-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 03/16/2017 09:43 PM, darrin.tho...@123mail.org wrote:
> After switching from SW 5.0.x to 5.1.3,
> 
> The prior change I'd made in providers
> 
> -     ISP  1  0x100  main  EXTIF  detect  track,balance  INTIF +      ISP  1
> 0x100  main  EXTIF  detect  track,balance  INTIF,WIFIUIF
> 
> now returns on compile
> 
> ... Setting up Proxy ARP... Adding Providers... Error: either "to"
> is duplicate, or "linkdown" is a garbage. ERROR: Command "/sbin/ip
> -4 route add table ISP 10.0.1.0/24 dev wlan0 proto kernel scope
> link src 10.0.1.150 linkdown" Failed Restoring Shorewall Lite... 
> ...
> 
> Switching back to
> 
> -     ISP  1  0x100  main  EXTIF  detect  track,balance  INTIF,WIFIUIF 
> +     ISP  1  0x100  main  EXTIF  detect  track,balance  INTIF
> 
> allows the compile to complete.
> 
> I saw reference to this for a very old version
> 
> "2012-08-20 Shorewall 4.5.7
> 
> ----------------------------------------------------------------------------
>
> 
I.  P R O B L E M S   C O R R E C T E D   I N   T H I S  R E L E A S E
> ----------------------------------------------------------------------------
>
>  1)  This release includes the defect repair from Shorewall
> 4.5.6.2.
> 
> 2)  The command 'shorewall enable pppX' could fail with the ip
> diagnostic
> 
> Error: either "to" is duplicate, or "weight" is a garbage.
> 
> Shorewall now generates the correct ip command."
> 
> But nothing yet more recent.

Is wlan0 up at the time that you do this? The reason that I ask is
that Shorewall itself never generates a command that includes
'linkdown', so this is obviously occurring while copying the WIFIUIF
routes from the main table to the ISP table.

Also, why are you using the USE_DEFAULT_RT=No setting? There are only
very rare instances where that setting is appropriate. Switching to
USE_DEFAULT_RT=Yes eliminates a lot of issues, including this one.

- -Tom
- -- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.net \________________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=Yc0V
-----END PGP SIGNATURE-----

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to