Here is another list of that debug session, having first removed all
references to my rfc1918 ipset (just in case that was a possible source
of confusion). As you can see, the same results occur; it just hits a
different ipset.
Please let me know what other information I can provide.
-------------------------------------------------------------------------
# shorewall check -d
Checking...
Loading DB routines from perl5db.pl version 1.28
Editor support available.
Enter h or `h h' for help, or `man perldebug' for more help.
Shorewall::Config::CODE(0x14d55cb8)(/usr/share/shorewall/Shorewall/Config.pm:697):
697: for ( qw/root system command files destination/ ) {
DB<1> b Shorewall::Config::IPSet_Match
DB<2> c
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Shorewall::Config::IPSet_Match(/usr/share/shorewall/Shorewall/Config.pm:2351):
2351: my $ipset = $config{IPSET} || 'ipset';
DB<2> n
Shorewall::Config::IPSet_Match(/usr/share/shorewall/Shorewall/Config.pm:2352):
2352: my $result = 0;
DB<2> n
Shorewall::Config::IPSet_Match(/usr/share/shorewall/Shorewall/Config.pm:2354):
2354: $ipset = which $ipset unless $ipset =~ '//';
DB<2> n
Shorewall::Config::IPSet_Match(/usr/share/shorewall/Shorewall/Config.pm:2356):
2356: if ( $ipset && -x $ipset ) {
DB<2> n
Shorewall::Config::IPSet_Match(/usr/share/shorewall/Shorewall/Config.pm:2369):
2369: $result;
DB<2> n
Shorewall::Config::determine_capabilities(/usr/share/shorewall/Shorewall/Config.pm:2576):
2576: $capabilities{USEPKTTYPE} =
detect_capability( 'USEPKTTYPE' ); DB<2> c
Checking /etc/shorewall/zones...
Checking /etc/shorewall/interfaces...
Determining Hosts in Zones...
Preprocessing Action Files...
Pre-processing /usr/share/shorewall/action.Drop...
Pre-processing /usr/share/shorewall/action.Reject...
Checking /etc/shorewall/policy...
Processing /etc/shorewall/initdone...
Checking /etc/shorewall/blacklist...
ERROR: ipset names in Shorewall configuration files require Ipset
Match in your kernel and iptables : /etc/shorewall/blacklist (line 28)
at /usr/share/shorewall/Shorewall/Config.pm line 786
Shorewall::Config::fatal_error('ipset names in Shorewall configuration
files require Ipset Ma...') called
at /usr/share/shorewall/Shorewall/Config.pm line 2605
Shorewall::Config::require_capability('IPSET_MATCH', 'ipset names in
Shorewall configuration files', '') called
at /usr/share/shorewall/Shorewall/Chains.pm line 2496
Shorewall::Chains::match_source_net('+dshield', 0) called
at /usr/share/shorewall/Shorewall/Chains.pm line 3439
Shorewall::Chains::expand_rule('HASH(0x15524f4c)', 0, '', '+dshield',
'', '', '-j blacklog', '', 'DROP', ...) called
at /usr/share/shorewall/Shorewall/Rules.pm line 266
Shorewall::Rules::setup_blacklist() called
at /usr/share/shorewall/Shorewall/Rules.pm line 461
Shorewall::Rules::add_common_rules() called
at /usr/share/shorewall/Shorewall/Compiler.pm line 651
Shorewall::Compiler::compiler('script', '', 'directory', '',
'verbosity', 1, 'timestamp', 0, 'debug', ...) called
at /usr/share/shorewall/compiler.pl line 111 Debugged program
terminated. Use q to quit or R to restart, use o inhibit_exit to avoid
stopping after program termination, h q, h R or h o to get additional
info. DB<2>
--------------------------------------------------------------------------
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
