On Tue, 2011-08-30 at 21:22 +0100, Steven Jan Springl wrote: > On Tuesday 30 August 2011 14:32:34 Steven Jan Springl wrote: > > Tom > > > > In the attached config. the following tcfilters entry: > > > > eth0:130 1.1.1.0/24 2.2.0.0/16 tcp 100 > > > > produces the following message: > > > > Use of uninitialized value $Shorewall::Tc::lastrule in string eq > > at /usr/share/shorewall/Shorewall/Tc.pm line 1126, <$currentfile> line 11. > > > > Steven. > > Tom > > There was a bug in the original config. I have attached an updated config. > This config also produces the following message: > > [: 1590: -gt: unexpected operator
Steven, The first problem is fixed by this patch -- please see if you are still seeing the second problem. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Misc.pm b/Shorewall/Perl/Shorewall/Misc.pm
index 8394c0e..4f580e5 100644
--- a/Shorewall/Perl/Shorewall/Misc.pm
+++ b/Shorewall/Perl/Shorewall/Misc.pm
@@ -476,6 +476,7 @@ sub setup_mss();
sub add_common_rules() {
my $interface;
my $chainref;
+ my $chainref1;
my $target;
my $rule;
my $list;
@@ -528,9 +529,13 @@ sub add_common_rules() {
my @filters = @{$interfaceref->{filter}};
$chainref = $filter_table->{forward_chain $interface};
+ $chainref1 = $filter_table->{input_chain $interface};
if ( @filters ) {
- add_jump( $chainref , $target, 1, match_source_net( $_ ) ), $chainref->{filtered}++ for @filters;
+ for ( @filters ) {
+ add_jump( $chainref , $target, 1, match_source_net( $_ ) ), $chainref->{filtered}++;
+ add_jump( $chainref1 , $target, 1, match_source_net( $_ ) ), $chainref1->{filtered}++;
+ }
} elsif ( $interfaceref->{bridge} eq $interface ) {
add_jump( $chainref , $target, 1, match_dest_dev( $interface ) ), $chainref->{filtered}++ unless $interfaceref->{options}{routeback} || $interfaceref->{options}{routefilter};
}
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you'll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
_______________________________________________ Shorewall-devel mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-devel
