search for: run_ip

Tom In Shorewall6 4.4.27 the following proxyndp entry: 2001:4d48:ad51:24::f3 eth2 eth0 no no does not add the required route. The code produced in /var/lib/shorewall6/.restart is: qt $IP -6 route del 2001:4d48:ad51:24::f3/128 dev eth2 run_ip route add 2001:4d48:ad51:24::f3/128 dev eth2 Splitting the line into 2 separate lines: qt $IP -6 route del 2001:4d48:ad51:24::f3/128 dev eth2 run_ip route add 2001:4d48:ad51:24::f3/128 dev eth2 then running "./.restart restart" successfully adds the required route. Steven. ---------...

...ciate it very much. I think it would be useful to have an option to generate a script of the commands Shorewall is about to issue, instead of issuing the commands directly. This script could then be used for revision, modification, and could also be used on another system. I thought about modifying run_iptables, run_ip, run_arp and run_tc to obtain this feature, but I think an option to /sbin/shorewall would be a cleaner and useful solution. Do anybody think this would be useful too? Thank you Luigi

Beta 1 is now availablew for testing. Problems Corrected: 1) Previously, the Shorewall and Shorewall6 install.sh scripts did two things wrong with respect to the /etc/shorewall[6]/routes file: - The existing file was unconditionally removed. - A skeleton file was not installed when SPARSE was not set in the shorewallrc file. Additionally, the installer would remove

Beta 1 is now availablew for testing. Problems Corrected: 1) Previously, the Shorewall and Shorewall6 install.sh scripts did two things wrong with respect to the /etc/shorewall[6]/routes file: - The existing file was unconditionally removed. - A skeleton file was not installed when SPARSE was not set in the shorewallrc file. Additionally, the installer would remove

http://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0 ftp://shorewall.net/pub/shorewall/Alpha/shorewall-2.0.0 -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net

...the problem with this patch: --- shorewall-2.4.0/firewall 2005-06-20 10:58:41.000000000 -0300 +++ shorewall/firewall 2005-06-20 12:03:51.523989888 -0300 @@ -1168,7 +1168,7 @@ if [ -n "$PROVIDERS" ]; then if [ -n "$DEFAULT_ROUTE" ]; then - run_ip route replace default scope global $DEFAULT_ROUTE + ensure_and_save_command ip route replace default scope global $DEFAULT_ROUTE progress_message " Default route $DEFAULT_ROUTE Added." fi in this patch, the ensure_and_save_command could be swa...

I am running version 3.0.7 of Shorewall on a Debian Sarge system, but when I start Shorewall I get this: /usr/share/shorewall/firewall: line 204: 4: command not found I looked there and found this: # Run ip and if an error occurs, stop the firewall and quit # run_ip() { if ! ip $@ ; then if [ -z "$STOPPING" ]; then error_message "ERROR: Command \"ip $@\" Failed" stop_firewall exit 2 fi fi } I assume the error refers to the "ip" command, which is found on my sy...

Hi, I installed the shorewall 1.3.8-2 debian package to my debian testing machine which serves as the gateway to the internet. Since I have two other machine connect to internet thru this gateway machine, I also downloaded the configuration guide for "basic two-interface firewall" and followed the instructions. When I try to start the shorewall I get the following message and can not

...=fatal_error + deletechain shorewall + qt /sbin/iptables -L shorewall -n + /sbin/iptables -L shorewall -n + qt /sbin/iptables -F shorewall + /sbin/iptables -F shorewall + qt /sbin/iptables -X shorewall + /sbin/iptables -X shorewall + ''['' -n Yes '']'' + delete_nat + run_iptables -t nat -F + ''['' -n '''' '']'' + ''['' -n Yes '']'' + ''['' -f /tmp/shorewall.nm8830/iprange '']'' + /sbin/iptables -t nat -F + run_iptables -t nat -X + ''['' -n ...