On 12/1/2014 2:45 AM, Giuseppe Vitillaro wrote: > I'm experimenting a problem using a dynamic zone > > I defined long ago, and working without a problem > > for months, with shorewall-core 4.5.21.9 under gentoo. ... > > Switching to a "dynamic_shared" zone > > ast:net ipv4 dynamic_shared > solve the problem, but I'm still curious to > understand what is going on here. > > > > What the matter? A mistake in my configuration? > > A "bug" introuced in version 4.5.21.6?
Yes. The intent of that change was to eliminate periods from ipset names but the sed comment was incorrect. The attached patch should correct the problem. Regards, -Tom PS -- my apologies for the slow response; I've been out of the country for the last three weeks. -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall-core/lib.cli b/Shorewall-core/lib.cli
index b869403..9f991c6 100644
--- a/Shorewall-core/lib.cli
+++ b/Shorewall-core/lib.cli
@@ -1959,7 +1959,7 @@ add_command() {
ipset=6_${zone}_${interface};
fi
- ipset=$(echo $ipset | sed 's/./_/g');
+ ipset=$(echo $ipset | sed 's/\./_/g');
if ! qt $IPSET -L $ipset; then
fatal_error "Zone $zone, interface $interface does not have a
dynamic host list"
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Download BIRT iHub F-Type - The Free Enterprise-Grade BIRT Server from Actuate! Instantly Supercharge Your Business Reports and Dashboards with Interactivity, Sharing, Native Excel Exports, App Integration & more Get technology previously reserved for billion-dollar corporations, FREE http://pubads.g.doubleclick.net/gampad/clk?id=164703151&iu=/4140/ostg.clktrk
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
