Hi

> Which distribution? Which Shorewall version?

lsb_release -dr
        Description:    openSUSE 13.1 (Bottle) (x86_64)
        Release:        13.1

shorewall-lite version
        4.6.3.3

> Shorewall-init must start before networking

yep

> in your configuration, it will stop shorewall-lite and shorewall6-lite.

yep

> So the fact that your system 'heals itself' is no mystery at all,
> given that both services are started later after networking has been started.

Iiuc, that clarifies order, but not dependency.  And doesn't explain the 
shorewall-init.service fail.

But ...

> So you need to understand why 'stop' fails when openvpn isn't started.

... this might.  With systemd deps -- I'd thought I'd prevented that.  
Apparently not.

> I believe that I see the problem -- it was introduced in Shorewall 4.6.3.
> 
> Please see if the attached patch allows Shorewall-init to start correctly.

Trying it now ...

Thanks.

------------------------------------------------------------------------------
Want excitement?
Manually upgrade your production database.
When you want reliability, choose Perforce
Perforce version control. Predictably reliable.
http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to