On 7/26/2014 9:09 AM, [email protected] wrote:
> 
> 
> On Sat, Jul 26, 2014, at 06:42 AM, Tom Eastep wrote:
>> sh -x /var/lib/shorewall-lite/firewall 2> trace
>>
>> The 'trace' file will contain a shell trace.
> 
> That returns
> 
>       sh -x /var/lib/shorewall-lite/firewall 2> trace
>               Usage: /var/lib/shorewall-lite/firewall [ options ] <command>
> 
>               <command> is one of:
>                  start
>                  stop
>                  clear
>                  disable <interface>
>                  down <interface>
>                  enable <interface>
>                  reset
>                  refresh
>                  restart
>                  status
>                  up <interface>
>                  version
> 
>               Options are:
> 
>                  -v and -q        Standard Shorewall verbosity controls
>                  -n               Don't update routing configuration
>                  -p               Purge Conntrack Table
>                  -t               Timestamp progress Messages
>                  -V <verbosity>   Set verbosity explicitly
>                  -R <file>        Override RESTOREFILE setting
> 
> guessing you want, instead
> 
>       sh -x /var/lib/shorewall-lite/firewall restart 2> trace.txt
>               Restarting Shorewall Lite....
>               EXEC'ing 'interfaces-setup'
>               done.
> 
> determined to start following what's being done, I've stepped through that 
> output.  It LOOKS like this is the relevant section
> 
>       cat trace.txt
>               ...
>               + setup_routing_and_traffic_shaping

This is way too late in the trace.

Does 'shorewall-lite status -i' show tun1 as disabled? If so, type:

        shorewall-lite enable tun1
        shorewall-lite restart

If that doesn't work, you need to look much earlier in the trace for
'interface_is_usable tun1'.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Want fast and easy access to all the code in your enterprise? Index and
search up to 200,000 lines of code with a free copy of Black Duck
Code Sight - the same software that powers the world's largest code
search on Ohloh, the Black Duck Open Hub! Try it now.
http://p.sf.net/sfu/bds
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to