matt darfeuille <[email protected]> wrote:

> Normally this error is triggered by one of the following files not 
> being properly configured:
> zones interfaces policy rules

Not on Debian. The message is Debian specific and states exactly where to go to 
find the answer.

>> Oct 22 10:07:32 EMPVL0114254 shorewall [10916]: Please read about 
>> Debian specific customization in 
>> Oct 22 10:07:32 EMPVL0114254 shorewall [10916]: 
>> /usr/share/doc/shorewall/README.Debian.gz. 

At the top of that file is the text :

> 1. AUTOMATIC STARTUP
> --------------------
> 
> In order to avoid the startup of the firewall on an unconfigured machine,
> automatic startup, on boot, is disabled by default. To enable it just edit the
> file /etc/default/shorewall and set the "startup" variable to 1.

FWIW I agree with the approach they have taken. There is no sane and generally 
applicable default configuration*, so the sensible thing to do is to issue a 
warning to the user/admin. You can set the startup variable to 1 without doing 
any config, Shorewall will then issue it's own complaints when it tries to 
start, but it's better to make a sensible config first.

* Plus, as pointed out further down the file, if any config files are provided 
by default, then it makes upgrades harder. The packager will prompt the user 
what to do with any package provided file that's been modified from standard - 
whether to use the new one, old one, or look at the differences. For a large 
number of files this becomes "tedious".


------------------------------------------------------------------------------
Comprehensive Server Monitoring with Site24x7.
Monitor 10 servers for $9/Month.
Get alerted through email, SMS, voice calls or mobile push notifications.
Take corrective actions from your mobile device.
http://p.sf.net/sfu/Zoho
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to