[Shorewall-users] iptables: Invalid argument

Phil Tomson
Wed, 10 Sep 2003 10:38:20 -0000

On Wed, 10 Sep 2003, Jerry Vonau wrote:

> Phil:
>
> Two things come to mind
> First, 1.3.14a is a bit old.... I''d move to 1.4.x to stay
current...
> Second, since you did a reinstall with the same effect,
> can you post the config files that were edited?
>
> This is strange:
> >> + interface=ppp0
> >> + list_search ppp0 ppp0 eth0
> >> + local e=ppp0
>
> Is ppp0 listed twice in the interfaces file??
> I can''t tell with seeing some files...
>
> Jerry Vonau


OK.  Here''s the interfaces file:


#ZONE	INTERFACE	BROADCAST	OPTIONS
net	ppp0            detect          dhcp,routefilter
loc	eth0            detect


Here''s the masq file:

#INTERFACE	        SUBNET		ADDRESS
ppp0			eth0


Here''s the rules file :

# Accept DNS connections from the firewall to the network
#
ACCEPT		fw	  net		tcp	53
ACCEPT		fw	  net		udp	53
#
# Accept SSH connections from the local network for administration
#
ACCEPT		loc	  fw		tcp	22
#
# Accept Ping Ubiquitously
#
ACCEPT		loc	fw		icmp	8
ACCEPT		net	fw		icmp	8

Here''s the policy file:

#SOURCE		DEST		POLICY		LOG LEVEL
LIMIT:BURST
loc		net		ACCEPT
#
# If you want open access to the internet from your firewall, uncomment
the
# following line
#fw		net		ACCEPT
net		all		DROP		info
all		all		REJECT		info


I''m not sure which part you''re quoting that shows ppp0
twice...

Phil






>
> ----- Original Message -----
> From: "Phil Tomson" <ptkwt@aracnet.com>
> To: "Shorewall Users Mailing List"
<shorewall-users@lists.shorewall.net>
> Sent: Wednesday, September 10, 2003 03:11 AM
> Subject: Re: [Shorewall-users] iptables: Invalid argument
>
>
> >
> >
> > On Wed, 10 Sep 2003, Joshua Banks wrote:
> >
> > > Hard to say without any experience picking apart iptables data.
I''m
> surprised no one has answered
> > > this yet. Phil it looks as though you''ve given all the
correct info. If
> this isn''t working then I
> > > would uninstall this and reinstall. You have a setup similar to
mine.
> Really doesn''t get any
> > > easier than the way you have this setup. So a simple unistall
reinstall
> is a very simple work
> > > around for now. Thats if you need this working ASP.
> > >
> > > Wish I could''ve been more helpful. The only thing that I
was thinking is
> that there was possibly
> > > some whitespace detected when you edited a file...Thats just a
guess..
> > >
> > > JBanks
> >
> >
> > I just tried the uninstall-reinstall idea.  Problem still exists.
> >
> > The offending iptables command is this (from the trace):
> > iptables -t nat -A ppp0_masq -s 255.255.255.255/32 -d 0.0.0.0/0 -j
> > MASQUERADE
> >
> >
> > The part that is the invalid argument is the ''-j
MASQUERADE''.  If I issue
> > the command:
> >
> > iptables -t nat -A ppp0_masq -s 255.255.255.255/32 -d 0.0.0.0/0
> >
> > without the -j option there''s no complaint, so
that''s how I''m coming to
> > that conclusion...
> >
> > Phil
> >
> > _______________________________________________
> > Shorewall-users mailing list
> > Post: Shorewall-users@lists.shorewall.net
> > Subscribe/Unsubscribe:
> http://lists.shorewall.net/mailman/listinfo/shorewall-users
> > Support: http://www.shorewall.net/support.htm
> > FAQ: http://www.shorewall.net/FAQ.htm
>
> _______________________________________________
> Shorewall-users mailing list
> Post: Shorewall-users@lists.shorewall.net
> Subscribe/Unsubscribe:
http://lists.shorewall.net/mailman/listinfo/shorewall-users
> Support: http://www.shorewall.net/support.htm
> FAQ: http://www.shorewall.net/FAQ.htm
>