With patch this time...

Zachary Palmer wrote:

> 
> Once again, that was working dandy right up until sometime recently,
> when I presumably did something stupid and broke it.  However, I have
> not touched my firewall configuration since I added those lines and
> verified that they worked (and quite successfully, too).  So I'm really
> not sure why it's not working.  The error message produced by shorewall
> check is:
> 
> ...
>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp - 110   -" Compiled
>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp 22    -" Compiled
>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp - 22   -" Compiled
>   ERROR: Invalid Mark or Mask value: -
> Terminated
>

Attached is a patch for /usr/share/shorewall/compiler that should correct the
problem. The patch is against 3.2.5 but applies to 3.2.4 with an offset.

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key


Index: compiler
===================================================================
--- compiler	(revision 4752)
+++ compiler	(working copy)
@@ -2671,9 +2671,9 @@
     #
     save_progress_message "Refreshing Traffic Control Rules..."
 
-    while read mark sources dests proto ports sports user testval; do
-	expandv mark sources dests proto ports sports user testval tos
-	rule=$(echo "$mark $sources $dests $proto $ports $sports $user $testval $tos")
+    while read mark sources dests proto ports sports user testval length tos; do
+	expandv mark sources dests proto ports sports user testval length tos
+	rule=$(echo "$mark $sources $dests $proto $ports $sports $user $testval $length $tos")
 	process_tc_rule
     done < $TMP_DIR/tcrules
 

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to