On Fri, 2011-08-19 at 18:32 +0100, Ed W wrote: > On 19/08/2011 18:25, Ed W wrote: > > > > If I check /var/lib/shorewall/firewall I see that the "not Added" comes > > from an "if" here: > > > > if [ -n "$SW_PPP1_IS_USABLE" ]; then > > Aha, I see the function: > > detect_configuration() > > has this: > > SW_PPP_IS_USABLE= > > for interface in $(find_all_interfaces1); do > case "$interface" > in > > ppp*) > if [ -z "$SW_PPP_IS_USABLE" ]; then > if interface_is_usable $interface; then > > SW_PPP_IS_USABLE=Yes > fi > fi > > > The problem seems to be that it iterates over all ppp* devices, but sets > the variable _PPP_, later it tests for _PPPx_ Ed,
You can work around this by configuring your net interfaces as: #ZONE INTERFACE BROADCAST OPTIONS net ppp0 detect tcpflags,nosmurfs,optional net ppp1 detect tcpflags,nosmurfs,optional net ppp+ detect tcpflags,nosmurfs And by adding this to your policy file (before any net->all policy): #SOURCE DEST POLICY LOG LEVEL LIMIT:BURST net net NONE -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Get a FREE DOWNLOAD! and learn more about uberSVN rich system, user administration capabilities and model configuration. Take the hassle out of deploying and managing Subversion and the tools developers use with it. http://p.sf.net/sfu/wandisco-d2d-2
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
