On 11/30/2020 5:15 AM, Justin Pryzby wrote: > On Sun, Nov 29, 2020 at 07:41:57PM -0800, [email protected] wrote: >> From: Justin Pryzby <[email protected]> >> Date: Sun, 29 Nov 2020 19:20:04 -0600 >>> ... variable called NET_IF but then referred to it without a dollar sign, >>> ... >> >> NET_IF appears in the 2nd column of the installed interfaces file and >> in the 3rd column of the installed snat file. These came from the >> Debian package files. I wouldn't have expected missing "$" there. > > What do you mean "the installed snat file" ? Was it installed in /etc/ ? > What debian package/version ? > >> If NET_IF is prefixed with $, shorewall execution ends with this. >> >> Compiling /etc/shorewall/zones... >> Compiling /etc/shorewall/interfaces... >> ERROR: Undefined shell variable ($NET_IF) /etc/shorewall/interfaces (line >> 18) > > You'd have to set it in the params file. >
Unless 'physical' is set in the third column of the interfaces file, which is what we do in the provided samples (1). To the OP, is 'physical' set to your wireless interface? Assuming that 'wlxa0f3c10a28f7' is your wireless interface, you should have a line like: net NET_IF dhcp,tcpflags,logmartians,nosmurfs,sourceroute=0,physical=wlxa0f3c10a28f7 For the 'Samples/one-interface', 'physical' is the only thing that you should modify to get you going. In the other sample directories, all 'physical' options should be set to their corresponding interfaces. It should be noted that you can not mix defining variable in the params file and using the same interface name when 'physical' is used: /etc/shorewall/params: NET_IF=eth0 NET_OPTS=dhcp /etc/shorewall/interfaces: net $NET_IF $NET_OPTS or: /etc/shorewall/interfaces net NET_IF physical=eth0,dhcp In the former case '$NET_IF' is to be used in the config files whereas in the latter case 'NET_IF' is to be used. If that still does not work for you, please make available an archive of your configuration files. 1) https://gitlab.com/shorewall/code/-/raw/master/Shorewall/Samples/one-interface/interfaces -- Matt Darfeuille <[email protected]> Community: https://sourceforge.net/p/shorewall/mailman/message/37107049/ SPC: https://sourceforge.net/p/shorewall/mailman/message/36596609/ Homepage: https://shorewall.org _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
