-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 10/10/2016 09:57 AM, Vieri Di Paola wrote:
> Hi,
>
> I'm getting the folloowing error when I 'shorewall check': ERROR:
> Invalid IPSEC Option (192.168.151.48) SHELL@/etc/shorewall/masq
>
> My offending line in /etc/shorewall/masq: ?SHELL echo
> "\$OVPN_MASQ"
>
> /etc/shorewall/params: OVPN_STATIC_IP[client1]=192.168.151.48
> OVPN_MASQ_IP[client1]=10.215.144.48
> OVPN_STATIC_IP[client2]=192.168.151.45 OVPN_CLIENT_LIST=( client1
> client2 )
>
> [...] for OVPN_CLIENT in ${OVPN_CLIENT_LIST[@]}; do
> OVPN_MASQ="${OVPN_MASQ} $IF1 ${OVPN_STATIC_IP[$OVPN_CLIENT]}
> ${OVPN_MASQ_IP[$OVPN_CLIENT]} $IF2
> ${OVPN_STATIC_IP[$OVPN_CLIENT]} ${OVPN_MASQ_IP[$OVPN_CLIENT]} $IF3
> ${OVPN_STATIC_IP[$OVPN_CLIENT]} ${OVPN_MASQ_IP[$OVPN_CLIENT]}" fi
> done echo "${OVPN_MASQ}" > /tmp/OVPN_MASQ
>
> -----
>
> If I comment out the offending line in masq file and restart
> shorewall: # cat /tmp/OVPN_MASQ
>
> enp0s8 192.168.151.48 10.215.144.48 enp2s0f0
> 192.168.151.48 10.215.144.48 enp2s0f1 192.168.151.48
> 10.215.144.48
>
> I'm not sure what my mistake is.
>
This works:
?begin perl shorewall "$ENV{OVPN_MASQ}"
- -Tom
- --
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org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=pGhC
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
