Problem using the adaptive firewall : "Firewall management disabled"

I am facing a problem that Google and man pages cannot solve : it seems that af is disabled; I don't know why and cannot enable it.
In /var/log/system.log, I can see entries like this :
Aug 19 08:07:14 arda emond[14295]: Host at 202.99.122.136 will be blocked for at least 15.00 minutes
Aug 19 08:07:14 arda emond[21852]: DoRunAction (child): setting the uid/gid to 0/0
But ipfw tells me otherwise :
$ ipfw list
00001 allow udp from any 626 to any dst-port 626
01000 allow ip from any to any via lo0
01010 deny log ip from any to 127.0.0.0/8
01020 deny log ip from 224.0.0.0/4 to any in
01030 deny log tcp from any to 224.0.0.0/4 in
01040 allow udp from 192.168.0.0/16 to 192.168.0.0/16 dst-port 514 in
01050 allow udp from 212.27.38.253 to 192.168.0.0/16 in
01060 allow tcp from any to 192.168.0.0/16 dst-port 6881-6889 in
12300 allow ip from any to any
12301 allow tcp from 192.168.0.0/16 to any dst-port 25
12301 allow udp from 192.168.0.0/16 to any dst-port 25
65534 deny log ip from any to any
65535 allow ip from any to any
afctl refuses to run, giving an explicit message that i cannot find anywhere on the web :
$ /usr/libexec/afctl -v 1 -a 202.99.122.136
Tue Aug 19 08:09:53 arda.private afctl[22253] <Notice>: Firewall management disabled
And of course, no new rules added in ipfw.
Do you have any idea on what is wrong ? afctl is loaded durong boot (I didn(t change anything), but not working :
$ launchctl list | grep afctl
- 0 com.apple.afctl

OK, thanks. Situation is getting better.
Now af is enabled, and I can add IP to black and white list. I had also to enable the rule set with the -e option (not sure it will stay after reboot; man page is silent on this).
The rules set 17 appears in ipfw list, but it seems there is still some problem for automatic blacklisting.
I will continue to investigate the situation, but Apple provides very little documentation on this.

Similar Messages

Unable to enable the adaptive firewall: No ALTQ support in kernel ALTQ related functions disabled

No ALTQ support in kernel ALTQ related functions disabled
OS X Server: How to enable the adaptive firewall - Apple Support
Recently ran the latest OS X Yosemite Server Updates: OS X v10.10.3 and Server v4.1. Tried to enable the "adaptive firewall" by following the steps in Apple's article (see above) and encountered the error after the second line of commands
Charlie$ sudo pfctl -f /etc/pf.conf
pfctl: Use of -f option, could result in flushing of rules
present in the main ruleset added by the system at startup.
See /etc/pf.conf for further details.
No ALTQ support in kernel
ALTQ related functions disabled
server:~ Charlie$

I'm not sure that is an error, it is a warning.
The Mac kernel is not compiled with support for ALTQ so you can't use those features.
Carry on & test your firewall is working as you expect.

0x8007000e (E_OUTOFMEMORY) while adding a firewall rule using the windows firewall COM API

