> This is way too late in the trace. > > Does 'shorewall-lite status -i' show tun1 as disabled? If so, type:
yes it does > shorewall-lite enable tun1 > shorewall-lite restart still fails as above > If that doesn't work, you need to look much earlier in the trace for > 'interface_is_usable tun1'. quite the puzzle! for me anyway. ... ++ sed -r 's/(@.*)?:$//' + for interface in '$(find_all_interfaces1)' + case "$interface" in + for interface in '$(find_all_interfaces1)' + case "$interface" in + for interface in '$(find_all_interfaces1)' + case "$interface" in + for interface in '$(find_all_interfaces1)' + case "$interface" in + for interface in '$(find_all_interfaces1)' + case "$interface" in + interface_is_usable tun1 + local status + status=0 + '[' tun1 '!=' lo ']' + interface_is_up tun1 ++ /sbin/ip -4 link list dev tun1 ++ grep -e '[<,]UP[,>]' + '[' -n '15: tun1: <POINTOPOINT,MULTICAST,NOARP,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 100' ']' ++ find_first_interface_address_if_any tun1 ++ '[' 4 -eq 4 ']' +++ /sbin/ip -f inet addr show tun1 +++ grep 'inet .* global' +++ head -n1 ++ addr=' inet 10.0.0.2/24 brd 10.0.0.255 scope global tun1' ++ '[' -n ' inet 10.0.0.2/24 brd 10.0.0.255 scope global tun1' ']' ++ echo inet 10.0.0.2/24 brd 10.0.0.255 scope global tun1 ++ sed 's/\s*inet //;s/\/.*//;s/ peer.*//' + '[' 10.0.0.2 '!=' 0.0.0.0 ']' + '[' restart = enable ']' + run_isusable_exit tun1 + local status + status=0 + '[' -f /var/lib/shorewall-lite/tun1.status ']' ++ cat /var/lib/shorewall-lite/tun1.status + status=1 + return 1 + status=1 + return 1 + define_firewall + progress_message2 Initializing... + local timestamp ... checking cat /var/lib/shorewall-lite/tun1.status 1 it looks like it thinks it's up ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users