I''m using shorewall with my own tcstart script, just using tcrules for classify. Up to 3.2.8 this worked ok, but after upgrading to 3.4.1 + fixes I get a startup error if I define classify rules (tcrules) with TC_ENABLED other than Internal. As far as I can see, the compiled script does not create the tcpost rule. Trace attached. Thanks. Pablo. PS: message bounced due to size, but I guess Tom''s copy was ok, so he''ll get the trace. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
Pablo Sebastián Greco wrote:> I''m using shorewall with my own tcstart script, just using tcrules for > classify. Up to 3.2.8 this worked ok, but after upgrading to 3.4.1 + > fixes I get a startup error if I define classify rules (tcrules) with > TC_ENABLED other than Internal. > As far as I can see, the compiled script does not create the tcpost rule. > Trace attached.You need to regenerate your /etc/shorewall/capabilities file. It was generated by an old version of Shorewall and doesn''t include the setting for the MANGLE_FORWARD capability. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
Sorry for not quoting, but I didn''t get the shorewall-devel-list mail, just read the message online. Tom It worked, just deleted the capabilities file. I didn''t even remember it was there. Thanks. Pablo. ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net''s Techsay panel and you''ll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV