMD -A INPUT -i wlan0 -s 192.168.1.1 -p udp --sport 53 -m conntrack --ctstate ESTABLISHED -j ACCEPT
$CMD -A OUTPUT -o wlan0 -d 192.168.1.1 -p tcp --dport 53 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
$CMD -A OUTPUT -o wlan0 -d 192.168.1.1 -p udp --dport 53 -m conntrack --ctstate NEW,ESTABLISHED -j ACCEPT
What am I missing here?
Last edited by graph (2012-03-20 18:36:23)

Gcool wrote:I'm assuming you just want to allow that box to surf the net?
Yepyep. Sorry for not mentioning that.
192.168.1.1 is my router, and when I'm disabling the firewall, everything is working perfectly. This is with 192.168.1.1 as nameserver in /etc/resolv.conf.
I tried changing my rules to your rules, but I still can't get it to work.
The following is the output while I'm connecting to www.xkcd.com using elinks:
Output of tcpdump -n '(port 80 or 443 or 53)'
without iptables running: pastebin.com
with iptables running: pastebin.com
It seems to me that DNS is working properly, and that iptables is blocking port 80, right?
Last edited by graph (2012-03-20 08:20:44)

Need help with setting up a stream with FMLE and FMS

Hi guys!
I'm new to this stuff, so i would love if you could guide me, and/or tell me if what i'm trying to do is even possible.
This is what i'm trying to do:
I am currently working on a project for Narvik University College in Norway. We are experimenting with remote control of some lab equipment. We want to stream live video from the lab for the students to see.
So..
I want to set up a stream from my webcam that can be accessed through a webpage by anyone (with minimal delay)
This is what i understand i have to do:
Use FMLE to connect to the webcam, and connect FMLE to FMS, and somehow get this out on my webpage.
It's the Flash Media Server bit i don't understand. How do i go about to get this out on my webpage? Do I have to use a Flash Streaming service like Onyxservers to do this, or can i do this part myself? If yes, how complicated is this?
Best Regards
Daniel Bjørkman
Narvik University College

OK, i have now managed to set up the Flash Media Server and made a simple flash application that shows the stream.
But now, everything is local, and if i want to embed the stream on the webpage, i guess it can't be local.
The source in the flash application is "rtmp://localhost/live/livestream" and shows the webcam when i open the .html file (with the flash video embedded) on this computer. What should the source look like when i embed the flash file in a webpage that is not on this computer?

FMS2 Total Clients reach and FMS stop works

Hi everybody,
I have developed one application using FMS2 and Flash CS3
that creates a multi-publishing live stream. I am using FMS2 2.0.5
r88 with license template 2500-25.pro.
The application have two parts:
Publisher (can be max 900 distinct users);
Viewer (can be max 100 users);
After some “Publisher” client put its camera
online the application put it in idle mode waiting for some
“Viewer” client connect and ask to watch that stream.
In this moment the Publisher client start to publish the video
“LIVE” to the Viewer client and everything work good.
When the Viewer client disconnect then the Publisher client goes to
idle again and stop to sending the live stream into the FMS,
waiting for another Viewer client again.
So far so good the application works great until now.
The main problem is that one bug appear all days after 15
hours connected (around 15:00 to 16:00 hours) the app stops to send
any video to the Viewer client that only can see the blank video on
the screen.
When this happened I saw the following info in the FMS2 Admin
Panel:
FMS CPU is over 50% and its frequency almost linear in the
graphic, rather the start scenario where the frequency was like a
square-wave well formed and all streams was working good with good
image.
Total Clients count 2500 or more
Active Clients count more than 750 – 1000 clients
connected (max license used is 2500)
Rejected Clients around 10.
If I restart the application in the bug time the streams
start to work again, the FMS CPU goes to square-wave in the graphic
again jumping between 0 to 50% max, but some streams are swapped in
the server memory cause is possible call for a stream and get
another live, like a copy. The solution is to restart the FMS2
Server service and the FMS2 Admin services on the Windows Services
Panel and everything go back into normal condition.
I hope somebody can help me, because I don’t know if
the Total Clients is the problem or what I can do to avoid that
processing problem. In fact is so curious why the FMS CPU grow in
the time also.
Thank you everybody.
Willismar.

