On 10/05/2017 12:05 AM, Daniel Nelson wrote: > I'm using the shorewall 5.1.5.2 gentoo ebuild and getting an error when > running `shorewall start`. > > iptables-restore: line 144 failed > ERROR: iptables-restore Failed. Input is in > /var/lib/shorewall/.iptables-restore-input > > I tried to use the process of elimination on the script to find the problem > and found that if I remove all hashlimit lines iptables-restore will complete > successfully. I don't know much about kernel configuration here but I did > find I have xt_hashlimit loaded: > > $ lsmod | grep hashlimit > xt_hashlimit 20480 0 > > Attached is the contents of .iptables-restore-input.
Please look in your kernel log to see what netfilter messages are issued when this failure occurs. Also, with a hashlimit rule in place, try 'shorewall debug reload' -- that can give better diagnostic information. Thanks, -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
