I am not even sure this is a shorewall issue as kernel, iptables, and shorewall have all recently been updated.
Shorewall Version: 4.2.9 Iptables Version: v1.4.3.2 Kernel Version: 2.6.30-rc8 OS: Centos 4.7 X86_64 I see the following on std-output and /var/log/messages Jun 4 22:17:27 firewall shorewall: Compiling... Jun 4 22:17:29 firewall kernel: Netfilter messages via NETLINK v0.30. Jun 4 22:17:29 firewall kernel: nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Jun 4 22:17:29 firewall kernel: CONFIG_NF_CT_ACCT is deprecated and will be removed soon. Please use Jun 4 22:17:29 firewall kernel: nf_conntrack.acct=1 kernel paramater, acct=1 nf_conntrack module option or Jun 4 22:17:29 firewall kernel: sysctl net.netfilter.nf_conntrack_acct=1 to enable it. Jun 4 22:17:29 firewall kernel: ctnetlink v0.93: registering with nfnetlink. Jun 4 22:17:30 firewall kernel: ClusterIP Version 0.8 loaded successfully Jun 4 22:17:30 firewall kernel: xt_time: kernel timezone is -0700 Jun 4 22:17:31 firewall shorewall: Compiling /etc/shorewall/zones... Jun 4 22:17:31 firewall shorewall: Compiling /etc/shorewall/interfaces... Jun 4 22:17:31 firewall shorewall: Determining Hosts in Zones... I have added nf_conntrack.acct=1 to /etc/sysctl.conf, but I still get that message. I did not find CONFIG_NF_CT_ACCT in the kernel Makefile, or in any of the shorewall files. A google search pulls up bug reports and other patches, but nothing definitive on the cause or the fix. This appears to just be a warning message and does not negatively impact the system, but I was wondering if anyone here knows the root cause. Thanks. ------------------------------------------------------------------------------ OpenSolaris 2009.06 is a cutting edge operating system for enterprises looking to deploy the next generation of Solaris that includes the latest innovations from Sun and the OpenSource community. Download a copy and enjoy capabilities such as Networking, Storage and Virtualization. Go to: http://p.sf.net/sfu/opensolaris-get _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users