Mekabe Ramein wrote:
> Hi,
> 
> I am moving my old Shorewall configuration to a new box with new
> version of Shorewall.
> Unfortunately I have a problem starting it if I keep the "ULOG"
> parameter in the following line of rules file.
> 
> REDIRECT:ULOG   wall    82      tcp     80
> 
> If I remove the ":ULOG" from that line, Shorewall starts successfully.
> 
> I am attachig the start trace "shorewall -vv start" output to this email.
> 
> The given error is :
> iptables v1.3.5: Need TCP or UDP with port specification
> Try `iptables -h' or 'iptables --help' for more information.
>    ERROR: Command "/sbin/iptables -A log0 -j REDIRECT --to-port 82" Failed
> 
> 
> What is the problem ?

The attached patch should correct the problem.

        patch /usr/share/shorewall/Shorewall/Chains.pm < logging.diff

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Chains.pm b/Shorewall/Perl/Shorewall/Chains.pm
index ed31675..f068006 100644
--- a/Shorewall/Perl/Shorewall/Chains.pm
+++ b/Shorewall/Perl/Shorewall/Chains.pm
@@ -2816,7 +2816,7 @@ sub expand_rule( $$$$$$$$$$;$ )
 					       'add',
 					       '' );
 
-				add_rule( $chainref, $target );
+				add_rule( $chainref, $exceptionrule . $target );
 			    } else {
 				log_rule_limit( 
 					       $loglevel ,
------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to