On 9/11/10 2:41 PM, Tom Eastep wrote: > On 9/11/10 2:26 PM, Steven Jan Springl wrote: >> On Saturday 11 September 2010 21:39:06 Tom Eastep wrote: >>> On 9/11/10 1:15 PM, Tom Eastep wrote: >>>> On 9/11/10 1:12 PM, Tom Eastep wrote: >>>>>> tcrules entry: >>>>>> >>>>>> SAME eth0 eth0 >>>>>> >>>>>> produces the following message from "shorewall start" >>>>>> >>>>>> Bad argument 'echo' >>>>>> >>>>>> >>>>>> and produces the following messages from "shorewall debug start": >>>>>> >>>>>> /var/lib/shorewall/.start: line 838: 3: Bad file descriptor >>>>>> >>>>>> ERROR: Command "/usr/local/sbin/iptables -A setsticky echo "-i eth0 >>>>>> -d -m mark --mark 0x1/0xff -m recent --name sticky002 --set" >&3" >>>>>> Failed >>>>> >>>>> Steven, >>>>> >>>>> Please verify that the attached patch corrects the problem. >>>> >>>> Please disregard that patch -- it is insufficient. >>> >>> This one "fixes" it. Specifying an OUTPUT interface in a SAME rule is >>> silly anyway. >>> >>> -Tom >>> >>> PS -- reverse echo.patch if you've applied it. >> >> Tom >> >> I now get the following error message: >> >> ERROR: Internal error in Shorewall::Providers::handle_stickiness >> at /usr/share/shorewall/Shorewall/Providers.pm line 1011 > > Did you apply both hunks? The change to Chains.pm should generate a more > readable error before the point where the internal error is produced.
Sorry -- I misunderstood. This error is occurring on
"SAME:P x.x.x.x/yy..." rules
I've reproduced it.
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Start uncovering the many advantages of virtual appliances and start using them to simplify application deployment and accelerate your shift to cloud computing http://p.sf.net/sfu/novell-sfdev2dev
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
