Hi Wayne,
Thanks for the fast reply.
I did try that already, i created the symbolic link following the readme. I
tried the following:
#remountrw #mv /var/lib/shorewal /ro/var/lib/shorewall #ln -s
/rw//var/lib/shorewall /var/lib/shorewall#remountro
The problem is whenever i went #shorewall start, it would say files already
exist. Would appreciate any guideance on the above, im sure i am making a
mistake as i dont understand the above. I presume anything in /ro gets copied
to the root file system, and anything in /rw/ allows the directory to be
written to in the root file system? Again not so sure so would appreciate a
little explanation if anyone has time. In fact i am interested in the whole
rw/ro setup so links for my reading on how it all works would be
appreciated.Regarding the speed issue I have also tried arnos iptables script,
that apt-get installed fine and no issues with RO directories. Would that be as
secure? I chose Shorewall over Arnos script as it seemed to have more features
but it is quite a lot more involved. I do plan to use OpenVPN also to link
sites so Shorewall would be better imho. I am running on 1GHz boxes, i would
hope Shorewall wouldnt slow it down that much on a reasonably powerful
dedicated box?Many thanks for the help its very much appreciated, been pulling
my hair out all day!
Regards,
Chris
Subject: RE: [Voyage-linux] Shorewall Read Only /var/lib/shorewall/
problemDate: Wed, 12 Mar 2008 13:03:08 +0000From: [EMAIL PROTECTED]: [EMAIL
PROTECTED]:
Chris
I also noticed when using shorewall it did slow down the throughput of the data.
I can get double the amount without shorewall, the test was done on a old
version of shorewall and voyage and I have not retested recently.
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris
MorleySent: 12 March 2008 12:50To: [EMAIL PROTECTED]: [Voyage-linux] Shorewall
Read Only /var/lib/shorewall/ problem
Hi, I am trying to get shorewall running and whilst it installs from apt-get
fine, i am having issues with the Read only file system. Shorewall seems to
write the compiled scripts into /var/lib/shorewall. When i run remountrw there
is no problem, however with remountro hitting 'shorewall start' in the shell
gives a whole raft of errors:Compiling.../usr/share/shorewall/functions: line
1704: /var/lib/shorewall/.modulesdir: Read-only file systemcp: cannot remove
`/var/lib/shorewall/.modules': Read-only file
system[..snip..]/var/lib/shorewall/.start: line 1046:
/var/lib/shorewall/chains: Read-only file system/var/lib/shorewall/.start: line
1048: /var/lib/shorewall/nat: Read-only file system/var/lib/shorewall/.start:
line 1050: /var/lib/shorewall/proxyarp: Read-only file
system/var/lib/shorewall/.start: line 1052: /var/lib/shorewall/zones: Read-only
file system/var/lib/shorewall/.start: line 1065: /var/lib/shorewall/restarted:
Read-only file systemProcessing /etc/shorewall/start
.../usr/share/shorewall/functions: line 2368: /var/lib/shorewall/state:
Read-only file systemProcessing /etc/shorewall/started ...cp: cannot remove
`/var/lib/shorewall/.restore': Read-only file systemdone. Is there any way that
this /var/lib/shorewall/ directory can be made rw? Or perhaps even plain old
ramdisk is ok, but consist of a default set of files upon boot? Would
appreciate insights if the two options above are possible. The other option is
for me to change the init.d/shorewall scripts to remountrw and remountro around
the start and stop parts, but i would prefer the solution above and it would
also help me learn about voyage linux which rocks :) Many thanks in advance,
Chris
Everything in one place. All new Windows Live!
_________________________________________________________________
Telly addicts unite!
http://www.searchgamesbox.com/tvtown.shtml
_______________________________________________
Voyage-linux mailing list
[email protected]
http://list.voyage.hk/mailman/listinfo/voyage-linux
