-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 11/30/2016 08:13 AM, Brian J. Murrell wrote: > Hi, > > When I try to do a restore action with shorewall-lite 5.0.13.4 I > get: > > # /usr/sbin/shorewall-lite -qq restore ipset v6.24: Element cannot > be added to the set: it's already added ERROR: Cannot restore > /etc/shorewall-lite/state/restore-ipsets with Shorewall running: > Firewall state not changed > > This seems like new behavior and makes using ipsets quite a deal- > breaker. Not being able to reload the firewall on the router > impacts a lot of state-change problems on the router. > > Maybe I have some kind of configuration set that is making this > happen and there is a way around it? >
This is the same behavior as on Shorewall and Shorewall6. If you have SAVE_IPSETS configured and you want to restore an old config with the firewall running, then you must first stop the current ruleset then restore the old one. - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYP0t3AAoJEJbms/JCOk0QR+sP/2ewF/25RPOv/uy9T/0pIvXX CbkCuyaVlul/qHSt74KCUlv+JSPVj4zyNfEWTISVw79uelj2mMuZ/FSHNSCKz6iG MmO33nfoENM3Lx5j7O4j+As5HRDs6aTx5PoR2ywxVsDDZChZfqRA6+6jicUmiU6n ftbzj1S9vxmx68eaFkze2c7wFcRJakNvh8y/beiwow05AuCpFJjfTADLXFvMuxUL fxK4XHB3b0EA6ZiYAgnCGs9URrT8gn7AVDs6951GdWnYewUqyTm/lzqhz7pOPjni 77BZoPoiy5reoRxEpPVRgh1iEOWLK+h1wMviVB1+MV0FstYVOj7Ocwk/caxKjmOK tKSuXv+bUTgi3yldJGjhWxKLc9Xls3gXrls5WTr7oy7TQtDyCuBZczGudq7Andpg rkAHUdEyhD1Z4Y2kJFNFtEd0fCOwdRmDf95rGu4e8Lb8PsBwEPryseqKm29KHSKn cr6LJ38p6nRJT3qN3E7RBk7qpWqCaZDliilDgaoOovLVVxxLeMjw6JLVqd1FWKbX /ybbiEs84MFrX0oEH2hsbMOrVSx/fzw8LaN5MhGz00IZbmrK5nk002RZO+gB3ZIu 4cDkZRrFfPgJ7f16Usq9mjn8iRVmMkEAJLtxnJfYhLfad+3wfE8LRrCvHBXgcERa j/oFYNkLB89J4P3B8Y9T =n449 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