Hello,
Configuration: Windows Embedded 8 64-bit.
I'm using the Windows Firewall with Advanced Security COM API. The program uses the INetFwRules interface. Basically, I'm using the following code (Form the code sample available here : http://msdn.microsoft.com/en-us/library/windows/desktop/dd339604%28v=vs.85%29.aspx.)
I get the error when performing "hr = pFwRules->Add(pFwRule);".
We can also encounter the problem when removing a rule (using pFwRules->Remove(ruleName);)
HRESULT hrComInit = S_OK;
HRESULT hr = S_OK;
INetFwPolicy2 *pNetFwPolicy2 = NULL;
INetFwRules *pFwRules = NULL;
INetFwRule *pFwRule = NULL;
long CurrentProfilesBitMask = 0;
BSTR bstrRuleName = SysAllocString(L"SERVICE_RULE");
BSTR bstrRuleDescription = SysAllocString(L"Allow incoming network traffic to myservice");
BSTR bstrRuleGroup = SysAllocString(L"Sample Rule Group");
BSTR bstrRuleApplication = SysAllocString(L"%systemroot%\\system32\\myservice.exe");
BSTR bstrRuleService = SysAllocString(L"myservicename");
BSTR bstrRuleLPorts = SysAllocString(L"135");
// Initialize COM.
hrComInit = CoInitializeEx(
0,
COINIT_APARTMENTTHREADED
// Ignore RPC_E_CHANGED_MODE; this just means that COM has already been
// initialized with a different mode. Since we don't care what the mode is,
// we'll just use the existing mode.
if (hrComInit != RPC_E_CHANGED_MODE)
if (FAILED(hrComInit))
printf("CoInitializeEx failed: 0x%08lx\n", hrComInit);
goto Cleanup;
// Retrieve INetFwPolicy2
hr = WFCOMInitialize(&pNetFwPolicy2);
if (FAILED(hr))
goto Cleanup;
// Retrieve INetFwRules
hr = pNetFwPolicy2->get_Rules(&pFwRules);
if (FAILED(hr))
printf("get_Rules failed: 0x%08lx\n", hr);
goto Cleanup;
// Create a new Firewall Rule object.
hr = CoCreateInstance(
__uuidof(NetFwRule),
NULL,
CLSCTX_INPROC_SERVER,
__uuidof(INetFwRule),
(void**)&pFwRule);
if (FAILED(hr))
printf("CoCreateInstance for Firewall Rule failed: 0x%08lx\n", hr);
goto Cleanup;
// Populate the Firewall Rule object
pFwRule->put_Name(bstrRuleName);
pFwRule->put_Description(bstrRuleDescription);
pFwRule->put_ApplicationName(bstrRuleApplication);
pFwRule->put_ServiceName(bstrRuleService);
pFwRule->put_Protocol(NET_FW_IP_PROTOCOL_TCP);
pFwRule->put_LocalPorts(bstrRuleLPorts);
pFwRule->put_Grouping(bstrRuleGroup);
pFwRule->put_Profiles(CurrentProfilesBitMask);
pFwRule->put_Action(NET_FW_ACTION_ALLOW);
pFwRule->put_Enabled(VARIANT_TRUE);
// Add the Firewall Rule
hr = pFwRules->Add(pFwRule);
if (FAILED(hr))
printf("Firewall Rule Add failed: 0x%08lx\n", hr);
goto Cleanup;
This works pretty well but, sometimes, at system startup, adding a rule ends up with the error 0x8007000e (E_OUTOFMEMORY) ! At startup, the system is always loaded cause several applications starts at the same time. But nothing abnormal. This is quite a random
issue.
According MSDN documentation, this error indicates that the system "failed to allocate the necessary memory".
I'm not convinced that we ran out of memory.
Has someone experienced such an issue? How to avoid this?
Thank you in advance.
Regards, -Ruben-

Does Windows 8 desktop have the same issue? Are you building a custom WE8S image, or are you using a full WE8S image? The reason I ask is to make sure you have the modules in the image to support the operation.
Is Windows Embedded 8.1 industry an option?
www.annabooks.com / www.seanliming.com / Book Author - Pro Guide to WE8S, Pro Guide to WES 7, Pro Guide to POS for .NET

Problem using the FederatedSearch / Result set empty

Hello, 
 
I've the following problem using the FederatedSearch: 
In my KM-Folder I've two documents. 
I created a simple search AbstractPortalComponent to search in the special KM-Folder. 
If the query is "*" I will get the right number of documents. 
But If I will access them the iterator is empty... 
Please see the code below: 
 
Best regards 
Klaus 
 
 
IIndexService indexService = (IIndexService) ResourceFactory.getInstance().getServiceFactory().getService(IServiceTypesConst.INDEX_SERVICE); 
 
