Il 01/06/2016 17:50, Thomas D. ha scritto:
> Hi,
>
> Nicola Ferrari (#554252) wrote:
>> Asking "shorewall check" I get:
>> Checking /etc/shorewall/hosts...
>> ERROR: Dynamic nets require Ipset Match in your kernel and iptables
>> /etc/shorewall/hosts (line 12)
>
> Please run `shorewall show capabilities`
>
> If it says
>
>> ipset V5 (IPSET_V5): Not available
>
> install "ipset" package (apt-get install ipset).
>
> On a stock Debian kernel you should get
>
>> Ipset Match Counters (IPSET_MATCH_COUNTERS): Available
>> Ipset Match (IPSET_MATCH): Available
>> Ipset Match Nomatch (IPSET_MATCH_NOMATCH): Available
>> ipset V5 (IPSET_V5): Available
>
>> # uname -a
>> Linux vm-debian8-x64 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-1
>> (2016-03-06) x86_64 GNU/Linux
>
Thanks Thomas!
I get
$ shorewall show capabilities | grep -i "ipset"
ipset V5 (IPSET_V5): Available
(but _no "ipset_match" strings_ in that output)..
$ uname -a
Linux fwgate 3.16.0-4-amd64 #1 SMP Debian 3.16.7-ckt25-1 (2016-03-06)
x86_64 GNU/Linux
ipset is installed
$ dpkg -l | grep ipset
ii ipset 6.23-2 i386
xtables packages installed
ii xtables-addons-common 2.6-1
ii xtables-addons-dkms 2.6-1
Something else is missing?
Thanks!
N
--
+---------------------+
| Linux User #554252 |
+---------------------+
------------------------------------------------------------------------------
What NetFlow Analyzer can do for you? Monitors network bandwidth and traffic
patterns at an interface-level. Reveals which users, apps, and protocols are
consuming the most bandwidth. Provides multi-vendor support for NetFlow,
J-Flow, sFlow and other flows. Make informed decisions using capacity
planning reports. https://ad.doubleclick.net/ddm/clk/305295220;132659582;e
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
