Package: shorewall Version: 3.2.4-1 Severity: normal After upgrading from a shorewall 3.0.?? to the last version 3.2.4-1, I can't used any space in LOGFORMAT (in shorewall.conf) I used previously the "suggested default" LOGFORMAT="fp=%s:%d a=%s "
which generate the error messages : $ /etc/init.d/shorewall restart Restarting "Shorewall firewall": not done (check /var/log/shorewall-init.log). $ tail /var/log/shorewall-init.log Loading Modules... Initializing... Clearing Traffic Control/QOS Deleting user chains... Enabling Loopback and DNS Lookups Try `iptables -h' or 'iptables --help' for more information. Bad argument `a=DROP' ERROR: Command "/sbin/iptables -A logdrop -j LOG --log-level info --log-prefix fp=logdrop:1 a=DROP " Failed IP Forwarding Enabled /sbin/shorewall: line 780: 25629 Terminated $SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart And disallow shorewall to start correctly. >From my understanding there is some missing quote around the part : "fp=logdrop:1 a=DROP " Changing the LOGFORMAT to LOGFORMAT="fp=%s:%d_a=%s " solved the issue (but this is not a real solution). David Vernazobres -- System Information: Debian Release: testing/unstable APT prefers testing APT policy: (990, 'testing'), (500, 'unstable'), (500, 'stable'), (1, 'experimental') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.17-piv-vs2.0.2-ebb Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) Versions of packages shorewall depends on: ii debconf [debconf-2.0] 1.5.8 Debian configuration management sy ii iproute 20061002-2 Professional tools to control the ii iptables 1.3.5.0debian1-1 Linux kernel 2.4+ iptables adminis Versions of packages shorewall recommends: ii wget 1.10.2-2 retrieves files from the web -- debconf information: shorewall/upgrade_20_22: shorewall/upgrade_14_20: shorewall/upgrade_to_14: shorewall/warnrfc1918: * shorewall/warn_about_klogd_floods: shorewall/dont_restart: * shorewall/major_release: true -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]