On 3/17/2014 5:08 AM, Kilburn Abrahams wrote:
> Hi all
> 
> Rebuilt a server with kernel 3.13. Installed the same version of
> shorewall 4.5.18 as a working server. Copied over shorewall configs.
> Restarted shorewall and this happens. Googled and could not find
> anything. Not sure how to solve this.
> 
> SBox shorewall # /etc/init.d/shorewall start
>  * Caching service dependencies
> ...                                                                           
>                    
> [ ok ]
>  * Starting shorewall ...
> iptables-restore: line 23 failed
>    ERROR: iptables-restore Failed. Input is in
> /var/lib/shorewall/.iptables-restore-input
> /usr/share/shorewall/lib.common: line 113: 10488 Terminated             
> $SHOREWALL_SHELL $script $options $@                     [ !! ]
>  * ERROR: shorewall failed to start
> 
> /var/lib/shorewall/.iptables-restore-input does indicate where the
> problem might lie.

'does' or 'does not'?

If line 23 is a COMMIT line, then you can gather additional information
using "shorewall debug start", which will give you the exact rule that
is causing the issue. You might also see something in the system log.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to