SearchQueryListBuilder sqb = new SearchQueryListBuilder(); 
 
sqb.setSearchTerm(query); 
IQueryEntryList qel = sqb.buildSearchQueryList(); 
RidList ridList = new RidList(); 
ridList.add(RID.getRID(OR_KM_ROOT_PATH + "/" + OR_KM_CURRENT_PATH)); 
ridList.add(RID.getRID(OR_KM_ROOT_PATH + "/" + OR_KM_ARCHIVE_PATH)); 
IResourceContext resourceContext = new ResourceContext(user); 
IFederatedSearch federatedSearch = (IFederatedSearch) indexService.getObjectInstance(IWcmIndexConst.FEDERATED_SEARCH_INSTANCE); 
IFederatedSearch search = (IFederatedSearch) indexService.getObjectInstance(IWcmIndexConst.FEDERATED_SEARCH_INSTANCE); 
ISearchSession session = federatedSearch.searchWithSession(qel, ridList, resourceContext, null, null); 
response.write("-"+session.getTotalNumberResultKeys()); ### writes 2-ok- 
response.write("- "+session.getNumberResultKeys()); ### writes 2-ok- 
ISearchResultList sresults = session.getSearchResults(1,session.getTotalNumberResultKeys()); 
 
ISearchResultListIterator iter = sresults.listIterator(); 
response.write("> "iter.hasNext()" "); ### writes "false"!???
 
while (iter.hasNext()) 
{ 
... 
} 

The plan is to be running with more than just two sites (though at the moment I am testing with only two).
What happens is a client comes on-line and requests a list of sites from a router. It then picks one of the sites from the list and adds that as a replication site in the repmgr.
It then goes about opening up the database and doing some other bookeeping. Finally we start the replication manager and once the NEWMASTER event is recieved a sync is done.
So while this DELAYCLIENT/rep_sync is a bit overkill for the two-site test I am doing now, the design I am working towards will be a multi-site setup.

Could not initialize photoshop because of a problem using the adobe color engine (Win 7)

Was running the lastest version of Photoshop CS5 and added a second quad graphics card and 4 more monitors. Now PS will not start and I get the error message "could not initialize photoshop because of a problem using the adobe color engine."
Computer has 2 NIVDIA Quadro4 NVS420 graphics boards with 8 Samsung SyncMaster 1920x1080 monitors. If I disable 4 of the monitors CS5 starts normally. I do not have to remove the added graphics card. When I extend the desktop again to all 8 monitors I get the error above.
How do I trouble-shoot the problem? Is it Photoshop, NIVDIA or Windows 7?

Well, not exactly a full solution yet (at least for my setup), but I am certain now that this issue is (mostly) caused by nVidia's drivers. You may be able to fix your setup by simply installing the latest drivers for your NVS420 cards (266.45 for Win 7/64 rel. 01/12/2011).
Since you are using two identical cards, this could do the trick.
Caveats - Make sure you:
1. Select Custom Install, the Express Install will most likely not work properly.
2. Unselect the Audio Driver (if available), the nVidia HD(MI) Audio driver could
screw up your speech recognition (if you use it) or other audio software - it did for me.
3. Select Clean Install. If you don't, files like C:\Windows\System32\drivers\nvlddmkm.sys
and several other driver related files will not be overwritten, causing all sorts of neat effects.
4. After the Install is complete, reboot your system whether the Installer prompts you or not.
After testing various configurations, disabling two - six of my eight monitors I am at this point:
I am now using nVidia's lastest and greatest piece of crap (read driver), version 266.58, released just two days ago. After an initial snag with maximized windows extending to the bottom of the main monitor (underneath the taskbar), a re-install & reboot solved that issue.
All three driver versions tested (260.89, 260.99, 266.58) now allow me to start PhotoShop without any problems; providing I first disable the two monitors fed by my onboard graphics (nVidia 780a based), leaving me with six monitors connected to three GTS-450 cards. I can even re-enable the two other monitors once the program is open, and it continues to work fine. However, I must disconnect them again for the next start of PhotoShop.
On an interesting side note:
After disabling six monitors (leaving only two on a GTS-450), I was also able to open and run SoundBooth CS5, which previously would not open, citing the audio driver as the problem. After sucessfully starting SoundBooth I could re-enable all six other monitors (incl. onboards),
and that program now opens and works fine with all 8 monitors connected. [ODD !!!]
Other than Adobe Software, I've had only one other issue with my setup:
When playing online poker at PokerStars, occasionally and quite randomly one of multiple tables would freeze up. I'll try disabling the two onboard monitors for that program as well to see whether the random freezes stop.
Overall, while I think that Adobe produces fine software and nVidia has been in need of an overhaul for quite some time now, I also think that Adobe and nVidia software engineers need to work more closely together to ensure that problems like this don't arise in the first place after a product has been released to the public. IMHO, this is avoidable!
PS:
Here's a link to a great tool for multiple monitors, Display Fusion by Binary Fortress.
I use the free version, it allows you to do cool things like have individual wallpapers for all
your monitors, or stretch a single image across all monitors. With the Pro Version ($25),
you can also add individually customizable taskbars to each monitor, and a lot more.
http://www.displayfusion.com/

