-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 03/17/2017 08:40 AM, darrin.tho...@123mail.org wrote: > Tom > > On Fri, Mar 17, 2017, at 08:33 AM, Tom Eastep wrote: >>> Is wlan0 up at the time that you do this? The reason that I ask >>> is that Shorewall itself never generates a command that >>> includes 'linkdown', so this is obviously occurring while >>> copying the WIFIUIF routes from the main table to the ISP >>> table. > > wlan0 is sure *supposed* to be up. > > It's brought up by the OS.
wlan0 is also brought up indirectly by systemd -- check out the 'networking' unit. Shorewall's controlled by systemd. The systemd unit waits for network-online. > > Should I have SW manually check, and bring down/up the interface? > I have seen cases where a link with active routes goes down, after which 'ip route ls' shows the routes as 'linkdown'. So I am quite sure that is what happened here. Given that there are other major issues with USE_DEFAULT_RT=No (check the known problems on the Shorewall site), I'm not inclined to try to do anything about this one. - -Tom - -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYzA8qAAoJEJbms/JCOk0QyEMP/isxI5P0FLfkKS+ODhc6nsjI Oj/nIeNYSPlyNP3Tz6Xo46+vdrRWPqnHg6WL6Nel54+Bg5ovsZfHIf3SuFe3LbPk bqe1Ku/jUon4RzRe1rg2pDgwJb8620hWzVMdE0qw+B/lSH+AOaJsrI42VojJdlya PMHHAuRSGm8abHO5rVIggJ9ay8vePOrVjLzUXASaWoXw5BVXrJ8u2Go/UVZft9RQ njg+4XFCfkVFpcW050Jxj8UlLr9Zl3Af7HHX8byUb8D305ivXp1Z7JTOu2cdN0Gd rk+aOfBf1EgmpRO0nNoHnW4M33wnEpBKKPDwOAv799IuQslQbv9yscaoNVUr3skB uszcLed8vHZ3poiiv5pua0eRVpxz9RLWpxu942nH4a6T8W+yulizqwcoJaile+wQ C4+fwyzjDilpBItSLlcV/MKoMjANygydXp9xTO4vLvUlHRTUkUL5yltkEWTuE7Ux cCiDASuIKtNEAWuLJliUa+oMJw6pgCzyWQnBtMTIEpY5RUyzMfJ6rPwaHtJkblm3 LySt98fJuoDNefUhauXeZyEt/8sUE8RjN7SaJLhcXb1LdpjjVvhDkxQ7416kWNJ7 D7yO5VNMBHVsT76cUvtXLsuIflJYsEhfQDJynbx7yGGDIfovNWZIE76EWPLtw6Tf eIEF5ViaoiieWqiSKMt0 =2638 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users