On 9/8/2015 4:32 AM, Vieri Di Paola wrote:
>>
>>> Add this in /etc/shorewall/mangle:
>>>
>>> INLINE(MARK(1)):P 10.215.247.194 10.215.236.221 ; \
>>> -m statistic --mode random --probability 0.50
>>> MARK(2):P 10.215.247.194 10.215.236.221 { test=0/0xff }
>>>
>>> -Tom
>>
>>
>> I suppose you meant this:
>>
>> INLINE(1):P 10.215.247.194 10.215.236.221 ; \
>> -m statistic --mode random --probability 0.50
>> MARK(2):P 10.215.247.194 10.215.236.221 { test=0/0xff }
>>
>
> No -- I meant what I wrote. Prior to 4.6.13, the man page for the
> 'mangle' file has incorrect examples.
I updated to:
# shorewall version
4.6.13
# shorewall check
ERROR: The MARK ACTION only accepts 0 parmeters /opt/fw/mangle.include (line 8)
from /etc/shorewall/mangle (line 3) [ !! ]
# sed '8!d' mangle.include
INLINE(MARK(2)):P 10.215.247.194 10.215.236.221 ; -m statistic --mode
random --probability 0.50
# grep INLINE /etc/shorewall/shorewall.conf
INLINE_MATCHES=No
(same with INLINE_MATCHES=Yes)
Did I mistype something?
Thanks,
Vieri
------------------------------------------------------------------------------
Monitor Your Dynamic Infrastructure at Any Scale With Datadog!
Get real-time metrics from all of your servers, apps and tools
in one place.
SourceForge users - Click here to start your Free Trial of Datadog now!
http://pubads.g.doubleclick.net/gampad/clk?id=241902991&iu=/4140
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
