Andrew Suffield wrote:
> 
> I suggest that a suitable trap would be on this part of
> determine_capabilities():
> 
>     qt $IPTABLES -N fooX1234
> 
> If that fails, then the rest of the exercise is pointless anyway, and
> either netfilter is missing completely, iptables or the kernel is
> broken, or the user doesn't have access.

[EMAIL PROTECTED]:~$ shorewall show capabilities
iptables v1.3.6: can't initialize iptables table `filter': Permission denied
(you must be root)
Perhaps iptables or your kernel needs to be upgraded.
   ERROR: The command "/sbin/iptables -N fooX1234" failed
[EMAIL PROTECTED]:~$

-Tom
-- 
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ [EMAIL PROTECTED]
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key

Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
SF.Net email is sponsored by:
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services
for just about anything Open Source.
http://ad.doubleclick.net/clk;164216239;13503038;w?http://sf.net/marketplace
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to