[EMAIL PROTECTED] wrote:
> On 15 May 2007 at 12:22, Tom Eastep wrote:
>
>> [EMAIL PROTECTED] wrote:
>>
>>> I am not using LDAP. This has me completely puzzled. I guess I must
>>> be a talented fool. Over the past several years I have installed and
>>> run Shorewall on a couple dozen machines and never had any problem
>>> like this.
>> Have you tried tracing 'shorewall start' to see where it is hanging?
>>
>
> Okay, I finally got a trace.
>
>
> .
> .
> .
> + echo 'Setting up SMURF control...'
> Setting up SMURF control...
> + do_log_rule_limit info smurfs smurfs DROP '' '' -A -s logmartians
> + local level=info
> + local chain=smurfs
> + local displayChain=smurfs
> + local disposition=DROP
> + local rulenum=
> + local limit=
> + local tag=
> + local command=
> + local prefix
> ++ chain_base smurfs
> ++ local c=smurfs
> ++ true
> ++ case $c in
> ++ echo smurfs
> ++ return
> + local base=smurfs
> + local pf
> + limit=
> + tag=
> + command=-A
> + shift 7
> + '[' -n '' -a -n '' ']'
> + '[' -n '' ']'
> ++ printf Shorewall:%s:%s: smurfs DROP
> + prefix=Shorewall:smurfs:DROP:
> + '[' 22 -gt 29 ']'
> + case $level in
> + /usr/sbin/iptables -A smurfs -s logmartians -j LOG --log-level info
> --log-prefix Shorewall:smurfs:DROP:
> iptables v1.3.7: host/network `logmartians' not found
> Try `iptables -h' or 'iptables --help' for more information.
> + '[' 2 -ne 0 ']'
> + '[' -z '' ']'
> + stop_firewall
> + case $COMMAND in
> + set +x
> Processing /etc/shorewall/stop ...
> IP Forwarding Enabled
> Processing /etc/shorewall/stopped ...
> /sbin/shorewall: line 251: 6313 Terminated
> ${VARDIR}/.start $debugging start
>
>
> After some investigation and experementing, I discovered that the
> problem was a missing BROADCAST parameter in interfaces.So in other words, the problem was nothing like you originally reported. There was no hang -- 'shorewall start' was simply failing and the firewall was being put in the 'stopped' state. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
