On 7/21/10 3:05 PM, Brad Clarke wrote: > On Wed, Jul 21, 2010 at 4:36 PM, Tom Eastep <[email protected]> wrote: >> On 7/21/10 2:22 PM, Brad Clarke wrote: >> >>> >>> >>> Dump attached if you need it >>> >> >> A Shorewall STARTUP_LOG covering the time of the failures would be much >> more useful. > > > attached the log of a single failure (the whole log was pretty big already)
So what I see here is that: a) Shorewall was started successfully b) There were several up/down events that resulted in no change c) Shorewall was stopped. To help make events clearer in the log, I've prepared the attached patch. Please: a) Apply the patch to /usr/share/shorewall/Shorewall/Zones b) Create a failure c) Forward the relevant part of the log. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall/Perl/Shorewall/Zones.pm
b/Shorewall/Perl/Shorewall/Zones.pm
index 7b3059d..ed86611 100644
--- a/Shorewall/Perl/Shorewall/Zones.pm
+++ b/Shorewall/Perl/Shorewall/Zones.pm
@@ -1400,6 +1400,9 @@ sub compile_updown() {
'state=cleared',
'' );
+ emit 'progress_message3 "$g_product $COMMAND triggered by $1"';
+ emit '';
+
if ( $family == F_IPV4 ) {
emit 'if shorewall_is_started; then';
} else {
@@ -1461,17 +1464,20 @@ sub compile_updown() {
emit( ' COMMAND=start' );
}
- emit( ' detect_configuration',
+ emit( ' progress_message3 "$g_product attempting $COMMAND"',
+ ' detect_configuration',
' define_firewall' );
if ( $wildcard ) {
emit( ' elif [ "$state" = started ]; then',
+ ' progress_message3 "$g_product attempting restart"',
' COMMAND=restart',
' detect_configuration',
' define_firewall' );
} else {
emit( ' else',
' COMMAND=stop',
+ ' progress_message3 "$g_product attempting stop"',
' detect_configuration',
' stop_firewall' );
}
@@ -1495,10 +1501,12 @@ sub compile_updown() {
'',
' if [ "$state" = started ]; then',
' COMMAND=restart',
+ ' progress_message3 "$g_product attempting restart"',
' detect_configuration',
' define_firewall',
' elif [ "$state" = stopped ]; then',
' COMMAND=start',
+ ' progress_message3 "$g_product attempting start"',
' detect_configuration',
' define_firewall',
' fi',
@@ -1510,6 +1518,7 @@ sub compile_updown() {
' case $state in',
' started)',
' COMMAND=restart',
+ ' progress_message3 "$g_product attempting restart"',
' detect_configuration',
' define_firewall',
' ;;',
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ This SF.net email is sponsored by Sprint What will you do first with EVO, the first 4G phone? Visit sprint.com/first -- http://p.sf.net/sfu/sprint-com-first
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
