On 01/02/2016 08:26 AM, Bill Shirley wrote:
> [0:root@elmo my.tables 130]$ rpm -q shorewall
> shorewall-4.6.11.1-2.fc22.noarch
> 
> Are there systemd service files for Fedora in Shorewalls code?  I had a 
> problem with my last
> re-boot (power outage) where shorewall6.service failed (probably because 
> shorewall.service was
> running):
> [1:root@elmo shorewall6 4]$ systemctl status shorewall6.service
> ? shorewall6.service - Shorewall IPv6 firewall
>     Loaded: loaded (/usr/lib/systemd/system/shorewall6.service; enabled; 
> vendor preset: disabled)
>     Active: failed (Result: exit-code) since Fri 2015-12-18 13:18:40 EST; 2 
> weeks 0 days ago
>   Main PID: 1889 (code=exited, status=255)
> 
> Dec 18 13:18:31 elmo.example.com shorewall6[1889]: Compiling...
> Dec 18 13:18:35 elmo.example.com shorewall6[1889]: Processing 
> /etc/shorewall6/params ...
> Dec 18 13:18:35 elmo.example.com shorewall6[1889]: Processing 
> /etc/shorewall6/shorewall6.conf...
> Dec 18 13:18:35 elmo.example.com shorewall6[1889]: Loading Modules...
> Dec 18 13:18:38 elmo.example.com shorewall6[1889]: Another app is currently 
> holding the xtables lock. Perhaps you want to use 
> the -w option?
> Dec 18 13:18:40 elmo.example.com shorewall6[1889]: ERROR: Cannot Create 
> Mangle chain fooX2349
> Dec 18 13:18:40 elmo.example.com systemd[1]: shorewall6.service: main process 
> exited, code=exited, status=255/n/a
> Dec 18 13:18:40 elmo.example.com systemd[1]: Failed to start Shorewall IPv6 
> firewall.
> Dec 18 13:18:40 elmo.example.com systemd[1]: Unit shorewall6.service entered 
> failed state.
> Dec 18 13:18:40 elmo.example.com systemd[1]: shorewall6.service failed.
> 
> If you do supply the service files, either shorewall.service needs:
> [Unit]
> Before=network-online.target shorewall6.service
> 
> or shorewall6.service needs:
> [Unit]
> After=network-online.target shorewall.service
> 
> Right now they read:
> [Unit]
> After=network-online.target
> 

Simply set LOCKFILE to the same value in both shorewall.conf and
shorewall6.conf.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to