DI Roman Fiedler wrote: > Yes, the -c works for me (also file inclusion with ". $(find_file > params-dns) " is ok). > > Thanks Roberto! > > > PS: Perhaps one of the shorewall developer could correct the usage line > 1280 in > https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk/Shorewall-common/shorewall > > to include the -c option, currently > > echo "Usage: $(basename $0) [debug|trace] [nolock] [ -q ] [ -v ] [ > -t ] <command>" > > It seems that this option is applicable to all commands but I'm not sure > about that.
The -c option has been deprecated for some time (although it is still mentioned once in the Shorewall 4.0 documentation). > > Apart from that "shorewall version" does not want to show the version > when /etc/shorewall does not exist, which is a little unexpected. What is unexpected is that someone would remove a directory installed as part of a product (together with the product's main configuration file) and then express surprise that the product works funny without that directory (and file) being present. You > have to use > # /sbin/shorewall -c /etc/shorewall/passive version > 3.2.6 > This answers the question that I asked in my previous post. In Shorewall 3.0 and 3.2, the handling of the params file was somewhat flawed. - It is generally the case that the file is only needed during the 'compile' phase and not during the execution phase of 'start' and 'restart'. Later versions of Shorewall include an EXPORTPARAMS option which will suppress copying the params file into the shell script generated by the compiler. - The CONFIG_PATH setting was not transferred to the generated script so INCLUDE directives specifying relative path names in the params file didn't work during the execution phase (note that they are unlikely to ever work when Shorewall-lite is being) -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ [EMAIL PROTECTED] PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
