let me update this inquiry. i got rid of all the errors related to date/time by getting ntpd up and running... so all that's sorted now.
the only error (warning) that results from 'restart shorewall' is now: Processing /etc/shorewall/init ... WARNING: DISABLE_IPV6=Yes in shorewall.conf but this system does not appear to have ip6tables however, the DNAT rules are still not being applied. > From: the_superch...@hotmail.com > To: leaf-user@lists.sourceforge.net > Date: Thu, 17 Feb 2011 10:20:29 -0500 > Subject: [leaf-user] shorewall - DNAT rules not being applied > > > greetings. still working on getting my configuration to 100%. still having > a few issues that i need assistance with. > > > this time it's shorewall. i'm trying to apply general port forwarding rules > in /etc/shorewall/rules > > > example (remote desktop): > DNAT net loc:192.168.1.196 tcp 3389 > > > > save, and restart shorewall via 'shorewall restart' > > > as part of the output, i get the following errors: > Shorewall configuration compiled to /var/lib/shorewall/.restart > sh: invalid number 'Jan' > sh: invalid number '%_d' > sh: invalid number '19:24:19' > Processing /etc/shorewall/params ... > Jan %_d 19:24:19 Processing /etc/shorewall/params ..Usage: > /var/lib/shorewall/.restart [ options ] [ > start|stop|clear|down|reset|refresh|restart|status|up|version ] > > > > i spoke to the people in the shorewall IRC channel on freenode, and they said > to talk to the leaf people: "They have a fix that works around the limited > 'date' program on Bering" > > > as a side note that may or may not be relevant, my date/time on the firewall > are not correct. haven't had success in setting that yet, either. > > > thanks in advance. > > ------------------------------------------------------------------------------ > The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: > Pinpoint memory and threading errors before they happen. > Find and fix more than 250 security defects in the development cycle. > Locate bottlenecks in serial and parallel code that limit performance. > http://p.sf.net/sfu/intel-dev2devfeb > ------------------------------------------------------------------------ > leaf-user mailing list: leaf-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/leaf-user > Support Request -- http://leaf-project.org/ ------------------------------------------------------------------------------ The ultimate all-in-one performance toolkit: Intel(R) Parallel Studio XE: Pinpoint memory and threading errors before they happen. Find and fix more than 250 security defects in the development cycle. Locate bottlenecks in serial and parallel code that limit performance. http://p.sf.net/sfu/intel-dev2devfeb ------------------------------------------------------------------------ leaf-user mailing list: leaf-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/leaf-user Support Request -- http://leaf-project.org/