On Sunday 06 May 2007 02:18, Tom Eastep wrote:
> Steven Jan Springl wrote:
> > On Sunday 06 May 2007 01:04, Tom Eastep wrote:
> >> Steven Jan Springl wrote:
> >>> Tom
> >>>
> >>> Interface file entry:
> >>>
> >>> -  eth0  -
> >>>
> >>> and host file entries:
> >>>
> >>> lan   eth0:192.168.0.0/24
> >>> wan  eth0:!192.168.0.0/24
> >>>
> >>> produce the following error:
> >>>
> >>> Use of uninitialized value in concatenation (.) or string
> >>> at /usr/share/shorewall-perl/Shorewall/Rules.pm line 1656.
> >>
> >> Steve,
> >>
> >> I'm unable to reproduce that problem. And Rules.pm line 1656 doesn't
> >> have any concatenation or qq(). Please send me a tarball of the failing
> >> configuration.
> >>
> >> Thanks,
> >> -Tom
> >
> > Tom
> >
> > Configuration attached.
>
> Thanks, Steven. That was a tough one :-)
>
> Fixed in revision 6254.
>
> -Tom

Good morning Tom.

I can confirm, it compiles here too.

However the iptables rules generated do not seem to work.

The testing was conducted on a PC with one interface,
        IP address  192.168.0.4/24
        gateway     192.168.0.254

To compile the rules with shorewall-shell, it is necessary to comment out the 
entry in tcrules.

When compiled with shorewall-shell, it is possible to ping www.suse.com 
(195.135.220.3) from the firewall.

When compiled with shorewall-perl, the following message is produced when 
trying to ping www.suse.com from the firewall:

May  6 11:38:59 l4 kernel: Shorewall:INPUT:DROP:IN=eth0 OUT= 
MAC=00:40:f4:50:35:67:00:60:08:79:fd:67:08:00 SRC=195.135.220.3 
DST=192.168.0.4 LEN=84 TOS=0x00 PREC=0x00 TTL=53 ID=13497 PROTO=ICMP TYPE=0 
CODE=0 ID=23083 SEQ=1 

Steven.


        

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to