When I try to load a ruleset to a remote shorewall[-lite] instance with DYNAMIC_BLACKLIST=ipset,disconnect
I get an error: ERROR: The 'disconnect' option requires that the conntrack utility be installed This error would make sense in the non-remote-reload situation but doesn't in the remote-reload situation. At least where it is checking the local machine for conntrack. As an aside, what is Shorewall's behaviour when it is configured with "DYNAMIC_BLACKLIST=ipset" and one does "shorewall[-lite] blacklist $IP" while shorewall[-lite] is not (yet) running? Cheers, b.
signature.asc
Description: This is a digitally signed message part
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
