Steven Jan Springl wrote:
> On Thursday 10 May 2007 16:32, Tom Eastep wrote:
>> Steven Jan Springl wrote:
>>> Tom
>>>
>>> Placing a COMMENT line in the policy file produces the following errors:
>>>
>>> Use of uninitialized value in string eq
>>> at /usr/share/shorewall-perl/Shorewall/Policy.pm line 145, <$currentfile>
>>> line 13.
>>>
>>> Use of uninitialized value in string eq
>>> at /usr/share/shorewall-perl/Shorewall/Policy.pm line 146, <$currentfile>
>>> line 13.
>>>
>>>    ERROR: Undefined zone COMMENT : /etc/shorewall/policy ( line 13 )
>> Good afternoon Steven,
>>
>> I believe all of your reported problems to be fixed in revision 6317.
>>
>> -Tom
> 
> Good morning Tom.
> 
> That has fixed the problems that I reported today.
> 
> 
> However shorewall-perl accepts the following rules:
> 
> ACCEPT  lan  $FW  tcp  22
> SECTION NEW
> ACCEPT  lan  $FW  tcp 21
> 
> Shorewall-shell produces the following message:
> 
> Duplicate or out of order SECTION NEW.

Fixed in revision 6318.
> 
> 
> There is also the issue that I reported last night with the following rule:
> 
> Limit:none:sjs,x,y  lan  fw  tcp  22
> 
> produces the following message:
> 
> Argument "x" isn't numeric in addition (+) 
> at /usr/share/shorewall-perl/Shorewall/Actions.pm line 595.
> 
> 
> and generates the following iptables entry:
> 
> 
> -A %Limit -m recent --name sjs --update --seconds y --hitcount 1 -j %Limit%

This is also fixed in revision 6318. Note, however, that the diagnostic
message doesn't include the file name and line number of the erroneous rule;
in the current implementation (both compilers), the parameters to an action
aren't examined until the action chain(s) are being generated.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to