> tcrules entry:
> 
> SAME  eth0  eth0
> 
> produces the following message from "shorewall start"
> 
> Bad argument 'echo'
> 
> 
> and produces the following messages from "shorewall debug start":
> 
> /var/lib/shorewall/.start: line 838: 3: Bad file descriptor
> 
>    ERROR: Command "/usr/local/sbin/iptables -A setsticky echo "-i eth0 -d  -m 
> mark --mark 0x1/0xff -m recent --name sticky002 --set" >&3" Failed

Steven,

Please verify that the attached patch corrects the problem.

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Providers.pm 
b/Shorewall/Perl/Shorewall/Providers.pm
index 1298544..b823da6 100644
--- a/Shorewall/Perl/Shorewall/Providers.pm
+++ b/Shorewall/Perl/Shorewall/Providers.pm
@@ -1004,13 +1004,18 @@ sub handle_stickiness( $ ) {
                        $rule1 =~ s/-j sticky/-m mark --mark $mark\/$mask -m 
recent --name $list --set/;
                    }
 
-                   $rule1 =~ s/-A //;
-
-                   add_rule $chainref, $rule1;
+                   if ( $rule1 =~ s/^-A // ) {
+                       add_rule $chainref, $rule1;
+                   } else {
+                       add_commands $chainref, $rule1;
+                   }
 
                    if ( $rule2 ) {
-                       $rule2 =~ s/-A //;
-                       add_rule $chainref, $rule2;
+                       if ( $rule2 =~ s/^-A // ) {
+                           add_rule $chainref, $rule2;
+                       } else {
+                           add_commands $chainref, $rule2;
+                       }
                    }
                }
            }
@@ -1031,13 +1036,18 @@ sub handle_stickiness( $ ) {
                        $rule1 =~ s/-j sticko/-m mark --mark $mark -m recent 
--name $list --rdest --set/;
                    }
 
-                   $rule1 =~ s/-A //;
-
-                   add_rule $chainref, $rule1;
+                   if ( $rule1 =~ s/-A // ) {
+                       add_rule $chainref, $rule1;
+                   } else {
+                       add_commands $chainref, $rule1;
+                   }
 
                    if ( $rule2 ) {
-                       $rule2 =~ s/-A //;
-                       add_rule $chainref, $rule2;
+                       if ( $rule2 =~ s/-A // ) {
+                           add_rule $chainref, $rule2;
+                       } else {
+                           add_commands $chainref, $rule2;
+                       }
                    }
                }
            }

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Start uncovering the many advantages of virtual appliances
and start using them to simplify application deployment and
accelerate your shift to cloud computing
http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to