Hi Tom, it seems that there is a bug in shorewall-perl handling of "all" in the ORIGINAL DEST column of the rules file. Following rule works with shorewall-shell, but not with shorewall-perl: IMAP/DNAT vpn0 dmz:$MAIL - - - all Results in: ..Expanding Macro /usr/share/shorewall/macro.IMAP... ERROR: Unknown Interface (all) : /usr/share/shorewall/macro.IMAP ( line 12 ) Thanks, Alex ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
Alexander Wilms wrote:> Hi Tom, > > it seems that there is a bug in shorewall-perl handling of "all" in the > ORIGINAL DEST column of the rules file. > > Following rule works with shorewall-shell, but not with shorewall-perl: > > IMAP/DNAT vpn0 dmz:$MAIL - - - all > > Results in: > > ..Expanding Macro /usr/share/shorewall/macro.IMAP... > ERROR: Unknown Interface (all) : /usr/share/shorewall/macro.IMAP ( line > 12 )Hi Alex, I''m not sure this one quit deserves to be called a ''bug'' since I can find nowhere in the Documentation indicating that ''all'' is accepted in the ORIGINAL DEST column. Nevertheless, I''ve made ''all'' a synonym of ''0.0.0.0/0'' in that column to provide compatibility with older versions of Shorewall. SVN revision is 6446. Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/
On Sonntag 27 Mai 2007, Tom Eastep wrote:> > Hi Alex, > > I''m not sure this one quit deserves to be called a ''bug'' since I can > find nowhere in the Documentation indicating that ''all'' is accepted in > the ORIGINAL DEST column. Nevertheless, I''ve made ''all'' a synonym of > ''0.0.0.0/0'' in that column to provide compatibility with older versions > of Shorewall.Mh yes, can be. I use this since ancient times.... So don''t ask me when and why I initially put it there. :-). Thanks.> > SVN revision is 6446. > > Thanks, > -Tom------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/