On 04/05/2011 07:57 AM, Cameron, George G. wrote:
>
> General status
> ==============
> Shorewall has been working fine, filtering as expected, external ssh and
> other connections to workstation working, all functions appear normal,
> until I wanted to add a REDIRECT command so that ssh connections could
> be made to the machine on tcp port 1234 in addition to the usual port 22
>
> Minimal rules file used in testing REDIRECT
> ===========================================
> #SECTION ESTABLISHED
> #SECTION RELATED
> SECTION NEW
> #
> ACCEPT          net             $FW             tcp     22
> ACCEPT          net             $FW             tcp     1234
> REDIRECT        net             22              tcp     1234
>
> Observed behaviour
> ==================
> 1. Compiler (optimiser?) reports error on line 862 of Chains.pm, shown
> below:
>
> # /sbin/shorewall restart
> Compiling...
>
> (lines omitted for clarity)
>
> Applying Policies...
> Generating Rule Matrix...
> Optimizing Ruleset...
> Can't use an undefined value as an ARRAY reference at
> /usr/share/shorewall/Shorewall/Chains.pm line 862.
> Restarting Shorewall....
> Initializing...

I'm unable to reproduce this failure and REDIRECT works fine here. Please:

1. shorewall show -f capabilities > /etc/shorewall/caps
2. tar -xf shorewall.tar /etc/shorewall
3. Send me the tarball

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to