Could not complete the command because of a problem using the Adobe Color Engine

Hi all
This bizarrely started this morning - completely out of the blue - and I've no idea why.
Setup: Mac 10.8.2 / Creative Suite Premium PhotoShop CS5 extended (patched to 12.04)
Am working on images exported from LightRoom 4 (16bit A3 Pro Photo RGB PSDs) in PhotoShop CS5.
As part of my image grading process I have a PhotoShop Action that does the following: copy layer to new document (document respects all of copied layer settings) > Image > Adjustments > HDR toning > apply a certain HDR preset > copy to resultant image back to original doc > set opacity as 40%.
Totally out of the blue, after having this action for about 2 months, this morning I start getting a warning dialog of "Could not complete the command because of a problem using the Adobe Color Engine" and the action fails. The failure seems to take place at the 'make document' part of the action and seems to somehow be related to the contents of the clipboard.
I've tried trashing and re-creating the action. It works first time out fine and then - on the next image - errors again.
At present I can only safely carry out the work 'manually' by completing all the actions myself.
I can think of no settings that have changed and the OS hasn't been updated in a while.
I have found one other thread on a similar problem in PhotoShop Elements, but no definitive solution.
Any help appreciated as I have a shedload of stuff to process.
Best wishes
TP

OK: trash of prefs didn't work. Tried thrice. Re-created orig action. same problem.
BUT!
Your 'Image > Duplicate' suggestion does seem to work. If I use that in a new action as the method for creating the HDR version doc (instead of 'Select > Copy > New > Paste), it seems to work.
Will try that out this afternoon, but for now: WIN!
Many thanks for the suggestion!
TP

Problem using the Write to SGL VI and Read from SGL VI

Hello Sir, I have a problem using the Write to SGL VI. When I am trying to write the captured data using DAQ board to a SGL file, I am unable to store the data as desired. There might be some problem with the VI which I am using to write the data to SGL file. I am not able to figure out the minor problem I am facing. I am attaching a zip file which contains five files.
1) Acquire_Current_Binary_Exp.vi -> This is the VI which I used to store my data using Write to SGL file.
2) Retrive_BINARY_Data.vi -> This is the VI which I used to Read from SGL file and plot it
3) Binary_Capture -> This is the captured data using (1) which can be plotted using (2) and what I observed is the plot is different and also the time scare is not as expected.
4) Unexpected_Graph.png is the unexpected graph when I am using Write to SGL and Read from SGL to store and retrieve the data.
5) Expected_Graph.png -> This is the expected data format I supposed to get. I have obtained this plot when I have used write to LVM and read from LVM file to store and retrieve the data.
I tried a lot modifying the sub VI’s but it doesn’t work for me. What I think is I am doing some mistake while I am writing the data to SGL and Reading the data from SGL. Also, I don’t know the reason why my graph is not like (5) rather I am getting something like its in (4). Its totally different. You can also observe the difference between the time scale of (4) and (5).
Have a Good Day
Regards,
Krishna
Attachments:
LABVIEW_Files.zip ‏552 KB