Hi...
Recently I asked for my business, buy the new version of
Flash Media Interactive Server 3.0 , because only this version can
handle multiple independent broadcastings. After buying and looking
for updates on the Adobe forum, I found that a similar problem
exists in the new version, but this problem is identified by Adobe
as a problem of Microsoft's Windows Server 2003.
‘The heavy use of Winsock programs may exhaust the
nonpaged pool memory of a Windows Server 2003-based computer.
Then I got one idea. Before install the new version I thought
in test the MSHotFix over the Media Server 2, but it doesn't
worked. As my idea did not work, then I installed the new version
and did its updates too, and after starting the application for the
first time, noticed that the square wave on the performance tab was
well defined at this time like never before.
During 15 days I only had the same problem once because a
peak in another application that runs on the same machine. After
that never had the problem again.
I think that the version 3 is much slower than the version
2, although better manipulate the connections. Anyway I am writing
my application again to try to optimize the performance of the CPU
and prevent the problem go back again some day.
The HotFix can be found here (
http://www.adobe.com/go/kb403014)
if you want to try with the FMS2, but I only got good results on
the FMS3.
If you have any question let me know

IIS and FMS on two different Server

Hey guys,
I was trying to see if this scenario is posible. i believe it is but i am trying to see what would it be the best set up right now. I see a lot of docs where both service run on the same box, but i have not seen any if the services are running on diffetnet boxes. Many papers mention the issue with port 80 but since i have 2 boxes i dont have that issue,
Any ideas?
Thanks,

I see you've already posted this in resurrecting an old thread on the Adobe Media Server (formerly Flash Media Server (FMS)) forum
http://forums.adobe.com/thread/437500
This forum is more for general assistance with downloading and installing Adobe products.
You'll get more specialized assistance from the AMS forum.

Strange problem after share a port with My webserver and FMS

My webserver is running, and I want to use rtmpt(80 port) to player a video. So I did as same as:
http://help.adobe.com/en_US/flashmediaserver/configadmin/WS02f7d8d4857b167770a4686812a808b 6918-8000.html
If you want Flash Media Server and your web server to share a port, set up Flash Media Server as the proxy, put your web server on an unused port, and change the fms.ini HTTPPROXY_HOST setting to point to that port.
httpd.conf
Listen *:8080

Everything is ok except when a post a form.
When I submit a form, the website send me a “application/x-fcs” type empty file let me download file.

Screen Painter and FMS

Hi all,
I have developed a form with Screen Painter. In a field I attached an FMS. Although the FMS works perfect when I choose the value it is not paste in the specific field.
Any Idea,
Thanks in advance,
Vangelis

Hi Vangelis,
If there is I don't know about it, but I also never tried it.
Is some cases I've emulated the CFL behavior with the following steps.
1. Catch the Validate event ;
2. If the Key Pressed to exit the field is the TAB key, open a form - lets call it CFLForm - with the possible values;
3. Catch the double-click event or the "Select" button pressed event
4. Write the value if the base form's field and close the CFLForm form.
Regards,
Vítor Viera

Iptables and tor, reroute all traffic for security... Help?

I'm attempting to route all TCP traffic that does not go through polipo through port 9040, tor's default TransPort. My web browser uses polipo to cache stuff, so I'd like to keep it in place if possible. However, all non-http traffic needs to be sent through the transPort. My current config, which does not take into account rerouting, is below:
# Generated by iptables-save v1.4.15 on Fri Oct 12 16:33:33 2012
#*nat
#:PREROUTING ACCEPT [12:3420]
#:INPUT ACCEPT [1:261]
#:OUTPUT ACCEPT [0:0]
#:POSTROUTING ACCEPT [0:0]
#-A OUTPUT ! -p tcp -m owner --owner-uid tor -j REDIRECT --to-ports 9040
#-A OUTPUT -p udp --dport 53 -j REDIRECT --to-ports 9053
#COMMIT
# Completed on Fri Oct 12 16:33:33 2012
# Generated by iptables-save v1.4.15 on Fri Oct 12 16:33:33 2012
*filter
:INPUT DROP [9:1175]
:FORWARD ACCEPT [0:0]
:OUTPUT DROP [8:488]
# allow loopback
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
# allow NTPD time syncs
-A OUTPUT -p udp --dport 123 -j ACCEPT
# allow tor
-A OUTPUT -j ACCEPT -m owner --uid-owner tor
-A OUTPUT -p tcp --dport 9040 -j ACCEPT
-A OUTPUT -p udp --dport 53 -j ACCEPT
# allow BitTorrent
-A OUTPUT -p tcp --dport 6969 -j ACCEPT
-A OUTPUT -p tcp --dport 51413 -j ACCEPT
-A OUTPUT -p udp --dport 51413 -j ACCEPT
# allow pings (still not working. fix?)
-A OUTPUT -p icmp --icmp-type 8 -j ACCEPT
-A INPUT -p icmp --icmp-type 8 -m conntrack --ctstate NEW -j ACCEPT
# allow traffic on established connections
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A INPUT -m conntrack --ctstate INVALID -j DROP
COMMIT
# Completed on Fri Oct 12 16:33:33 2012
as you can see, I've already tried to redirect traffic using the --uid-owner polipo rule. So far, it's just caused iptables to spit out errors. I'm stumped, so I thought I'd come to you wonderful people at the Archlinux forums for help.

Using the command you gave me, I found that the polipo user is indeed executing /usr/bin/polipo. Other than that, polipo is executing no processes.
I tried adding the following to my iptables rules nat section:
-A OUTPUT -p tcp -m tcp -m owner ! --uid-owner polipo -j ACCEPT
-A OUTPUT -p tcp -m tcp -m owner ! --uid-owner polipo -j REDIRECT --to-ports 9040
polipo now works, but the rest of my traffic that should go to the TransPort gets blocked.
[EDIT]
I'm now trying the same thing, except that I've chained privoxy with polipo like so:
browser > privoxy > polipo > tor > internet
my iptables rules look like this:
# Generated by iptables-save v2.4.15 on Fri Oct 12 16:33:33 2012
*nat
:PREROUTING ACCEPT [12:3420]
:INPUT ACCEPT [1:261]
:OUTPUT ACCEPT [0:0]
:POSTROUTING ACCEPT [0:0]
#-A OUTPUT -p tcp -m tcp -m owner ! --uid-owner tor -j REDIRECT --to-ports 9040
-A OUTPUT -p tcp -m tcp -m owner ! --uid-owner tor -m owner ! --uid-owner polipo -m owner ! --uid-owner privoxy -j REDIRECT --to-ports 9040
COMMIT
# Completed on Fri Oct 12 16:33:33 2012
# Generated by iptables-save v1.4.15 on Fri Oct 12 16:33:33 2012
*filter
:INPUT DROP [9:1175]
:FORWARD ACCEPT [0:0]
:OUTPUT DROP [8:488]
# general
-A OUTPUT -p tcp -m owner --uid-owner tor -j ACCEPT
-A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
-A OUTPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT
# allow loopback
-A INPUT -i lo -j ACCEPT
-A OUTPUT -o lo -j ACCEPT
-A INPUT -p all -s 127.0.0.1 -d 127.0.0.1 -j ACCEPT
# allow NTPD time syncs
-A OUTPUT -p udp --dport 123 -j ACCEPT
# allow tor
-A OUTPUT -p tcp --dport 9040 -j ACCEPT
-A OUTPUT -p udp --dport 53 -j ACCEPT
-A OUTPUT -p tcp --dport 8123 -j ACCEPT
-A OUTPUT -p tcp --dport 8118 -j ACCEPT
# allow pings
-A OUTPUT -p icmp --icmp-type 8 -j ACCEPT
COMMIT
# Completed on Fri Oct 12 16:33:33 2012
and it STILL won't route traffic right. iptables redirects to the TransPort, but any traffic passed through polipo or privoxy reveals "connection reset" error message. Help?
Last edited by ParanoidAndroid (2013-03-12 01:50:51)

Compatibily problems between flash media live encoder 3 and fms version 2 ?

