apf iptables v1.4.7: option `--set-tos' requires an argument

[ionuts71]

Hello,
I have the following problem:
Clean install of CentOS-6.3-x86_64-minimal-EFI and Plesk 11.0.9 following the steps from HOW-TO Setup a PLESK Dedicated Server.

Q After installing APF firewall (step 9), when:

# /etc/apf/apf -s

I have the following error:

iptables v1.4.7: option `--set-tos' requires an argument
Try `iptables -h' or 'iptables --help' for more information.
iptables v1.4.7: option `--set-tos' requires an argument
Try `iptables -h' or 'iptables --help' for more information.

Why? Any solution?
Thank you in advance.

[prupert]

Looking at some of the commands this howto seems outdated, makes some very odd assumptions and choices, and lacks a lot of explanation for users unaware of what scripts they are executing as root. In other words you shouldn't just follow everything that's listed unless you know what you're doing. Why didn't you go with the Plesk autoinstaller?

[ionuts71]

It is not a problem of "How To" procedure. The manual is quite uptodate (last update on 24 October 2012) and it has been compiled with the help of the "atomicrocketturtle" from atomicorp.com. Plesk is installed and is working.
The only problem appears to be with APF firewall, when I run /etc/apf/apf -s command.
The problem comes either from incompatibility of APF firewall with version of iptables

[mikeshinn]

Keep in mind though that we have nothing to do with the APF firewall, and did not write that documentation. We dont even use APF.

[faris]

We use APF on most of our servers, including all those running ASL. It works very well in conjunction with the blacklisting and shunning that various components of ASL offer, as long as you make one small configuration change (I posted it in the forum somewhere -- search for "apf" and my username.

We use version 9.7 under Centos 5 and Centos 6 with no issues.

It might be best to check your apf configuration, in particular anything related to TOS.