On 3/27/2014 10:36 AM, Hervé Werner wrote: >> Regarding 'reap' : >> >> root@gateway:~# shorewall show -f capabilities | fgrep REAP >> REAP_OPTION=Yes >> root@gateway:~# shorewall -vvv check | fgrep -i reap >> Recent Match "--reap" option: Available >> REAP_OPTION* >> root@gateway:~# shorewall version >> 4.5.21.7 >> root@gateway:~# >> >> I see that you are running a bleeding edge kernel -- which iptables >> version are you running? > > Hum it is strange : > > $ sudo shorewall show -f capabilities | fgrep REAP > REAP_OPTION=Yes > $ sudo shorewall -vvv check | fgrep -i reap > Recent Match "--reap" option: Available > $ sudo shorewall dump | fgrep -i reap > Recent Match "--reap" option (REAP_OPTION): Not available > $ sudo shorewall show capabilities | fgrep REAP > Recent Match "--reap" option (REAP_OPTION): Not available > > > Here is my iptables version : iptables v1.4.21 (OS : Debian Jessie).
Here's a patch. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
diff --git a/Shorewall-core/lib.cli b/Shorewall-core/lib.cli
index 8cf19ed..e696a17 100644
--- a/Shorewall-core/lib.cli
+++ b/Shorewall-core/lib.cli
@@ -2685,7 +2685,7 @@ report_capabilities_unsorted() {
report_capability "Packet length Match (LENGTH_MATCH)" $LENGTH_MATCH
report_capability "IP range Match(IPRANGE_MATCH)" $IPRANGE_MATCH
report_capability "Recent Match (RECENT_MATCH)" $RECENT_MATCH
- [ -n "$RECENT_MATCH" ] && report_capability 'Recent Match "--reap" option (REAP_OPTION)'
+ [ -n "$RECENT_MATCH" ] && report_capability 'Recent Match "--reap" option (REAP_OPTION)' $REAP_OPTION
report_capability "Owner Match (OWNER_MATCH)" $OWNER_MATCH
report_capability "Owner Name Match (OWNER_NAME_MATCH)" $OWNER_NAME_MATCH
if [ -n "$IPSET_MATCH" ]; then
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