hello
i am trying to setup a stream for a live event we plan
for this we want to use our "flash media server v. 2.04" and
to encode the video the
"flash media live encoder 3"
but im really shocked about the poor quality - actually its
not working
the video is freezing for a while an then playing back very
fast and then freezing again
and the audio is stuttering
i tried propably all kinds of combinations of the settings
without any success
very often the encoding session is being stopped and started
again with the following
error message:
Fri Mar 13 2009 05:02:22 : Audio Encoding Started
Fri Mar 13 2009 05:02:22 : Video Encoding Started
Fri Mar 13 2009 05:03:09 : Unexpected error encountered in
encoding process.
Fri Mar 13 2009 05:03:10 : Audio Encoding Stopped
Fri Mar 13 2009 05:03:10 : Video Encoding Stopped
Fri Mar 13 2009 05:03:10 : Session Stopped
Fri Mar 13 2009 05:03:10 : Session Started
Fri Mar 13 2009 05:03:10 : Audio Encoding Started
Fri Mar 13 2009 05:03:11 : Video Encoding Started
and the media server says:
Sending error message: Method not found (FCUnpublish).
Sending error message: Method not found (releaseStream).
sometimes it restarts only the audio encoding
the machine for the streamingserver (windows version) is
realy strong an has a very fast
internet connection
the encoding machine is a 2.2ghz macbook pro with windows xp
and 6000 dsl connection
with the low bandwidth factory setting of the flash media
live encoder the cpu usage is
about 16%
for the videoinput i want use a canopus ADVC-110 firewire
capturedevice
but i also tried the apple isight usb 2.0 laptop-camera and a
logitech quickcam express
usb 1.0 webcam
all with negative results
two colleques encountered the same problems on their machines
but when i upstream the video with an standart flash client
the videostream runs stable
without any problems
so i guess the problem is the flash media live encoder
is there a compatibily problem between the server version and
the encoder version ?
thanks in advance for any hints

Hi,
FMS 2.04 version doesn't support H.264 and AAC/HEAAC. So, you
can only use Vp6, Mp3 and Nellymoser codecs in FMLE for streaming
to this server.
You are getting "Unexpected error" message within 50 sec of
your encoding session. This error occurs when either of the video
or audio device doesn't function properly. As you have mentioned
that various video devices gave negative results, try to use a
different audio device or uncheck the 'audio' device option and
encode only video.
Exactly what was the nature of the negative results for
different video devices? Was it the same "unexpected error"
problem? Please share the steps, device and encoder settings also.
When you observe video freezing and audio stuttering problem
while playback, reload the flash player and let me know if you
still see the same problem.

Use HTML5 and FMS server 3.5 to share/play videos

Hi!
We use FMIS (3.5) to distribute our videos, but how can I use HTML5 to view them without duplicating the video to the HTTP VOD directory.
Can I point to the application FMS file location like I can with RTMP in some way?
Thanks

To be frank did not get your question clearly though i'll try answering it. I am assuming you are trying to do Progressive Download using HTML5 video tag as 3.5 did not support HTTP Streaming specially HLS. So i think in that case - you can either configure Apache location directive to point to your content directory or place them under "/webroot/vod" and configure VirtualDirectories for RTMP Streaming

Simple Authentication with SMP 10.1 and FMS 3.5

Good day all,
I am looking to add simple authentication to the SMP player for use with FMS 3.5. I recently came across a technical paper published by Adobe titled, "Video content protection measures enabled by Adobe Flash Media Interactive Server 3.5". Within this document are three examples of user authentication with code samples. I am starting with the "simple" client verification using a unique token authentication key method first.
I've noticed that SMP doesn't have any FMS security mechanisms built-in at least that I've been able to identify in the documentation or feature specs. Did I miss something? I am looking for assistance in getting started with adding this feature to SMP. So my question is where could I add the client side Actionscript within the SMP structure?
I'd very much like to hear about others' experiences with adding security mechanisms to SMP used with FMS.
Thank you.

Andrian - Thank you for the quick reply. I'm gald SMP has support for the playback of protected content. Is there more documentation than this demo on this topic?
I'll explain what I'm doing. I am implementing SMP as the default video player application used in online courses at the Savannah College of Art and Design. Identifying the player and implementing its use in our production workflow is the first step in a strategy to deliver a better video experience and leverage the scalibility and flexibility of SMP. On the back end integration with our FMS I have been asked to implement some user authentication. We don't need to re-auth the students as they have already been authenticated through our LMS. What is desired is each player instance authenticates with our server to prevent stream ripping.
The simple user token authentication key example from the linked document seems to best suit this intial need.

Iptables and FMS on RHEL V3

Similar Messages

Maybe you are looking for