On 6/20/2014 11:03 AM, Tornhoof wrote:
> Hi, I previously used (4.5.x, 4.6.0) the following Portknocking
> configuration (from here http://shorewall.net/Events.html):

> After updating to 4.6.1.1, I had the following warnings:
> Jun 20 18:27:34    WARNING: The destination zone (loc) is ignored in
> DNAT rules /etc/shorewall/rules (line 30)
> I had to change the DNAT- line and remove the loc:
> 
> You might wan to change your example at
> http://shorewall.net/PortKnocking.html and remove the loc: in the DNAT-
> line.

I made similar changes globally recently, but I seem to have neglected
to upload the modified copy of that page to shorewall.org. It is now done.

> 
> I also received the following error:
> Jun 20 18:27:35    ERROR: -j is only allowed when the ACTION is INLINE
> with no parameter /usr/share/shorewall/action.IfEvent (line 139)
>       from /etc/shorewall/action.SSHKnock (line 8)
>       from /etc/shorewall/rules (line 31)
> 
> I switched to the deprecated manual chain example http://shorewall.neill
> t/PortKnocking.html to get my PortKnocking working again.
> 
> I would still prefer to use the Events system, how can I use get around
> this error?

Please recreate this failure but use 'shorewall check -T', and forward
the complete error output.

Thanks,
-Tom
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions
Find What Matters Most in Your Big Data with HPCC Systems
Open Source. Fast. Scalable. Simple. Ideal for Dirty Data.
Leverages Graph Analysis for Fast Processing & Easy Data Exploration
http://p.sf.net/sfu/hpccsystems
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to