On 06/23/2017 06:53 AM, Vieri Di Paola via Shorewall-users wrote: > Following up on my previous message, a shorewall trace restart shows the > following messages at the end: > > + '[' -n 'via 172.20.11.49 dev enp7s0f3 nexthop via 172.28.17.110 dev > enp7s0f2 weight 1 ' ']' > + run_ip route replace default scope global table 253 via 172.20.11.49 dev > enp7s0f3 nexthop via 172.28.17.110 dev enp7s0f2 weight 1 > + ip -4 route replace default scope global table 253 via 172.20.11.49 dev > enp7s0f3 nexthop via 172.28.17.110 dev enp7s0f2 weight 1 > RTNETLINK answers: Invalid argument > + error_message 'ERROR: Command "ip -4 route' replace default scope global > table 253 via 172.20.11.49 dev enp7s0f3 nexthop via 172.28.17.110 dev > enp7s0f2 weight '1" Failed' > + echo ' ERROR: Command "ip -4 route' replace default scope global table > 253 via 172.20.11.49 dev enp7s0f3 nexthop via 172.28.17.110 dev enp7s0f2 > weight '1" Failed' > ERROR: Command "ip -4 route replace default scope global table 253 via > 172.20.11.49 dev enp7s0f3 nexthop via 172.28.17.110 dev enp7s0f2 weight 1" > Failed > + return 1 > + stop_firewall > + case $COMMAND in > + set +x > /usr/share/shorewall/lib.common: line 93: 26111 Terminated > $SHOREWALL_SHELL $script $options $@ > > > I can send the full trace if required. >
There is a bug in 5.1.4.3 :-( Patch attached. patch /usr/share/shorewall/Shorewall/Providers.pm < FALLBACK.patch -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
diff --git a/Shorewall/Perl/Shorewall/Providers.pm b/Shorewall/Perl/Shorewall/Providers.pm
index 86a94b909..17a19f3a9 100644
--- a/Shorewall/Perl/Shorewall/Providers.pm
+++ b/Shorewall/Perl/Shorewall/Providers.pm
@@ -357,7 +357,7 @@ sub balance_fallback_route( $$$$ ) {
emit '';
if ( $first_fallback_route ) {
- if ( $balanced_providers == 1 ) {
+ if ( $fallback_providers == 1 ) {
if ( $gateway ) {
emit "FALLBACK_ROUTE=\"via $gateway dev $interface $realm\"";
} else {
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
