I've installed
shorewall-lite version
4.5.21.4
shorewall6-lite version
4.5.21.4
I use these systemd files to start it
cat /etc/systemd/system/shorewall-lite.service
[Unit]
Description=shorewall-lite
On Sat, Dec 28, 2013 at 10:45:48AM -0800, jen...@promessage.com wrote:
There's obviously some incorrect/broken/missing dependency between the
two. How do I properly config shorewall /or the systemd unit files to
maintain the IPv4 IPv6 shorewall instances' independence?
Which distro are
On 12/28/2013 10:45 AM, jen...@promessage.com wrote:
I've installed
shorewall-lite version
4.5.21.4
shorewall6-lite version
4.5.21.4
I use these systemd files to start it
cat /etc/systemd/system/shorewall-lite.service
Looks to me like you have DISABLE_IPV6=Yes in /etc/shorewall/shorewall.conf.
Yes, I do.
My understanding was that that's there to ensure that no IPv6 rules are
handled by the IPv4 firewall.
Apparently, not the case?
My goal is to keep IPv4 IPv6 completely separate, and not
inter-dependent.
testing, there's another issue that's introduced by the config change
changing
vi shorewall.conf
- DISABLE_IPV6=Yes
+ DISABLE_IPV6=No
now
systemctl stop shorewall-lite
systemctl stop shorewall6-lite
systemctl start