Hello,

  The idea in using 'shorewall refresh' would be to re-apply an existing TC 
configuration.  In other words, 'shorewall restart' was already executed (and 
included a TC config), and sometime later, a 'refresh' would be done, using the 
same config files.  The problem seems to be that the 'refresh' command does nto 
seem to accept a directory for the config files, like the 'restart' command 
does.  Eg., given s set of config files in /tmp/shorewall/ :

# shorewall restart /tmp/shorewall
Compiling...
[...]
Processing /etc/shorewall/started ...
done.

# shorewall refresh /tmp/shorewall
Compiling...
Loading Modules...
   ERROR: The 'zones' file does not exist or has zero size

Maybe it does not take any param in this case and works with
files present in /var/.  The documentation surely suggests this
for re-applying tcrules.

# shorewall refresh               
Compiling...
Loading Modules...
   ERROR: The 'zones' file does not exist or has zero size

Surely enough, if the config files ar ecopied into the standard
location...:

# cp /tmp/shorewall/* /etc/shorewall/
# shorewall refresh 
Compiling...
Running iptables-restore...
done.

Would it be possible to have the refresh command also take a
directory as a parameter ?

Thanks.
------------------------------------------------------------------------------
Live Security Virtual Conference
Exclusive live event will cover all the ways today's security and 
threat landscape has changed and how IT managers can respond. Discussions 
will include endpoint security, mobile security and the latest in malware 
threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to