On 02/17/2013 06:09 PM, Grant wrote:
>>> I'm a little puzzled by all of this because shorewall seems to work
>>> fine and at least some of the errors reference stuff I know I'm not
>>> using.
>>
>> Those are harmless -- they are produced when Shorewall is probing your
>> system to determine its capabilities. You can eliminate them (and speed up
>> start/restart) by using a capabilities file.
>>
>> Shorewall show -f capabilities > /etc/shorewall/capabilities.
>>
>> Now, the compiler will simply read the capabilities file rather than probe.
> 
> Thank you, that's perfect.  Is there a good way to determine which
> kernel options I need for my shorewall config?  I'm sure I have a lot
> of stuff compiled in that I don't need.

If you use a modular kernel and a capabilities file, then simply re-boot
and see which modules are loaded.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
The Go Parallel Website, sponsored by Intel - in partnership with Geeknet, 
is your hub for all things parallel software development, from weekly thought 
leadership blogs to news, videos, case studies, tutorials, tech docs, 
whitepapers, evaluation guides, and opinion stories. Check out the most 
recent posts - join the conversation now. http://goparallel.sourceforge.net/
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to