On Fri, 1 Apr 2016 13:06:06 -0700
Tom Eastep <[email protected]> wrote:
>
>
> 1) If a physical interface name was used in the INTERFACE column of
> an entry in /etc/shorewall/masq, then previously a Perl diagnostic was
> issued as the masq rule was being processed and the iptables rule
> and its containing chain were dropped by the optimizer. That has
> been corrected so that physical interface names are handled
> correctly.
>
> Similar issues with physical names in the INTERFACE column of the
> nat and netmap files have also been resolved.
>
Tom
A similar problem occurs if you specify a physical interface in the ecn
file.
ecn entry:
eth20 9.7.5.3
Produces the following error messages:
Checking /etc/shorewall200/ecn...
Use of uninitialized value in concatenation (.) or string
at /usr/share/shorewall/Shorewall/Chains.pm line 2309.
Use of uninitialized value $interface in string eq
at /usr/share/shorewall/Shorewall/Chains.pm line 5602.
ERROR: Internal error in Shorewall::Chains::push_matches
at /usr/share/shorewall/Shorewall/Chains.pm line 1496
at /usr/share/shorewall/Shorewall/Config.pm line 1404.
Shorewall::Config::fatal_error("Internal error in
Shorewall::Chains::push_matches at /usr/sha"...) called
at /usr/share/shorewall/Shorewall/Config.pm line 1444
Shorewall::Config::assert("") called
at /usr/share/shorewall/Shorewall/Chains.pm line 1496
Shorewall::Chains::push_matches(HASH(0x9d6a864), "p", "tcp", "o",
undef) called at /usr/share/shorewall/Shorewall/Chains.pm line 1554
Shorewall::Chains::create_irule(HASH(0x9b179ec), "j", "_ecn", "p",
"tcp", "o", undef) called at /usr/share/shorewall/Shorewall/Chains.pm
line 2482
Shorewall::Chains::add_ijump_internal(HASH(0x9b179ec), "j",
HASH(0x9d6a3dc), 0, "/etc/shorewall200/ecn:17", "p", "tcp", "o",
undef, ...) called at /usr/share/shorewall/Shorewall/Chains.pm line
2503
Shorewall::Chains::add_ijump_extended(HASH(0x9b179ec), "j",
HASH(0x9d6a3dc), "/etc/shorewall200/ecn:17", "p", "tcp", "o", undef)
called at /usr/share/shorewall/Shorewall/Misc.pm line 130
Shorewall::Misc::setup_ecn() called
at /usr/share/shorewall/Shorewall/Compiler.pm line 828
Shorewall::Compiler::compiler("script", "", "directory",
"/etc/shorewall200", "verbosity", 1, "timestamp", 0, "debug", ...)
called at /usr/share/shorewall/compiler.pl line 145
Steven.
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________
Shorewall-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-devel
