search for: determine_cap

...1.4.6/firewall 2003-07-19 07:58:29.000000000 -0700 +++ shorewall-1.4.6a/firewall 2003-07-22 06:15:42.000000000 -0700 @@ -4616,6 +4616,10 @@ echo "$config does not exist!" >&2 exit 2 fi + # + # Determine the capabilities of the installed iptables/netfilter + # + determine_capabilities [ -z "${STATEDIR}" ] && STATEDIR=/var/state/shorewall @@ -4728,10 +4732,6 @@ strip_file interfaces strip_file hosts # - # Determine the capabilities of the installed iptables/netfilter - # - determine_capabilities - # # Check out t...

...usr/share/shorewall6-lite/lib.base rather than /usr/share/shorewall-lite/lib.base like it does currently? In fact shouldn''t there be a general s/shorewall-lite/shorewall6-lite/ in shorecap in shorewall6-lite? Maybe there is more of that lurking about as well. Also, the first line of the determine_capabilities() function in lib.base is: qt $IP6TABLES -t mangle -L -n && MANGLE_ENABLED=Yes || MANGLE_ENABLED= which is followed somewhat further down in the function with: [ -n "$IP6TABLES" ] || IP6TABLES=$(mywhich ip6tables) But shouldn''t the test for the mangle...

I have been using shorewall for years with ipsets. I have encountered a problem after upgrading from 4.2.11 to 4.4.10. When I run ''shorewall-check'' or ''shorewall start'', it halts with the error: ---------------------------------------------------------------------- ERROR: ipset names in Shorewall configuration files require Ipset Match in your kernel and

...39;''' '']'' ++ which iptables + IPTABLES=/sbin/iptables + ''['' -z /sbin/iptables '']'' ++ added_param_value_no PKTTYPE Yes ++ local val=Yes ++ ''['' -z Yes '']'' ++ case $val in ++ echo Yes + PKTTYPE=Yes + determine_capabilities + qt /sbin/iptables -t nat -L -n + /sbin/iptables -t nat -L -n + NAT_ENABLED=Yes + qt /sbin/iptables -t mangle -L -n + /sbin/iptables -t mangle -L -n + MANGLE_ENABLED=Yes + CONNTRACK_MATCH= + MULTIPORT= + XMULTIPORT= + POLICY_MATCH= + PHYSDEV_MATCH= + IPRANGE_MATCH= + RECENT_MATCH= + OWNER...

I am getting the following message when Shorewall stops can anybody shed any light on this message and where I should be looking? Thanks root@bobshost:~# shorewall stop Loading /usr/share/shorewall/functions... Processing /etc/shorewall/params ... Processing /etc/shorewall/shorewall.conf... Loading Modules... Stopping Shorewall...Processing /etc/shorewall/stop ... IP Forwarding Enabled