On 1/3/11 3:49 PM, Steven Jan Springl wrote:

> If the rule is changed to:
> 
> COUNT()  lan  tst
> 
> the following message is produced:
> 
> iptables-restore v1.4.10: Couldn't load target 
> `COUNT()':/usr/local/libexec/xtables/libipt_COUNT().so: cannot open shared 
> object file: No such file or directory
> 
> ---------------------------------------------------------------------------------------------------------------------
> 
> If the rule is changed to:
> 
> COUNT():warn  lan  tst
> 
> the following message is produced:
> 
> ERROR: Internal error in Shorewall::Chains::delete_jumps 
> at /usr/share/shorewall/Shorewall/Chains.pm line 1165

Steven,

Here's a patch that generates an error in these cases. Don't know if I
totally like this solution but it's simple and efficient.

Thanks,
-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Rules.pm 
b/Shorewall/Perl/Shorewall/Rules.pm
index a2ca7a7..c140e90 100644
--- a/Shorewall/Perl/Shorewall/Rules.pm
+++ b/Shorewall/Perl/Shorewall/Rules.pm
@@ -135,7 +135,7 @@ sub get_target_param( $ ) {
     my ( $target, $param ) = split '/', $_[0];
 
     unless ( defined $param ) {
-       ( $target, $param ) = ( $1, $2 ) if $target =~ /^(.*?)[(](.*)[)]$/;
+       ( $target, $param ) = ( $1, $2 ) if $target =~ /^(.*?)[(](.+)[)]$/;
     }
 
     ( $target, $param );

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and, 
should the need arise, upgrade to a full multi-node Oracle RAC database 
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel

Reply via email to