Shorewall users - Aug 2003 - problems at shorewall startup

Hello,

 I''m using shorewall 1.3.14 on a computer which can be use as a 
gateway and/or as a stand-alone computer. There are two main 
interfaces : ppp0 for internet access, and eth0 for local network.
 All is in wonder, except one thing : if shorewall try to (re)start 
while the computer is alone on the LAN (i.e. LAN is empty, / there is 
no LAN), then it doesn''t work ... log :

Processing /etc/shorewall/params ...
Restarting Shorewall...
Loading Modules...
Initializing...
Determining Zones...
   Zones: net loc
Validating interfaces file...
Validating hosts file...
Validating Policy file...
Determining Hosts in Zones...
   Net Zone: ppp0:0.0.0.0/0
   Local Zone: eth0:0.0.0.0/0
Processing /etc/shorewall/init ...
Deleting user chains...
Creating input Chains...
Configuring Proxy ARP
Setting up NAT...
Adding Common Rules
Adding rules for DHCP
Enabling RFC1918 Filtering
Setting up Kernel Route Filtering...
IP Forwarding Enabled
Processing /etc/shorewall/tunnels...
Processing /etc/shorewall/rules...
   Rule "ACCEPT fw net tcp 21" added.
   [...]
Processing /etc/shorewall/policy...
   [...]
Masqueraded Subnets and Hosts:
   Unable to determine the routes through interface eth0


[...] are removed lines.
Some configuration files :

/etc/shorewall/interfaces :
#ZONE    INTERFACE      BROADCAST       OPTIONS
net     ppp0            -               routefilter,norfc1918
loc     eth0            192.168.0.255   dhcp

/etc/shorewall/masq :
#INTERFACE              SUBNET          ADDRESS
ppp0                    eth0

/etc/shorewall/routestopped :
#INTERFACE      HOST(S)
eth0            -

On Mon, 2003-08-04 at 08:37, rvrr wrote:
> Processing /etc/shorewall/policy...
>    [...]
> Masqueraded Subnets and Hosts:
>    Unable to determine the routes through interface eth0
> 
> 
> [...] are removed lines.
> Some configuration files :
> 
> /etc/shorewall/interfaces :
> #ZONE    INTERFACE      BROADCAST       OPTIONS
> net     ppp0            -               routefilter,norfc1918
> loc     eth0            192.168.0.255   dhcp
> 
> /etc/shorewall/masq :
> #INTERFACE              SUBNET          ADDRESS
> ppp0                    eth0
As clearly stated in the comments in /etc/shorewall/masq, if you specify
an interface name in the SUBNET column then that interface must up up
before Shorewall starts. You can avoid this problem by replacing
''eth0''
with ''192.168.0.0/24''

-Tom
-- 
Tom Eastep    \ Shorewall - iptables made easy
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net