Hi Roberto,
On 21 November 2017 at 12:40, Roberto C. Sánchez <[email protected]> wrote:
>> I even had to replace allow-hotplug with auto on all nics in
>> /etc/network/interfaces to have shorewall startup at boot.
>
> This is strange. I have not encountered this. Can you describe more
> details of your configuration so that I can understand this?
I performed a clean/fresh install of stretch.
After install my /etc/network/interfaces looked like this (removed
loopback here in the email):
# The primary network interface
allow-hotplug eno1
iface eno1 inet dhcp
After booting into my new installation I also added:
# LAN interface
allow-hotplug eno2
iface eno2 inet static
address 192.168.1.1
netmask 255.255.255.0
I then configured shorewall and started my firewall with 'sudo shorewall start'
Verified that everything was working as expected.
Then i set startup=1 in /etc/default/shorewall and also verified that
STARTUP_ENABLED=YES in /etc/shorewall/shorewall.conf.
I then rebooted my firewall to verify that it started up automatically.
However it did not start.
I found that systemd script shorewall.service was disabled by running
'systemctl is-enabled shorewall'.
The output of the command told me that the service was disabled, so I
enabled it by running:
$ sudo systemctl enable shorewall.service
Rebooted the firewall again but it still did not start automatically.
Then I just for the fun of it replaced allow-hotplug with auto like this:
# The primary network interface
auto eno1
iface eno1 inet dhcp
# LAN interface
auto eno2
iface eno2 inet static
address 192.168.1.1
netmask 255.255.255.0
Rebooted again and now shorewall started automatically when the
firewall boots up.
I found this a bit strange but now it works as expected.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users
