On 11/09/14 05:49, Tom Eastep wrote: > On 9/10/2014 12:45 AM, Tom Robinson wrote: >> # shorewall version >> 4.5.20 >> CentOS 5.10 >> >> Hi, >> >> I hope that I'm just being completely blinkered by something and an idiot. >> Maybe someone can >> enlighten me. Please hit me with a clue stick! >> >> I don't understand why, when I've set ACCOUNTING_TABLE=mangle in >> /etc/shorewall/shorewall.conf: >> >> # grep '^ACCOUNTING_TABLE' /etc/shorewall/shorewall.conf >> ACCOUNTING_TABLE=mangle >> >> I get this error when checking shorewall: >> >> # shorewall check >> Checking... >> Processing /etc/shorewall/params ... >> Processing /etc/shorewall/shorewall.conf... >> Loading Modules... >> Checking /etc/shorewall/zones... >> Checking /etc/shorewall/interfaces... >> Checking /etc/shorewall/hosts... >> Determining Hosts in Zones... >> Locating Action Files... >> Checking /etc/shorewall/policy... >> Running /etc/shorewall/initdone... >> Adding Anti-smurf Rules >> Adding rules for DHCP >> Checking TCP Flags filtering... >> Checking Kernel Route Filtering... >> Checking Martian Logging... >> Checking /etc/shorewall/tcinterfaces... >> Checking /etc/shorewall/tcpri... >> Checking /etc/shorewall/masq... >> Checking MAC Filtration -- Phase 1... >> Checking /etc/shorewall/blrules... >> Checking /etc/shorewall/rules... >> Checking MAC Filtration -- Phase 2... >> Applying Policies... >> Checking /usr/share/shorewall/action.Reject for chain Reject... >> Checking /usr/share/shorewall/action.Broadcast for chain Broadcast... >> Checking /usr/share/shorewall/action.Drop for chain Drop... >> Checking /etc/shorewall/accounting... >> Use of uninitialized value in string eq at >> /usr/lib/perl5/vendor_perl/5.8.8/Shorewall/Accounting.pm >> line 126, <$currentfile> line 13. >> ERROR: The PREROUTING SECTION is not allowed when ACCOUNTING_TABLE=filter >> /etc/shorewall/accounting (line 13) >> >> What am I missing? >> > You're missing nothing -- my bad. > > Patch attached.
Thanks Tom, I was starting to believe the worst for my own sanity! ;-)
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
