DI Roman Fiedler wrote:
> Hi everyone,
> 
> I'm trying to setup a host with two shorewall configs,
> /etc/shorewall/active and /etc/shorewall/passive
> 
> When I call
>   /sbin/shorewall check /etc/shorewall/active
> I get
>   /etc/shorewall/shorewall.conf does not exist!
> 
> The same for:
>   /sbin/shorewall -vv restart /etc/shorewall/active
>   /etc/shorewall/shorewall.conf does not exist!
> 
> When I do a
>   export CONFIG_PATH=/etc/shorewall/active
> before invoking  /sbin/shorewall check /etc/shorewall/active it works.
> [EMAIL PROTECTED]
> Did I make some kind of operating error? Has someone already used this,
> tested this?

Just because you have multiple configurations does not mean that you can
arbitrarily remove /etc/shorewall/shorewall.conf. For a number of reasons,
Shorewall requires that file to exist. Both /etc/shorewall/shorewall.conf
and the shorewall.conf file from the directory specified on the command line
will be read during the processing of complex commands like 'check',
'restart', etc.

> 
> 
> Next problem is how to include param subfiles relative to the
> configuration directory.
> 
> I tried to put
>   . $(find_file params-dns)
> into my /etc/shorewall/active/params, which caused
>   /etc/init.d/shorewall restart
>   /etc/shorewall/active/params: 250: find_file: not found
> 
> Now I use something else that works:
>   . $CONFIGDIR/params-dns
> 
> But is this the correct  method to do it? I suspect that I could run
> into regression problems when updating, so which method is recommended?
> 

Which version of Shorewall are you running?

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to