On 09/29/2015 03:17 PM, Erich Titl wrote: > Hi Folks > > Am 29.09.2015 um 22:32 schrieb Erich Titl: >> Hi Folks >> >> I seem to be stuck in my 5_2 attempts :-( >> >> shorewall refuses to start and I have difficulties understanding why. I >> can see there are a number of iptables related modules missing > > I checked the sha sums of all files which I would think are relevant for > my installation > linux, modules.sqfs, iptables, libnetfilter stuff... > > They all match the ones from the 5.2 geode tarball at sourceforge, so I > am pretty sure there is no mismatch there > > I am observing the following > > [ 46.352907] nf_conntrack version 0.5.0 (4002 buckets, 16008 max) > [ 46.678087] xt_CT: No such helper "tftp" > [ 46.711720] xt_CT: No such helper "tftp-0" > [ 46.745385] xt_CT: No such helper "RAS" > [ 46.899835] xt_CT: No such helper "snmp" > [ 46.933877] xt_CT: No such helper "amanda" > [ 47.025431] xt_CT: No such helper "sane" > [ 47.060872] xt_CT: No such helper "sane-0" > [ 47.097270] xt_CT: No such helper "netbios-ns" > [ 47.132871] xt_CT: No such helper "irc" > [ 47.169289] xt_CT: No such helper "irc-0" > > This appears to come from missing helpers for nf_conntrack. I have set > AUTOHELPERS=Yes > in shorewall.conf, so shorewall is supposed to load helpers when needed. > > Any bright ideas welcome
AUTOHELPERS=Yes doesn't cause helpers to be loaded automatically, unless module autoloading is enabled. It rather associates each helper with its standard protocols and ports -- see the /etc/shorewall/conntrack file. The standard /usr/share/shorewall/helpers file should cause them to be loaded however, provided that the setting of MODULE_SUFFIX in shorewall.conf is correct. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ leaf-devel mailing list leaf-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-devel
