Tom,

I know you said you were not going to do any more work with ipsets, so
feel free to ignore this, but just for the historical record (somebody
else might run across this and search) Shorewall[-perl 4.0.6] is
rejecting the name of an ipset which the ipset command itself appears to
like perfectly well:

   ERROR: Invalid ipset name (+brian-laptop) : /etc/shorewall/gw/hosts (line 
134)

The shorewall-hosts manpage doesn't list any limitations on legal ipset
names.

Simply changing the RE in /usr/share/shorewall-perl/Shorewall/Zones.pm
from /^\+[a-zA-Z]\w*$/ to /^\+[a-zA-Z][-\w]*$/ solves the problem.  The
same RE is used in /usr/share/shorewall-perl/Shorewall/Chains.pm for
ipsets.

Cheers,
b.

Attachment: signature.asc
Description: This is a digitally signed message part

-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to