On 3/5/12 1:07 PM, "Tom Eastep" <[email protected]> wrote:
>On 03/05/2012 12:36 PM, Ed W wrote: >> Hi >> >>>> Right now I have the following (shall I build a minimal failing case >>>>and >>>> email the config?) >>> Be sure to send a capabilities file as well. >> >> Near as I can tell, a very minimal rule and masq is triggering this. I >> do have an unusual interfaces file though? >> >> >> Minimal config here: >> http://www.mailasail.com/w/uploads/Support/shorewall.broken.tar.gz >> > >a) I took the above configuration and added the attached capabilities >file which I think matches your system. > >b) I set CONFIG_PATH="/usr/share/shorewall" so as not to include >anything from /etc/shorewall/ > >c) I added this single entry to the params file: > > LOC_IF=br0 > >The compiled firewall script contains this ruleset for stopping the >firewall: > ># ># Generated by Shorewall 4.5.0.1 - Mon Mar 5 13:03:19 2012 ># >*raw >:PREROUTING ACCEPT [0:0] >:OUTPUT ACCEPT [0:0] >COMMIT >*nat >:PREROUTING ACCEPT [0:0] >:OUTPUT ACCEPT [0:0] >:POSTROUTING ACCEPT [0:0] >COMMIT >*mangle >:PREROUTING ACCEPT [0:0] >:INPUT ACCEPT [0:0] >:FORWARD ACCEPT [0:0] >:OUTPUT ACCEPT [0:0] >:POSTROUTING ACCEPT [0:0] >COMMIT >*filter >:INPUT DROP [0:0] >:FORWARD DROP [0:0] >:OUTPUT ACCEPT [0:0] >-A INPUT -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT >-A INPUT -i br0 -j ACCEPT >-A INPUT -i lo -j ACCEPT >-A FORWARD -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT >-A FORWARD -i br0 -o br0 -j ACCEPT >COMMIT > >So I am clearly not able to reproduce the problem with the information >provided. >\ The problem was traced to Ed's params file which contained DEBUG=0. Will be corrected in the next 4.5.1 Beta or RC. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car www.shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Try before you buy = See our experts in action! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-dev2 _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