As already discussed a while ago, your binary data does not contain timing information. You need to tell it the scan rate so it can reconstruct the time axis correcty.
From the data, it seems the sample file was recorded at 0.5MHz. Take the inverse and set the time increment. Voila!
Your sample file is two column data with one colum all zero. You need to set the number of columns to two, to only get the good data in channel 1.
Your acquisition program contains unecessary FOR loops, you can remove the inner loops without change in result.
It makes no sense to convert to SGL if you initialize the shift registers with an empty DBL array. You need to initialize with an empty SGL array.
(The code could be simplified quite a bit more, but this should give you some directions).
The attached zip shows some ideas (LabVIEW 7.1).
LabVIEW Champion . Do more with less code and in less time .
Attachments:
LabVIEW_FilesMOD.zip ‏195 KB

How to use the adapter framework sample_ra.

hi..
I have deployed the sample_ra adapter framework code through NWDS. Now how to use the adapter framework into my scenario.Please answer elaborately .How to call this adapter framework while configuring the communication channel.

hi
Follow these links I think it will helps you
http://www.sap-hefte.de/download/dateien/1241/140_leseprobe.pdf
NWDS and generate java proxy
http://help.sap.com/saphelp_nw2004s/helpdata/en/32/43d84072378031e10000000a1550b0/content.htm
http://msdn2.microsoft.com/en-us/library/ms944509.aspx
thanks and regards
santosh

How run reports JDE from BPEL using the Adapter for JD Edwards OneWorld?

Hi,
I need to load on line a lot of invoices from Bpel to JD Edwards using the Adapter for JD Edwards OneWorld (iWay).
Using Business Functions as Web Services it wasn't a not good idea because of this Adapter is poorly constructed and doesn't allow simultaneous loads, a memory leak occurs on JDE server. And to load them invoice by invoice is very slow.
A choice is to use Z tables and load them through schedules, but Bpel loses total control.
I heard that I can run processes reports that enable to extract the data from the Z tables and load them into JDE.
How can I execute reports JD Edwards invoked from BPEL using the Adapter for JD Edwards OneWorld?
Thanks
Francisco

Hi Dario,
BizTalk 2013 R2 (JDE LOB Adapter) is not tested against latest release of JDE EnterpriseOne 9.1.
It only supports with 8.12 and 9.0 version of JDE.
Refer the discussion here:
Integrating BizTalk with JDE EnterpriseOne
Rachit
Please mark as answer or vote as helpful if my reply does

I am having a problem using the help menu in Adobe elements 5

I am having a problem using the help menu in Adobe elements number five.
When I open the help menu, the dialogue box defaults to an unreadable display font. Is there any way to change that default font? Using the help menus to find a solution is not possible for I cannot read what it is displaying.

For product, there is an option in preferences where we can set fonts. There are two options: One is application font and other is system font. I am talking about elements 8 which I have but not sure that will solve your problem which is help related.
Hope Help in 5th version is html which opens in Browser? Please confirm.

Does anyone have problems using the highlights, shadows and sharpness edits in iphoto? Since I uploaded Mountain Lion, those editing tabs do not work!

Does anyone have problems using the highlights, shadows and sharpness controls in iphoto 11? Since I uploaded Mountain Lion on my
mac mini, those editing features no longer work!!!!

Sorry, I booted into 10.8 just to test this, but I only have iPhoto 08.

Could not complete the command because of a problem using the Adobe Colour Engine??

