Shorewall 4.6.4.3

Still using tcrules, so I ran 'shorewall update -t .' and it created a mangle 
file, and modified the shorewall.conf file.


The configuration is missing a default tcclass.  Shorewall 4.5.5.3 will report:


% shorewall check .


 [...]
 Checking Martian Logging...
 Checking /tmp/shorewall/tcdevices...
 Checking /tmp/shorewall/tcclasses...
   ERROR: No default class defined for device switch.0001


Version 4.6.4.3 reports nothing:


% shorewall check .


 [...]
 Checking /tmp/shorewall/mangle...
 Checking MAC Filtration -- Phase 1...
 Checking /etc/shorewall/conntrack...
 Checking MAC Filtration -- Phase 2...
 Applying Policies...
 Shorewall configuration verified


Actually, there are no messages about checking tcdevices and tcclasses.  Is 
this a bug ?


Thanks.




TC test configuration for both Shorewall versions (tcrules.bak and mangle in 
4.6.4.3 only - tcrules only for 4.5.5.3)


tcdevices


 #INTERFACE   IN-BANDWITH  OUT-BANDWIDTH
 switch.0001    32mbit    32000kbit    


tcclasses


 #INTERFACE   MARK   RATE   CEIL   PRIORITY    OPTIONS
 switch.0001    10    full*1/5     full     5    
 switch.0001    1    full*4/5     full     1    


tcrules.bak


 #MARK    SOURCE    DEST    PROTO 
 1    0.0.0.0/0    0.0.0.0/0    icmp    echo-request


mangle


 MARK(1) 0.0.0.0/0       0.0.0.0/0       icmp    echo-request







------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to