Red Hat Bugzilla – Bug 123
netstat -M problem
Last modified: 2010-08-11 01:23:16 EDT
Running "netstat -M" reports:
netstat.c: feature `FW_MASQUERADE' not supported.
Please recompile `net-tools' with newer kernel source or
Enabled HAVE_FW_MASQUERADE in dist-6.0/net-tools-1.48-1.
SELinux is preventing the /usr/sbin/dovecot (dovecot_t) from binding to port
SELinux has denied the /usr/sbin/dovecot from binding to a network port
10143 which does not have an SELinux type associated with it. If
/usr/sbin/dovecot is supposed to be allowed to listen on this port, you can
use the semanage command to add this port to a inetd_child_port_t type. If
you think this is the default please file a
http://bugzilla.redhat.com/bugzilla/enter_bug.cgi against the selinux-policy
package. If /usr/sbin/dovecot is not supposed to bind to this port, this
could signal a intrusion attempt.
If you want to allow /usr/sbin/dovecot to bind to this port semanage port -a
-t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is tcp or udp.
i am redhat 5 ,and postfix mail,I try allowing:
semanage port -a -t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is tcp
semanage port -a -t inetd_child_port_t -p PROTOCOL 10143 Where PROTOCOL is udp
but it isn't suport for the command
how can I do it ?
answer to my mail:email@example.com