Hi Tony
This is what I am getting. Is there something in the kernel that is not
compiled in. I compared and checked in it looks fine.
Thanks
SBox shorewall # shorewall debug start
Compiling...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Compiling /etc/shorewall/zones...
Compiling /etc/shorewall/interfaces...
Determining Hosts in Zones...
Locating Action Files...
Compiling /etc/shorewall/policy...
Running /etc/shorewall/initdone...
Adding Anti-smurf Rules
Adding rules for DHCP
Compiling TCP Flags filtering...
Compiling Kernel Route Filtering...
Compiling Martian Logging...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall/blrules...
Compiling /etc/shorewall/rules...
Compiling /etc/shorewall/conntrack...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.Drop for chain Drop...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /etc/shorewall/accounting...
Generating Rule Matrix...
Compiling /usr/share/shorewall/action.Reject for chain Reject...
Creating iptables-restore input...
Compiling /etc/shorewall/routestopped...
Shorewall configuration compiled to /var/lib/shorewall/.start
Starting Shorewall....
Initializing...
Processing /etc/shorewall/init ...
Processing /etc/shorewall/tcclear ...
Setting up Route Filtering...
Setting up Martian Logging...
Setting up Proxy ARP...
Preparing iptables-restore input...
Running debug_restore_input...
iptables: No chain/target/match by that name.
ERROR: Command "/sbin/iptables -A PREROUTING -p 17 --dport 1719 -j CT
--helper RAS" Failed
Processing /etc/shorewall/stop ...
Processing /etc/shorewall/tcclear ...
Running debug_restore_input...
IPv4 Forwarding Enabled
Processing /etc/shorewall/stopped ...
/usr/share/shorewall/lib.common: line 113: 13829 Terminated
$SHOREWALL_SHELL $script $options $@
On 03/18/2014 01:43 AM, Tom Eastep wrote:
> On 3/17/2014 5:08 AM, Kilburn Abrahams wrote:
>> Hi all
>>
>> Rebuilt a server with kernel 3.13. Installed the same version of
>> shorewall 4.5.18 as a working server. Copied over shorewall configs.
>> Restarted shorewall and this happens. Googled and could not find
>> anything. Not sure how to solve this.
>>
>> SBox shorewall # /etc/init.d/shorewall start
>> * Caching service dependencies
>> ...
>>
>> [ ok ]
>> * Starting shorewall ...
>> iptables-restore: line 23 failed
>> ERROR: iptables-restore Failed. Input is in
>> /var/lib/shorewall/.iptables-restore-input
>> /usr/share/shorewall/lib.common: line 113: 10488 Terminated
>> $SHOREWALL_SHELL $script $options $@ [ !! ]
>> * ERROR: shorewall failed to start
>>
>> /var/lib/shorewall/.iptables-restore-input does indicate where the
>> problem might lie.
> 'does' or 'does not'?
>
> If line 23 is a COMMIT line, then you can gather additional information
> using "shorewall debug start", which will give you the exact rule that
> is causing the issue. You might also see something in the system log.
>
> -Tom
>
>
> ------------------------------------------------------------------------------
> Learn Graph Databases - Download FREE O'Reilly Book
> "Graph Databases" is the definitive new guide to graph databases and their
> applications. Written by three acclaimed leaders in the field,
> this first edition is now available. Download your free book today!
> http://p.sf.net/sfu/13534_NeoTech
>
>
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
