Steven Jan Springl wrote: > On Tuesday 15 May 2007 15:06, Tom Eastep wrote: >> Steven Jan Springl wrote: >>> On Tuesday 15 May 2007 01:03, Tom Eastep wrote: >>>> Steven Jan Springl wrote: >>>>>> On Tuesday 15 May 2007 00:15, Tom Eastep wrote: >>>>>> Wow -- that uncovered a can of worms. I think it's all sorted out in >>>>>> 6352. >>>>>> >>>>>> -Tom >>>>> Tom >>>>> >>>>> Yes, that seems to have fixed the problem. >>>> Thanks, Steven! >>>> >>>> -Tom >>> Good morning Tom. >>> >>> WARNING..... drink two large, strong, cups of coffee before continuing. >>> >>> >>> Yesterday you mentioned a can of worms, I think it might be back. >>> >>> >>> Zones: >>> >>> fw firewall >>> lan ipv4 >>> wan ipv4 >>> dmz ipv4 >>> tst:wan,lan,dmz ipv4 >>> vpn ipsec >>> >>> Interfaces: >>> >>> lan eth0 >>> wan eth1 >>> - eth2 >>> >>> Hosts; >>> >>> dmz eth2:!10.0.0.0/8 >>> >>> >>> When the following commands are issued: >>> >>> shorewall start >>> shorewall add eth2 10.0.0.0/8 tst >>> >>> the following messages are produced: >>> >>> iptables v1.3.6: host/network `exclude' not found >>> Try `iptables -h' or 'iptables --help' for more information. >>> ERROR: Can't add eth2:10.0.0.0/8 to zone tst >>> >>> iptables v1.3.6: host/network `exclude' not found >>> Try `iptables -h' or 'iptables --help' for more information. >>> ERROR: Can't add eth2:10.0.0.0/8 to zone tst >> Good afternoon, Steven. >> >> Please try revision 6354. It worked in the limited test that I did. >> >> -Tom > > Tom > > Revision 6354 hasn't worked. I still get the above errors. > > I have attached my configuration.
Steven, Please forward a trace of the failure -- your configuration looks basically the same as mine so I don't understand why you are still seeing failures. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
