On 12/31/2013 11:55 AM, jen...@promessage.com wrote:
>> Well, I'm no systemd expert, but the fact that /usr/sbin/shorewall6-lite
>> terminated with exit status 0 is entirely normal. So I suspect that you
>> need one or both of the following in your shorewall6-lite.service file:
>>
>> Type=oneshot
>
> Well, I'm no systemd expert, but the fact that /usr/sbin/shorewall6-lite
> terminated with exit status 0 is entirely normal. So I suspect that you
> need one or both of the following in your shorewall6-lite.service file:
>
> Type=oneshot
> RemainAfterExit=yes
>
> The .service files released fro
On 12/29/2013 10:08 AM, jen...@promessage.com wrote:
> that seems to have no problem
>
> /usr/sbin/shorewall-lite stop
> Stopping Shorewall Lite
> Processing stop user exit ...
> Processing tcclear user exit ...
> Running /usr/sbin/
that seems to have no problem
/usr/sbin/shorewall-lite stop
Stopping Shorewall Lite
Processing stop user exit ...
Processing tcclear user exit ...
Running /usr/sbin/iptables-restore...
IPv4 Forwarding Enabl
On 12/28/2013 6:17 PM, jen...@promessage.com wrote:
> testing, there's another issue that's introduced by the config change
>
> changing
>
> vi shorewall.conf
> - DISABLE_IPV6=Yes
> + DISABLE_IPV6=No
>
> now
>
> systemctl stop shorewall-lite
>
testing, there's another issue that's introduced by the config change
changing
vi shorewall.conf
- DISABLE_IPV6=Yes
+ DISABLE_IPV6=No
now
systemctl stop shorewall-lite
systemctl stop shorewall6-lite
systemctl start shor
> Looks to me like you have DISABLE_IPV6=Yes in /etc/shorewall/shorewall.conf.
Yes, I do.
My understanding was that that's there to ensure that no IPv6 rules are
handled by the IPv4 firewall.
Apparently, not the case?
My goal is to keep IPv4 & IPv6 completely separate, and not
inter-dependent.
On 12/28/2013 10:45 AM, jen...@promessage.com wrote:
> I've installed
>
> shorewall-lite version
> 4.5.21.4
> shorewall6-lite version
> 4.5.21.4
>
> I use these systemd files to start it
>
> cat /etc/systemd/system/shorewall-lite.service
>
> Which distro are you using?
I'm on Opensuse 13.1
I've installed their pkgs,
shorewall-core-4.5.21.4-113.1.noarch
shorewall6-lite-4.5.21.4-113.1.noarch
shorewall-lite-4.5.21.4-113.1.noarch
> Can you have a look at this bug report:
>
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=729
On Sat, Dec 28, 2013 at 10:45:48AM -0800, jen...@promessage.com wrote:
>
> There's obviously some incorrect/broken/missing dependency between the
> two. How do I properly config shorewall &/or the systemd unit files to
> maintain the IPv4 & IPv6 shorewall instances' independence?
>
Which distro
I've installed
shorewall-lite version
4.5.21.4
shorewall6-lite version
4.5.21.4
I use these systemd files to start it
cat /etc/systemd/system/shorewall-lite.service
[Unit]
Description=shorewall-lite
11 matches
Mail list logo