When I am playing back a set of recorded actions, I receive a message that says "Could not complete the command because of a problem using the Adobe Colour Engine". This occurs after I copy a part of an image to paste it onto a new file. It occurs during the "Make" part(making a new file) and I was just wondering how to fix it.

It's a known (but esoteric) bug in Photoshop CS5 and earlier, seen with grayscale images. It used to crash utterly, but after I reported it I think they patched Photoshop 12.0.something to avoid the crash. However, the step still fails when you make a new grayscale image in an action.
I saw it because I created an action to paste the clipboard into new document, all in one motion. It virtually always works as long as I have a colored image in the clipboard. But not grayscale.
One workaround, which is not particularly convenient, is to turn on prompting for the Make new image step. I haven't used this workaround for a while, but it used to be that if you confirmed the "File New" operation manually it would continue and work. I don't know if the workaround is still valid.
-Noel

Problems using the Program Monitor

Dear Premiere users,
I recently bought Adobe Premiere CS3 and i'm having problems using the Program Monitor.
I cant see anything off screen. It just wont show anything if its outside the boundaries of the screen. I can adjust the zoom level but that wont change anything even if i set it to full screen.
Another problem I'm having is that it wont show motion paths or clip handles. Even if I make a motion path in the Effects Control window it wont show the path in the Program Monitor.
I really appreciate any advice on this because it drives me crazy. I already tried installing it again but that wont solve the problem.
Thanks in advance.
Greetings,
Peter

First of all I hope you are being sarcastic Jim. Sorry for being not that clear but I'm not stupid :).
Craig Howard is right. I thought that the Program Monitor was similarly to AEFX. But I suppose I was wrong on this one? So you cant get something to display outside the image area? If I place a clip outside the project dimension it just disappears in the Program Monitor.
And about the motion paths. I thought I read in the Premiere help files that they do show up in the Program Monitor. The topic says: "Adjust position, scale, and rotation" or "Animate motion in the Program Monitor ". There are pictures over there that show clip handles and motion paths in the Program Monitor. Clicking the effect wont do anything for me. Its like my video driver cant get them to show or something.
Edit: I found a tutorial here:
http://digitalproducer.digitalmedianet.com/articles/viewarticle.jsp?id=26660&afterinter=tr ue
They are dragging frames off screen and are using the handles and borders around the frame to adjust them. So I guess it should be possible, but how?
Thanks for the help.

I have just installed Digital Editions 4.3 but am having poblems downloading digital books as I get an error message stating 'Error! Check Activation'. I have Windows 7 and didn't have any problems using the previous version of Digital Editions. Can anyon

I have just installed Digital Editions 4.3 but am having poblems downloading digital books as I get an error message stating 'Error! Check Activation'. I have Windows 7 and didn't have any problems using the previous version of Digital Editions. Can anyone advise?

Hi Siobhan ,
Please refer to the following link and see if that helps.
https://helpx.adobe.com/digital-editions/kb/error-e_act_not_ready.html
I would also like to know ,does that error message has any specific number ?
Regards
Sukrit Dhingra

Okay..I've been trying to fix this for DAYS now! When I sign in (under settings) w my new apple ID, then go to update or purchase something I cannot get the new apple ID to come up. It's still using the old one (which is disabled) ..please help!

Can someone pls help me?? Okay..I've been trying to fix this for DAYS now! When I sign in (under settings) w my new apple ID, then go to update or purchase something I cannot get the new apple ID to come up. It's still using the old one (which is disabled) ..please help!

Delete what? The ID's? They cannot be deleted - you just quit using it.
If you still have one old ID - that you have purchased content with - you are saying that the password no longer works with that ID? Did you try to reset the password for that ID?
Read this - instructions if the ID was disabled for entering the wrong password.
http://support.apple.com/kb/TS2446?viewlocale=en_US&locale=en_US
If it gets too involved - you can always contact support.
http://www.apple.com/support/appleid/
Just do not create another ID!

Problem using the adaptive firewall : "Firewall management disabled"

Similar Messages

Maybe you are looking for