On 8/17/2014 8:49 PM, Tom Eastep wrote:
> On 8/17/2014 8:21 PM, PGNd wrote:
>> On Sun, Aug 17, 2014, at 08:03 PM, Tom Eastep wrote:
>>>> Does shorewall-init need to be installed on each remote target, or only on 
>>>> the administrative machine?
>>
>>> Shorewall-init must be installed on the firewall systems and the
>>> PRODUCTS are those installed on the firewall systems.
>>
>> That's now clear.  Thanks.
>>
>> Must 'shorewall' & 'shorewall6' pkgs, then, be also installed on all systems 
>> that have shorewall-init installed?
>>
>> Or is the 'Requires' install dependency for both shorewall/shorewall6 by the 
>> distro packaging incorrect, and just shorewall-lite+shorewall-init 
>> sufficient?
> 
> The packages that must be installed are those that are listed in the
> PRODUCTS setting. And I don't believe that any package manager can
> express that type of dependency since the end user configures PRODUCTS
> after Shorewall-init is installed.

I suppose that each of the four fireall packages could supply
'shorewall-firewall', then shorewall-init could depend on
'shorewall-firewall'. That way, the dependency would be satisfied so
long as shorewall, shorewall6, shorewall-lite or shorewall6-lite was
installed. But the real dependency is still determined by the PRODUCTS
settings.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to