Re: Shorewall HOW-TO & VPS Question

Andrew Allen
Sun, 20 Jun 2004 10:54:16 -0000

I''ve tried what you''ve suggested, and the trace file shows the
errors, right at
the end:

+ run_iptables -F
+ ''['' -n '''' '']''
+ iptables -F
+ run_iptables -X
+ ''['' -n '''' '']''
+ iptables -X
+ setcontinue FORWARD
+ run_iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
+ ''['' -n '''' '']''
+ iptables -A FORWARD -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: No chain/target/match by that name
+ ''['' -z '''' '']''
+ stop_firewall
+ rm -f /var/lib/shorewall/restore-17728
+ set +x
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name

After running Shorewall start, iptables -L -n shows:

Chain INPUT (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy DROP)
target     prot opt source               destination
ACCEPT     all  --  0.0.0.0/0            80.229.154.84
ACCEPT     all  --  0.0.0.0/0            217.112.90.179

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

I''ve set /etc/shorewall/routestopped as:

venet0          -

Thanks!

(PS. not a member of the list)
--
Andrew Allen

e:: mail@projectandrew.com  //  t:: +44 (0) 7958 540 596
w:: www.projectandrew.com   \\  f:: +44 (0) 8704 601 527

yahoo! messenger: aa_projectandrew
skype: aa_projectandrew



> ----- Message from teastep@shorewall.net ---------
>     Date: Sat, 19 Jun 2004 17:09:01 -0700
>     From: Tom Eastep <teastep@shorewall.net>
> Reply-To: Tom Eastep <teastep@shorewall.net>
>  Subject: Re: [Shorewall-users] Shorewall HOW-TO & VPS Question
>       To: Mailing List for Shorewall Users
<shorewall-users@lists.shorewall.net>,
mail@projectandrew.com
>
> Tom Eastep wrote:
>
>
> >
> >
> > Any trace? (see http://shorewall.net/troubleshoot.htm, subject
> > "shorewall start and shorewall restart errors").
>
> You might just see what this command does:
>
> 	iptables -L -n
>
> -Tom
> --
> Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
> Shoreline,     \ http://shorewall.net
> Washington USA  \ teastep@shorewall.net
>
>
>
> ----- End message from teastep@shorewall.net -----