Hello,

I did update the shorewall and shorewall-core package to 5.2.8, and did
update as well, but still getting the same error on starting shorewall6.

root@a48c0842-1c54-8659-7c7a-8d64480bc164:~#* shorewall6 version*
5.2.8
root@a48c0842-1c54-8659-7c7a-8d64480bc164:~#* shorewall version*
5.2.8
root@a48c0842-1c54-8659-7c7a-8d64480bc164:~*# shorewall update*
Updating Shorewall configuration to 5.2.8...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
No update required to configuration file /etc/shorewall/shorewall.conf;
/etc/shorewall/shorewall.conf.bak not saved
Loading Modules...
Performing Shorewall 5.2 conversions...
   File /etc/shorewall/conntrack updated - old file renamed
/etc/shorewall/conntrack.bak
Compiling /etc/shorewall/zones...
Compiling /etc/shorewall/interfaces...
Compiling /etc/shorewall/hosts...
Determining Hosts in Zones...
Locating Action Files...
Compiling /etc/shorewall/policy...
Running /etc/shorewall/initdone...
Adding Anti-smurf Rules
Compiling TCP Flags filtering...
Compiling Kernel Route Filtering...
Compiling Martian Logging...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall/rules...
Compiling /etc/shorewall/conntrack...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Multicast for chain Multicast...
Shorewall configuration verified
root@a48c0842-1c54-8659-7c7a-8d64480bc164:~*# shorewall6 update*
Updating Shorewall6 configuration to 5.2.8...
Processing /etc/shorewall6/params ...
Processing /etc/shorewall6/shorewall6.conf...
No update required to configuration file /etc/shorewall6/shorewall6.conf;
/etc/shorewall6/shorewall6.conf.bak not saved
Loading Modules...
Performing Shorewall 5.2 conversions...
Compiling /etc/shorewall6/zones...
Compiling /etc/shorewall6/interfaces...
Compiling /etc/shorewall6/hosts...
Determining Hosts in Zones...
   WARNING: *** inet6 is an EMPTY ZONE *** /etc/shorewall6/hosts (EOF)
Locating Action Files...
Compiling /etc/shorewall6/policy...
Compiling TCP Flags filtering...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall6/rules...
Compiling /etc/shorewall6/conntrack...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Multicast for chain Multicast...
Shorewall6 configuration verified

root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# *shorewall6 start*
Compiling using Shorewall 5.2.8...
Processing /etc/shorewall6/params ...
Processing /etc/shorewall6/shorewall6.conf...
Loading Modules...
Compiling /etc/shorewall6/zones...
Compiling /etc/shorewall6/interfaces...
Compiling /etc/shorewall6/hosts...
Determining Hosts in Zones...
   WARNING: *** inet6 is an EMPTY ZONE *** /etc/shorewall6/hosts (EOF)
Locating Action Files...
Compiling /etc/shorewall6/policy...
Compiling TCP Flags filtering...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall6/rules...
Compiling /etc/shorewall6/conntrack...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Multicast for chain Multicast...
Generating Rule Matrix...
Optimizing Ruleset...
Creating ip6tables-restore input...
Shorewall6 configuration compiled to /var/lib/shorewall6/.start
Starting Shorewall6....
Initializing...
Processing /etc/shorewall6/init ...





*Setting up Proxy NDP...Preparing ip6tables-restore input...Running
/usr/sbin/ip6tables-restore --wait 60...ip6tables-restore v1.8.3 (legacy):
unknown option "--reject-with"Error occurred at line: 110Try
`ip6tables-restore -h' or 'ip6tables-restore --help' for more information.*
   ERROR: ip6tables-restore Failed. Input is in
/var/lib/shorewall6/.ip6tables-restore-input
Processing /etc/shorewall6/stop ...
Preparing ip6tables-restore input...
Running /usr/sbin/ip6tables-restore --wait 60...
Processing /etc/shorewall6/stopped ...
Terminated

Thanks,
Nag



On Thu, Dec 9, 2021 at 12:53 PM Matt Darfeuille <m...@shorewall.org> wrote:

> On 12/9/2021 7:39 AM, Nagarjun J wrote:
> > Hello,
> >
> > I tried loading latest shorewall6 version(5.2.8), still getting the same
> > error message. One more question: does shorewall and shorewall-core
> version
> > also need to be the same as of shorewall6?
> >
>
> Yes, the Shorewall6 package is dependent on the Shorewall packet and the
> Shorewall-core pkg requiring that those three packages are on the same
> version (5.2.8 in this case).
>
> So my suggestion is to update those three packages to 5.2.8 and todo a
> 'shorewall update' and a 'shorewall6 update'.
>
> --
> Matt Darfeuille <m...@shorewall.org>
> Community: https://sourceforge.net/p/shorewall/mailman/message/37107049/
> SPC: https://sourceforge.net/p/shorewall/mailman/message/36596609/
> Homepage: https://shorewall.org
>
>
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to