John McMonagle wrote:
> On Thursday 03 September 2009 10:58:56 am Tom Eastep wrote:
>> John McMonagle wrote:
>>> In the openwrt packages there is:
>>> shorewall-common_4.2.4-1_mipsel.ipk
>>> shorewall-lite_4.0.12-1_mipsel.ipk
>>> shorewall-shell_4.2.4-1_mipsel.ipk
>>>
>>> I'm thinking of using shorewall-lite.
>>> The version of shorewall-lite is a little older.
>>> Do I need to use the same version  of shorewall to make it's
>>> configuration or can I use a newer version?
>> We highly recommend using the same version of -lite that is used to
>> create the firewall script. We have certainly never tested the above
>> combination of components.
>>
>> -Tom
> 
> Tom
> 
> Is it likely that one can just install the shorewall-lite from tar in openwrt?
> If so is there a list of dependencies?

Shorewall-lite has the same dependencies as Shorewall-common. If you
install the shorewall-lite tarball, you will probably want to create
/etc/shorewall/vardir and change the VARDIR to a directory that OpenWRT
preserves between reloads. VARDIR is normally /var/lib/shorewall-lite
but given that /var and /tmp are synonymous on OpenWRT, the firewall
script is lost at each reload with that default setting.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to