On 5/6/2014 6:53 PM, Tom Eastep wrote:
On 5/6/2014 4:42 PM, Tom Eastep wrote:
On 5/6/2014 4:08 PM, Tom Eastep wrote:
On 5/6/2014 7:51 AM, Mike Andrewjeski wrote:
On 5/6/2014 7:34 AM, Roberto C. Sánchez wrote:
On Tue, May 06, 2014 at 07:16:14AM -0700, Mike Andrewjeski wrote:
Oh, Sorry Tom, after running shorewall check, in desperation I copied
the /var/lib/shorewall/zones to /etc/shorewall/zones to see if it would
help. I have a back up of the original /etc/shorewall/zones file.
It looks like this:
#zone display comment
fw firewall
loc ipv4
net ipv4
If you replace the bogus zones file with the backup of the original
zones file, then does it work?
No, it won't work with the original zones file. Same error.
If I replace the bogus file with the one above and adjust CONFIG_PATH to
omit /etc/shorewall, the configuration compiles fine for me. So I hope
that the trace file will show us what is wrong.
And also please:
sh -x /sbin/shorewall start > trace1 2>1
Make that:
sh -x /sbin/shorewall start > trace1 2>&1
-Tom
I've attached the trace file.
Thanks again, guys.
-mike
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
---
This email is free from viruses and malware because avast! Antivirus protection
is active.
http://www.avast.com
+ g_program=shorewall
+ . /usr/share/shorewall/shorewallrc
++ HOST=debian
++ PREFIX=/usr
++ SHAREDIR=/usr/share
++ LIBEXECDIR=/usr/share
++ PERLLIBDIR=/usr/share/shorewall
++ CONFDIR=/etc
++ SBINDIR=/sbin
++ MANDIR=/usr/share/man
++ INITDIR=/etc/init.d
++ INITSOURCE=init.debian.sh
++ INITFILE=
++ AUXINITSOURCE=
++ AUXINITFILE=
++ SYSTEMD=
++ SYSCONFFILE=default.debian
++ SYSCONFDIR=/etc/default
++ SPARSE=Yes
++ ANNOTATED=
++ VARDIR=/var/lib
+ g_libexec=/usr/share
+ g_sharedir=/usr/share/shorewall
+ g_sbindir=/sbin
+ g_perllib=/usr/share/shorewall
+ g_vardir=/var/lib
+ g_confdir=/etc/shorewall
+ g_readrc=1
+ . /usr/share/shorewall/lib.cli
++ '[' -z 1 ']'
++ . /usr/share/shorewall/lib.base
+++ SHOREWALL_LIBVERSION=40502
+++ SHOREWALL_CAPVERSION=40504
+++ '[' -n shorewall ']'
+++ '[' -z 1 ']'
+++ g_basedir=/usr/share/shorewall
+++ case $g_program in
+++ g_product=Shorewall
+++ g_family=4
+++ g_tool=
+++ g_lite=
+++ VARDIR=/var/lib/shorewall
+++ '[' -z '' ']'
+++ . /usr/share/shorewall/lib.common
++++ LEFTSHIFT='<<'
+ shorewall_cli start
+ g_debugging=
+ '[' 1 -gt 0 ']'
+ '[' xstart = xdebug -o xstart = xtrace ']'
+ g_nolock=
+ '[' 1 -gt 0 ']'
+ '[' start = nolock ']'
+ g_noroutes=
+ g_purge=
+ g_ipt_options=-nv
+ g_fast=
+ g_verbose_offset=0
+ g_use_verbosity=
+ g_debug=
+ g_export=
+ g_refreshchains=:none:
+ g_confess=
+ g_update=
+ g_convert=
+ g_annotate=
+ g_recovering=
+ g_timestamp=
+ g_shorewalldir=
+ VERBOSE=
+ VERBOSITY=
+ '[' -n '' ']'
+ . /usr/share/shorewall/lib.cli-std
+ finished=0
+ '[' 0 -eq 0 ']'
+ '[' 1 -eq 0 ']'
+ option=start
+ case $option in
+ finished=1
+ '[' 1 -eq 0 ']'
+ '[' 1 -eq 0 ']'
+ PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin
+ MUTEX_TIMEOUT=
+ '[' -f /etc/shorewall/vardir ']'
+ '[' -n /var/lib/shorewall ']'
+ '[' '!' -f /var/lib/shorewall/firewall ']'
+ g_firewall=/var/lib/shorewall/firewall
+ version_file=/usr/share/shorewall/version
+ '[' -f /usr/share/shorewall/version ']'
++ cat /usr/share/shorewall/version
+ SHOREWALL_VERSION=4.5.5.3
+ banner='Shorewall-4.5.5.3 Status at -'
+ case $(echo -e) in
++ echo -e
