Shorewall users - Oct 2010 - FW: ERROR: FOREWARD_CLEAR_MARK=Yes requires MARK Target in your kernel and iptables

This obviously means that your kernel does not support what you are
expecting from the config. 

Either change your config or recompile your kernel with given MARK support
either as module or hard integrated. 

 

  _____  

Von: lists65@gmail.com [mailto:lists65@gmail.com] 
Gesendet: Sonntag, 10. Oktober 2010 16:53
An: shorewall-users@lists.sourceforge.net
Betreff: [Shorewall-users] FW: ERROR: FOREWARD_CLEAR_MARK=Yes requires
MARKTarget in your kernel and iptables

 

 

 

I just installed Shorewall and did my configuration as an Universal
installation and tried to start Shorewall and got the above error.  I have
Googled the error and tried to find a resolution on the Shorewall site but I
was able to find a resolution, if somesome could help me,  I would
appreciate it.

 

 

Shorewall: shorewall-4.4.13-3

Centos: 5.5  64 bit O/S

Virtual host Virtuozzo Centos 64 Bit

 

 

Error when trying to start shorewall:

 

shorewall start

Compiling...

Processing /etc/shorewall/shorewall.conf...

Loading Modules...

   ERROR: FOREWARD_CLEAR_MARK=Yes requires MARK Target in your kernel and
iptables

 

I am not sure what this means.  I have tried to Google the error and looked
at the shorewall site and didn''t find how to fix the issue.

 

 

 



------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb

On 10/10/10 7:52 AM, lists65@gmail.com wrote:
>  
> I just installed Shorewall and did my configuration as an Universal
> installation and tried to start Shorewall and got the above error.  I
> have Googled the error and tried to find a resolution on the Shorewall
> site but I was able to find a resolution, if somesome could help me,  I
> would appreciate it.
>  
> 
> Shorewall: shorewall-4.4.13-3
> 
> Centos: 5.5  64 bit O/S
> 
> Virtual host Virtuozzo Centos 64 Bit
Please read the OpenVZ article on the Shorewall site
(http://www.shorewall.net/OpenVZ.html). There are very particular
requirements for running Shorewall in a Virtuozzo container. Also beware
that many Shorewall features are not available when running the ancient
kernel in CentOS 5 and still fewer when running in an container.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb

On 10/9/10 9:18 AM, Tom Eastep wrote:
> On 10/10/10 7:52 AM, lists65@gmail.com wrote:
>>  
>> I just installed Shorewall and did my configuration as an Universal
>> installation and tried to start Shorewall and got the above error.  I
>> have Googled the error and tried to find a resolution on the Shorewall
>> site but I was able to find a resolution, if somesome could help me,  I
>> would appreciate it.
>>  
>>
>> Shorewall: shorewall-4.4.13-3
>>
>> Centos: 5.5  64 bit O/S
>>
>> Virtual host Virtuozzo Centos 64 Bit
> 
> Please read the OpenVZ article on the Shorewall site
> (http://www.shorewall.net/OpenVZ.html). There are very particular
> requirements for running Shorewall in a Virtuozzo container. Also beware
> that many Shorewall features are not available when running the ancient
> kernel in CentOS 5 and still fewer when running in an container.
> 
Although you can eliminate that particular error by setting
CLEAR_FORWARD_MARKS=No in shorewall.conf.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________



------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb

I just installed Shorewall and did my configuration as an Universal
installation and tried to start Shorewall and got the above error.  I have
Googled the error and tried to find a resolution on the Shorewall site but I
was able to find a resolution, if somesome could help me,  I would
appreciate it.

 

 

Shorewall: shorewall-4.4.13-3

Centos: 5.5  64 bit O/S

Virtual host Virtuozzo Centos 64 Bit

 

 

Error when trying to start shorewall:

 

shorewall start

Compiling...

Processing /etc/shorewall/shorewall.conf...

Loading Modules...

   ERROR: FOREWARD_CLEAR_MARK=Yes requires MARK Target in your kernel and
iptables

 

I am not sure what this means.  I have tried to Google the error and looked
at the shorewall site and didn''t find how to fix the issue.

 

 

 



------------------------------------------------------------------------------
Beautiful is writing same markup. Internet Explorer 9 supports
standards for HTML5, CSS3, SVG 1.1,  ECMAScript5, and DOM L2 & L3.
Spend less time writing and  rewriting code and more time creating great
experiences on the web. Be a part of the beta today.
http://p.sf.net/sfu/beautyoftheweb