# APF not functioning **URL:** \ **Category:** General Inquries\ **Created:** [February 19, 2007, 5:47am UTC](https://forums.interworx.com/t/apf-not-functioning/11436 "2007-02-19T05:47:44Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 5:47am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/1 "2007-02-19T05:47:44Z")
[LEFT]I have installed interworx, and I’m in the panel just fine… however, this is because there is no firewall currently operating, and iptables has an open rules list. In attempting to start APF, interworx does not start it (although it says it starts successfully). I tried it from ssh, and found that it was having an issue with the configuraiton, specifically at CNF\_FUNC="$FWPATH/internals/functions.apf", this was being interpreted as /internals/functions.apf, so for whatever reason the $FWPATH variable is getting destroyed before that. There are quite a few spots where this occurs. When I attempt to fix this by just simply setting a global path variable, I get a whole junkload of errors, and the firewall blocks all access (literally). Any ideas?[/LEFT] ---
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 5:53am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/2 "2007-02-19T05:53:10Z")
Config file of Apf is in /etc/apf/conf.apf Take a look in it Also try : service apf start And see the result Pascal ---
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 5:55am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/3 "2007-02-19T05:55:51Z")
[quote=pascal;11589]Config file of Apf is in /etc/apf/conf.apf Take a look in it Also try : service apf start And see the result Pascal[/quote] I’ve configured APF before so I know that, and I’ve tried starting it on its own and going through the configuration file for the errors… I’ve even restored it to the RPM defaults (which are included with the iworx rpm, they looked identical). So… flat apf, straight from iworx, still not starting 😮 ---
**Author:** ![IWorx-Socheat](https://forums.interworx.com/letter_avatar_proxy/v4/letter/i/ed655f/32.png) [@IWorx-Socheat](https://forums.interworx.com/u/IWorx-Socheat)\ **Post date:** [February 19, 2007, 5:59am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/4 "2007-02-19T05:59:25Z")
A few questions: 1.) Are you on a VPS? 2.) Do you get any error messages on the console when restarting APF? Be sure to put APF in debug mode when you do restart. 3.) Do you have SELinux disabled? Socheat ---
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 6:04am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/5 "2007-02-19T06:04:55Z")
[quote=IWorx-Socheat;11591]A few questions: 1.) Are you on a VPS? 2.) Do you get any error messages on the console when restarting APF? Be sure to put APF in debug mode when you do restart. 3.) Do you have SELinux disabled? Socheat[/quote] 1. No 2. Yea, I stated them above. 3. Not sure, but no? I havent disabled it, and I wasnt aware I even had it installed. So, unless it requires me to explicitly enable it, I haven’t touched it. ---
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 6:05am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/6 "2007-02-19T06:05:47Z")
After giving static paths to the errored line (makign it /etc/apf/internals/functions.apf) i get: /etc/apf/internals/functions.apf: line 27: $IPTLOG: ambiguous redirect /etc/apf/internals/functions.apf: line 27: $IPTLOG: ambiguous redirect /etc/apf/internals/functions.apf: line 27: $IPTLOG: ambiguous redirect /usr/local/sbin/apf: line 65: /vnet/vnetgen: No such file or directory /usr/local/sbin/apf: line 67: /firewall: No such file or directory /etc/apf/internals/functions.apf: line 27: $IPTLOG: ambiguous redirect ---
**Author:** ![IWorx-Socheat](https://forums.interworx.com/letter_avatar_proxy/v4/letter/i/ed655f/32.png) [@IWorx-Socheat](https://forums.interworx.com/u/IWorx-Socheat)\ **Post date:** [February 19, 2007, 6:26am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/7 "2007-02-19T06:26:48Z")
Open a ticket, you’ve got me really curious now. 🙂 We’ll need your root login information. Socheat ---
**Author:** ![system](https://forums.interworx.com/uploads/default/original/2X/4/40ab17cc34b792a0172b48ad1333b9ba9299a9a1.png) [@system](https://forums.interworx.com/u/system)\ **Post date:** [February 19, 2007, 6:30am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/8 "2007-02-19T06:30:54Z")
Created. 🙂 I’ve also left the config files alone, however, you might be wary of starting APF successfully… I’ve done it twice now and I’ve had to VPN in and fix it. I may be going to sleep soon 🙂 ---
**Author:** ![IWorx-Socheat](https://forums.interworx.com/letter_avatar_proxy/v4/letter/i/ed655f/32.png) [@IWorx-Socheat](https://forums.interworx.com/u/IWorx-Socheat)\ **Post date:** [February 19, 2007, 7:06am UTC](https://forums.interworx.com/t/apf-not-functioning/11436/9 "2007-02-19T07:06:35Z")
This issue was resolved. The problem was that OffbeatAdam had his public interface on eth1, and APF, by default, only allows traffic on one interface. There’s a trusted interface directive, TIF="", a few lines down that needed to be set to eth1. I force re-installed the InterWorx APF RPM, set TIF=“eth1”, and then APF started up without problems. Socheat