On Mon, 2007-30-04 at 11:53 -0700, Tom Eastep wrote:
> 
> There is no reason to have the capabilities file resident on the Shorewall
> Lite firewall system.

The following patch to 3.4.2 should take care of this:

--- shorewall.dist      2007-04-30 14:59:14.000000000 -0400
+++ shorewall   2007-04-30 14:59:15.000000000 -0400
@@ -986,8 +986,7 @@
        fi

        progress_message "Getting Capabilities on system $system..."
-       if ! ssh [EMAIL PROTECTED] "MODULESDIR=$MODULESDIR 
MODULE_SUFFIX=\"$MODULE_SUFFIX\" IPTABLES=$IPTABLES 
/usr/share/shorewall-lite/shorecap > ${LITEDIR}/capabilities" || \
-          ! scp [EMAIL PROTECTED]:${LITEDIR}/capabilities $directory; then
+       if ! ssh [EMAIL PROTECTED] "MODULESDIR=$MODULESDIR 
MODULE_SUFFIX=\"$MODULE_SUFFIX\" IPTABLES=$IPTABLES 
/usr/share/shorewall-lite/shorecap" > $directory/capabilities; then
            fatal_error "ERROR: Capturing capabilities on system $system failed"

        fi
     fi

Cheers,
b.

-- 
My other computer is your Microsoft Windows server.

Brian J. Murrell

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to