Aha!
I see now (overlooked it before) that the
/etc/systemd/system/shorewall.service I made myself (first post) was not
necessary... and even pointless :).
If you just do a 'sudo systemctl enable shorewall.service' after you
installed shorewall 5.0.4: all is well :).
I recon this is the only change you made in the 5.0.7-1 version, am I right?
Good solution for anyone installing this version until it emerges in the
standard repositories.
Thanks and cheers Roberto!
Wouter
2016-04-01 14:11 GMT+02:00 Roberto C. Sánchez <[email protected]>:
> Wouter,
>
> That is a problem that I discovered a few weeks after I uploaded 5.0.4.
> I was actually surprised that (a) I overlooked it, and (b) nobody ever
> reported it. The problem was corrected with the 5.0.7-1 upload to
> Debian unstable last week.
>
> Executing 'systemctl enable shorewall.service' is the appropriate
> solution. It is effectively what the package does now after it is
> installed. There would not be a need to update to the newer package
> unless there was some other more pressing bug fix or new feature that
> you required.
>
> Regards,
>
> -Roberto
>
> On Fri, Apr 01, 2016 at 01:32:23PM +0200, Wouter Deurholt wrote:
> > Greetings,
> >
> > I installed Shorewall (5.0.4) on my Ubuntu server 16.04 (currently
> beta).
> > It is functioning perfectly fine when started. There is however one
> > problem. It is not starting at boot-time.
> > I even tried to add a wait_interface="eno1" and
> wait_interface="eno2" to
> > my /etc/default/shorewall.
> > /etc/default/shorewall
> > startup=1
> > [...]
> > #### ####
> >
> > /etc/shorewall/shorewall.conf
> > STARTUP_ENABLED=Yes
> > [...]
> > #### ####
> >
> > I can start it up perfectly fine without any errors with
> > sudo shorewall start:
> >
> > I found a solution/workaround somewhere by making a systemd startup
> script
> > and that works fine as follows:
> >
> > /etc/systemd/system/shorewall.service
> > [Unit]
> > Description=Shorewall IPv4 firewall
> > Wants=network-online.target
> > After=network-online.target
> > Conflicts=iptables.service firewalld.service
> >
> > [Service]
> > Type=oneshot
> > RemainAfterExit=yes
> > EnvironmentFile=-/etc/default/shorewall
> > StandardOutput=syslog
> > ExecStart=/sbin/shorewall $OPTIONS start $STARTOPTIONS
> > ExecStop=/sbin/shorewall $OPTIONS stop
> > ExecReload=/sbin/shorewall $OPTIONS reload $RELOADOPTIONS
> >
> > [Install]
> > WantedBy=basic.target
> > #### ####
> > followed by a
> > sudo systemctl enable shorewall.service
> >
> > But the big question is of course: Why is it not (default) starting at
> > boot?
> >
> > Thanks!
> >
> > Wouter
>
> >
> ------------------------------------------------------------------------------
> > Transform Data into Opportunity.
> > Accelerate data analysis in your applications with
> > Intel Data Analytics Acceleration Library.
> > Click to learn more.
> > http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
>
> > _______________________________________________
> > Shorewall-users mailing list
> > [email protected]
> > https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
> --
> Roberto C. Sánchez
> http://people.connexer.com/~roberto
> http://www.connexer.com
>
>
> ------------------------------------------------------------------------------
> Transform Data into Opportunity.
> Accelerate data analysis in your applications with
> Intel Data Analytics Acceleration Library.
> Click to learn more.
> http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users
>
>
--
Wouter Y. Deurholt
phone: +31 (0) 6 46271448
email: [email protected]
------------------------------------------------------------------------------
Transform Data into Opportunity.
Accelerate data analysis in your applications with
Intel Data Analytics Acceleration Library.
Click to learn more.
http://pubads.g.doubleclick.net/gampad/clk?id=278785471&iu=/4140
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