+ g_ring_bell='echo -e \a'
+ g_echo_e='echo -e'
+ case $(echo -n "Testing") in
++ echo -n Testing
+ g_echo_n=-n
+ COMMAND=start
+ case "$COMMAND" in
+ get_config Yes Yes
+ local prog
+ ensure_config_path
+ local F
+ F=/usr/share/shorewall/configpath
+ '[' -z '' ']'
+ '[' -f /usr/share/shorewall/configpath ']'
+ . /usr/share/shorewall/configpath
++ CONFIG_PATH=/etc:/usr/share/shorewall
+ '[' -n '' ']'
+ '[' Yes = Yes ']'
++ find_file params
++ local saveifs
++ saveifs=
++ local directory
++ case $1 in
+++ split /etc:/usr/share/shorewall
+++ local ifs
+++ ifs='
'
+++ IFS=:
+++ echo /etc /usr/share/shorewall
+++ IFS='
'
++ for directory in '$(split $CONFIG_PATH)'
++ '[' -f /etc/params ']'
++ for directory in '$(split $CONFIG_PATH)'
++ '[' -f /usr/share/shorewall/params ']'
++ echo /etc/shorewall/params
+ params=/etc/shorewall/params
+ '[' -f /etc/shorewall/params ']'
+ . /etc/shorewall/params
++ find_file shorewall.conf
++ local saveifs
++ saveifs=
++ local directory
++ case $1 in
+++ split /etc:/usr/share/shorewall
+++ local ifs
+++ ifs='
'
+++ IFS=:
+++ echo /etc /usr/share/shorewall
+++ IFS='
'
++ for directory in '$(split $CONFIG_PATH)'
++ '[' -f /etc/shorewall.conf ']'
++ echo /etc/shorewall.conf
++ return
+ config=/etc/shorewall.conf
+ '[' -f /etc/shorewall.conf ']'
+ '[' -r /etc/shorewall.conf ']'
+ . /etc/shorewall.conf
+ ensure_config_path
+ local F
+ F=/usr/share/shorewall/configpath
+ '[' -z /etc:/usr/share/shorewall ']'
+ '[' -n '' ']'
++ id -u
+ '[' -z '' -a 0 = 0 ']'
+ '[' '' = Yes ']'
+ '[' 4 -eq 4 ']'
+ '[' -n '' ']'
++ mywhich iptables
+ IPTABLES=/sbin/iptables
+ '[' -z /sbin/iptables ']'
+ g_tool=/sbin/iptables
+ '[' -n '' ']'
+ IP=ip
+ '[' -n '' ']'
+ IPSET=ipset
+ '[' -n '' ']'
+ TC=tc
+ '[' -n '' ']'
+ RESTOREFILE=restore
+ validate_restorefile RESTOREFILE
+ case $RESTOREFILE in
+ '[' Yes = Yes ']'
+ case $STARTUP_ENABLED in
+ '[' -n '' ']'
+ case ${SHOREWALL_COMPILER:=perl} in
+ case ${TC_ENABLED:=Internal} in
+ '[' -z '' ']'
+ LOGFORMAT=Shorewall:%s.%s
+ '[' -n Shorewall:%s.%s ']'
+ LOGFORMAT=Shorewall:
+ '[' -n '' ']'
+ LOG_VERBOSITY=-1
+ '[' -n '' -a -z '' ']'
+ case $VERBOSITY in
+ '[' -n '' ']'
+ VERBOSITY=2
+ '[' -n '' ']'
+ VERBOSITY=2
+ '[' 2 -lt -1 ']'
+ '[' 2 -gt 2 ']'
++ hostname
+ g_hostname=ns1
+ '[' -n '' ']'
+ RSH_COMMAND='ssh ${root}@${system} ${command}'
+ '[' -n '' ']'
+ RCP_COMMAND='scp ${files} ${root}@${system}:${destination}'
+ case $MANGLE_ENABLED in
+ '[' -n '' ']'
+ case $AUTOMAKE in
+ '[' -n '' ']'
+ case $LOAD_HELPERS_ONLY in
+ '[' -n '' ']'
+ case $LEGACY_FASTSTART in
+ '[' -n '' ']'
+ LEGACY_FASTSTART=Yes
+ shift
+ start_command
+ local finished
+ finished=0
+ local object
+ local rc
+ rc=0
+ product_is_started
+ qt1 /sbin/iptables -L shorewall -n
+ local status
+ '[' 1 ']'
+ /sbin/iptables -L shorewall -n
+ status=0
+ '[' 0 -ne 4 ']'
+ return 0
+ error_message 'Shorewall is already running'
+ echo ' Shorewall is already running'
Shorewall is already running
+ exit 0
------------------------------------------------------------------------------
Is your legacy SCM system holding you back? Join Perforce May 7 to find out:
• 3 signs your SCM is hindering your productivity
• Requirements for releasing software faster
• Expert tips and advice for migrating your SCM now
http://p.sf.net/sfu/perforce
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
