Thank you Filippo! And Tom - yes there are some interfaces defined as
"optional"
?FORMAT 2
#ZONE   INTERFACE       OPTIONS
clean   wlan0   routeback,routefilter=1,required
clean   vlan1   routeback,routefilter=1,required
maf01   vlan2   routeback,routefilter=1,optional,wait=5
uni01   usb0    routeback,routefilter=1,optional
uni01   usb1    routeback,routefilter=1,optional
-       vlan4 #further defined in hosts file
tvc01   vlan5   routeback,routefilter=1,optional,dhcp
cem5t   tun1    routeback,optional
...and others

Interestingly, on the 14.04 system, shorewall status -i also shows
interfaces that are non-optional:
?FORMAT 2
#ZONE INTERFACE [BROADCAST] OPTIONS
Dirty   eth0    routeback,routefilter=1
...and others

shorewall status -i
Shorewall-5.0.12 Status at VM-CEML - Fri Oct  7 14:33:02 UTC 2016

Shorewall is running
State:Started Fri Oct  7 14:31:15 UTC 2016 from /etc/shorewall/
(/var/lib/shorewall/firewall compiled Fri Oct 7 11:42:04 UTC 2016 by
Shorewall version 5.0.12)

   Interface eth0 is Enabled
...and others

- Norm

On Fri, Oct 7, 2016 at 9:26 AM, Filippo Carletti <[email protected]
> wrote:

> > not really a question for here, but how to get status from lsm when
> systemd
> > insists on grabbing the service command?
>
> lsm maintains status and other statistics in its own directory. On
> CentOS it's /var/lib/lsm/.
> Example:
>
> # cat /var/lib/lsm/status_export
> adsl1 up
> adsl2 up
> fibra1 up
> fibra2 up
>
>
> --
> Ciao,
> Filippo
>
> ------------------------------------------------------------
> ------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most 
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to