OK, I am stuck. I have installed the latest 2.6.20 kernel and turned on every imaginable netfilter option - have installed latest iptables 1.3.7 - but, as soon as I try to use a CONTINUE policy, I just get :

   ...
   Applying Policies...
   iptables v1.3.7: Couldn't load target
   `CONTINUE':/usr/local/lib/iptables/libipt_CONTINUE.so: cannot open
   shared object file: No such file or directory

   Try `iptables -h' or 'iptables --help' for more information.
      ERROR: Command "/sbin/iptables -A net2c148 -j CONTINUE" Failed
   Processing /etc/shorewall/stop ...
   /var/lib/shorewall/.start: line 211: source_ip_range: command not found
   /var/lib/shorewall/.start: line 212: dest_ip_range: command not found
   IP Forwarding Enabled
   Processing /etc/shorewall/stopped ...
/sbin/shorewall: line 225: 24311 Terminated ${VARDIR}/.start $debugging start

'shorewall check' runs just fine, but a 'start' results in the output above.

I'm just trying to do a simple nested-zone config, per the docs.

Here's my capabilities :

Shorewall has detected the following iptables/netfilter capabilities:
  NAT: Available
  Packet Mangling: Available
  Multi-port Match: Not available
  Connection Tracking Match: Available
  Packet Type Match: Available
  Policy Match: Not available
  Physdev Match: Not available
  Packet length Match: Available
  IP range Match: Available
  Recent Match: Available
  Owner Match: Available
  Ipset Match: Not available
  CONNMARK Target: Available
  Extended CONNMARK Target: Available
  Connmark Match: Available
  Extended Connmark Match: Available
  Raw Table: Not available
  IPP2P Match: Not available
  CLASSIFY Target: Available
  Extended REJECT: Available
  Repeat match: Available
  MARK Target: Available
  Extended MARK Target: Available
  Mangle FORWARD Chain: Available
  Comments: Available


Tired of ripping my hair out - maybe there's just something painfully obvious I'm missing - suggestions eagerly solicited.

thanks
Phil
begin:vcard
fn:Phil Cordier
n:Cordier;Phil
org:GridZones
adr;dom:;;PO Box 55099;Seattle;WA;98155
email;internet:[EMAIL PROTECTED]
title:President / CEO
tel;work:206-441-7580
tel;fax:206-219-5307
tel;pager:[EMAIL PROTECTED]
tel;cell:206-407-3037
x-mozilla-html:TRUE
url:http://www.gridzones.com
version:2.1
end:vcard

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to