Package: shorewall
Version: 3.2.4-1
Severity: normal
After upgrading from a shorewall 3.0.?? to the last version 3.2.4-1, I
can't used any space in LOGFORMAT (in shorewall.conf)
I used previously the "suggested default" LOGFORMAT="fp=%s:%d a=%s "
which generate the error messages :
$ /etc/init.d/shorewall restart
Restarting "Shorewall firewall": not done (check
/var/log/shorewall-init.log).
$ tail /var/log/shorewall-init.log
Loading Modules...
Initializing...
Clearing Traffic Control/QOS
Deleting user chains...
Enabling Loopback and DNS Lookups
Try `iptables -h' or 'iptables --help' for more information.
Bad argument `a=DROP'
ERROR: Command "/sbin/iptables -A logdrop -j LOG --log-level info
--log-prefix fp=logdrop:1 a=DROP " Failed
IP Forwarding Enabled
/sbin/shorewall: line 780: 25629 Terminated
$SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart
And disallow shorewall to start correctly.
>From my understanding there is some missing quote around the part :
"fp=logdrop:1 a=DROP "
Changing the LOGFORMAT to
LOGFORMAT="fp=%s:%d_a=%s " solved the issue (but this is not a
real solution).
David Vernazobres
-- System Information:
Debian Release: testing/unstable
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1,
'experimental')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.17-piv-vs2.0.2-ebb
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Versions of packages shorewall depends on:
ii debconf [debconf-2.0] 1.5.8 Debian configuration management sy
ii iproute 20061002-2 Professional tools to control the
ii iptables 1.3.5.0debian1-1 Linux kernel 2.4+ iptables adminis
Versions of packages shorewall recommends:
ii wget 1.10.2-2 retrieves files from the web
-- debconf information:
shorewall/upgrade_20_22:
shorewall/upgrade_14_20:
shorewall/upgrade_to_14:
shorewall/warnrfc1918:
* shorewall/warn_about_klogd_floods:
shorewall/dont_restart:
* shorewall/major_release: true
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
