Hi.

When I try to apply a policy a second time (even without changing it)
from a shorewall6 5.0.14.1 machine to a remote shorewall6-lite 5.1.8
machine I get an error:

Initializing...
Adding Providers...
RTNETLINK answers: File exists
   ERROR: Command "/usr/bin/ip -6 route replace default scope global table 250 
nexthop dev eth0.2 weight 1 nexthop dev pppoe-wan1 weight 1 nexthop via 
2001:123:1c:456::1 dev 6in4-henet weight 1" Failed
Restoring Shorewall6 Lite...
Initializing...
Adding Providers...
RTNETLINK answers: File exists
   ERROR: Command "ip -6 route replace default scope global table 250 nexthop 
dev eth0.2 weight 1 nexthop dev pppoe-wan1 weight 1 nexthop via 
2001:123:1c:456::1 dev 6in4-henet weight 1" Failed
Preparing ip6tables-restore input...
Running /usr/sbin/ip6tables-restore...
IPv6 Forwarding Enabled
Terminated
Terminated

Looking at table 250:

# ip -6 route ls table 250
default via 2001:123:1c:456::1 dev 6in4-henet  metric 1024  pref medium

Is it expected that ip should be able to replace the above with what
shorewall6 wants to replace it with and this is a bug in the ip tool or
is there something wrong with the replacement specification?

If I flush that table an re-run the remote-reload, unsurprisingly it
succeeds.

Cheers,
b.

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to