Re: [Shorewall-users] locking processes left behind

2018-07-25 Thread Matt Darfeuille
On 7/26/2018 12:56 AM, Tom Eastep wrote: > On 07/25/2018 10:14 AM, Brian J. Murrell wrote: >> On Mon, 2018-07-16 at 07:12 -0400, Brian J. Murrell wrote: >>> >>> I think I finally do have the required versions now, yes? >> >> Am I correct about having the required versions now? >> >>> However,

Re: [Shorewall-users] Zone based connection tracking

2018-07-25 Thread Tom Eastep
Naveen, You don't need 'optional' with the rules that I sent you. -Tom On 07/25/2018 11:42 AM, Naveen Neelakanta wrote: > Hi Tom,  > > That helped, I made the optional interface configuration as default.  > > #ZONE     INTERFACE       OPTIONS > inet     eth5            detect          >

Re: [Shorewall-users] locking processes left behind

2018-07-25 Thread Tom Eastep
On 07/25/2018 10:14 AM, Brian J. Murrell wrote: > On Mon, 2018-07-16 at 07:12 -0400, Brian J. Murrell wrote: >> >> I think I finally do have the required versions now, yes? > > Am I correct about having the required versions now? > >> However, as you can see above, we still have stale/orphan >>

Re: [Shorewall-users] Zone based connection tracking

2018-07-25 Thread Naveen Neelakanta
Hi Tom, That helped, I made the optional interface configuration as default. #ZONE INTERFACE OPTIONS inet eth5detect tcpflags,nosmurfs,logmartians,optional lan eth4detect tcpflags,nosmurfs,logmartians,optional lan eth0detect

Re: [Shorewall-users] locking processes left behind

2018-07-25 Thread Brian J. Murrell
On Mon, 2018-07-16 at 07:12 -0400, Brian J. Murrell wrote: > > I think I finally do have the required versions now, yes? Am I correct about having the required versions now? > However, as you can see above, we still have stale/orphan > locks/processes hanging around. If so, any ideas why stale