Bug#695759: Providers entries cause shorewall6 start to fail

2012-12-12 Thread Hugh Davenport
Package: shorewall6
Version: 4.4.11.6-1+squeeze1
Severity: important
Tags: ipv6

Hi,

I have put in a few entries into the providers file (which
I was previously not using), and now a shorewall6 start fails
with the following error:

Adding Providers...
Error: an inet prefix is expected rather than cache.
   ERROR: Command ip -6 route add table 1 cache mtu 1280 advmss 1220 hoplimit 
4294967295 Failed

Let me know what I can do to help debug this, in the mean
time I have disabled the providers entries.

FWIW, the providers entries were for the two tunnels I have,
a SixXs and a HE tunnel.

Cheers,

Hugh


-- System Information:
Debian Release: 6.0.6
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_NZ.UTF-8, LC_CTYPE=en_NZ.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages shorewall6 depends on:
ii  debconf [debconf-2.0 1.5.36.1Debian configuration management sy
ii  iproute  20100519-3  networking and traffic control too
ii  iptables 1.4.8-3 administration tools for packet fi
ii  libio-socket-inet6-p 2.65-1.1Object interface for AF_INET6 doma
ii  shorewall4.4.11.6-3+squeeze1 Shoreline Firewall, netfilter conf

shorewall6 recommends no packages.

Versions of packages shorewall6 suggests:
ii  linux-image-2.6.32-5-amd64 [l 2.6.32-46  Linux 2.6.32 for 64-bit PCs
pn  make  none (no description available)
pn  shorewall-doc none (no description available)

-- Configuration Files:
/etc/default/shorewall6 changed:
startup=1
OPTIONS=

/etc/shorewall6/shorewall6.conf changed:
STARTUP_ENABLED=Yes
VERBOSITY=1
LOGFILE=/var/log/messages
STARTUP_LOG=/var/log/shorewall6-init.log
LOG_VERBOSITY=2
LOGFORMAT=Shorewall:%s:%s:
LOGTAGONLY=No
LOGRATE=
LOGBURST=
LOGALLNEW=
BLACKLIST_LOGLEVEL=
TCP_FLAGS_LOG_LEVEL=info
SMURF_LOG_LEVEL=info
IP6TABLES=
IP=
TC=
IPSET=
PERL=/usr/bin/perl
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
SHOREWALL_SHELL=/bin/sh
SUBSYSLOCK=
MODULESDIR=
CONFIG_PATH=/etc/shorewall6:/usr/share/shorewall6:/usr/share/shorewall
RESTOREFILE=
LOCKFILE=
DROP_DEFAULT=Drop
REJECT_DEFAULT=Reject
ACCEPT_DEFAULT=none
QUEUE_DEFAULT=none
NFQUEUE_DEFAULT=none
RSH_COMMAND='ssh ${root}@${system} ${command}'
RCP_COMMAND='scp ${files} ${root}@${system}:${destination}'
IP_FORWARDING=On
TC_ENABLED=No
TC_EXPERT=No
TC_PRIOMAP=2 3 3 3 2 3 1 1 2 2 2 2 2 2 2 2
CLEAR_TC=No
MARK_IN_FORWARD_CHAIN=No
CLAMPMSS=No
MUTEX_TIMEOUT=60
ADMINISABSENTMINDED=Yes
BLACKLISTNEWONLY=Yes
MODULE_SUFFIX=ko
FASTACCEPT=No
IMPLICIT_CONTINUE=No
HIGH_ROUTE_MARKS=No
OPTIMIZE=1
EXPORTPARAMS=Yes
EXPAND_POLICIES=Yes
KEEP_RT_TABLES=Yes
DELETE_THEN_ADD=Yes
DONT_LOAD=
AUTO_COMMENT=Yes
MANGLE_ENABLED=Yes
AUTOMAKE=No
WIDE_TC_MARKS=No
TRACK_PROVIDERS=Yes
ZONE2ZONE=2
ACCOUNTING=Yes
OPTIMIZE_ACCOUNTING=No
DYNAMIC_BLACKLIST=Yes
LOAD_HELPERS_ONLY=No
FORWARD_CLEAR_MARK=yes
BLACKLIST_DISPOSITION=DROP
TCP_FLAGS_DISPOSITION=DROP


-- debconf information:
  shorewall6/major_release:
  shorewall6/dont_restart:
  shorewall6/invalid_config:


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#695759: Providers entries cause shorewall6 start to fail

2012-12-12 Thread Roberto C . Sánchez
On Thu, Dec 13, 2012 at 12:32:17AM +1300, Hugh Davenport wrote:
 Package: shorewall6
 Version: 4.4.11.6-1+squeeze1
 Severity: important
 Tags: ipv6
 
 Hi,
 
 I have put in a few entries into the providers file (which
 I was previously not using), and now a shorewall6 start fails
 with the following error:
 
Unfortunately, I do not use the multi-ISP features of Shorewall.  I
recommend that you post your issue to the shorewall-users mailing list,
or that you go to the IRC channel.  They will be far more helpful there
than I could possibly be with this issue.

Regards,

-Roberto

-- 
Roberto C. Sánchez
http://people.connexer.com/~roberto
http://www.connexer.com


signature.asc
Description: Digital signature