DI Roman Fiedler wrote: > Hi everyone, > > I'm trying to setup a host with two shorewall configs, > /etc/shorewall/active and /etc/shorewall/passive > > When I call > /sbin/shorewall check /etc/shorewall/active > I get > /etc/shorewall/shorewall.conf does not exist! > > The same for: > /sbin/shorewall -vv restart /etc/shorewall/active > /etc/shorewall/shorewall.conf does not exist! > > When I do a > export CONFIG_PATH=/etc/shorewall/active > before invoking /sbin/shorewall check /etc/shorewall/active it works. > [EMAIL PROTECTED] > Did I make some kind of operating error? Has someone already used this, > tested this?
Just because you have multiple configurations does not mean that you can arbitrarily remove /etc/shorewall/shorewall.conf. For a number of reasons, Shorewall requires that file to exist. Both /etc/shorewall/shorewall.conf and the shorewall.conf file from the directory specified on the command line will be read during the processing of complex commands like 'check', 'restart', etc. > > > Next problem is how to include param subfiles relative to the > configuration directory. > > I tried to put > . $(find_file params-dns) > into my /etc/shorewall/active/params, which caused > /etc/init.d/shorewall restart > /etc/shorewall/active/params: 250: find_file: not found > > Now I use something else that works: > . $CONFIGDIR/params-dns > > But is this the correct method to do it? I suspect that I could run > into regression problems when updating, so which method is recommended? > Which version of Shorewall are you running? -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users