Hi all,

I am struggling with an ipset that needs to be present or else shorewall
does not start. It gets created outside shorewall by a script that
periodically downloads a list of country IP's. I cannot manage to get it
preserved across a "shutdown -r now" let alone, God forbid a hard crash and
restart.

I have tried SAVE_IPSETS=Yes in shorewall.conf and
also SAVE_IPSETS="/var/lib/shorewall/ipset-init-save" in
/etc/default/shorewall-init.

In the latter case, the file is not created. There are files, presumably
from the SAVE_IPSETS=Yes in shorewall.conf, /var/lib/shorewall/ipsets.temp
and ipsets.save but they only contain the dynamic blacklist ipset, not the
country list ipset. In neither case does that ipset get restored.

What am I doing wrong?

Thanks, Norm
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to