here''s the complete log -----Ursprüngliche Nachricht----- Von: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net]Im Auftrag von Tom Eastep Gesendet: Freitag, 2. Juli 2004 15:45 An: Mailing List for Shorewall Users Betreff: Re: [Shorewall-users] message about $RESTOREBASE HOLZER Martin wrote:> i''ve just updated to shorewall 2.0.3a and b > both show the same message when stopping shorewall. > see also > http://bugs.gentoo.org/show_bug.cgi?id=55816 > > > $RESTOREBASE: ambiguous redirect > /usr/share/shorewall/firewall: line 113: $RESTOREBASE: ambiguous redirect > /usr/share/shorewall/firewall: line 114: $RESTOREBASE: ambiguous redirect > /usr/share/shorewall/firewall: line 125: $RESTOREBASE: ambiguous redirec [ ok ] > * Starting firewall... > Warning: Zone net is empty > Warning: Zone dmz is empty [ ok ] >Trace please (see http://shorewall.net/troubleshoot.htm under "shorewall start" and "shorewall restart" Errors") -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net _______________________________________________ Shorewall-users mailing list Post: Shorewall-users@lists.shorewall.net Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users Support: http://www.shorewall.net/support.htm FAQ: http://www.shorewall.net/FAQ.htm
HOLZER Martin wrote:> here''s the complete logI see -- so this problem only occurs when Shorewall startup is disabled and you try to start it anyway (in your case, the /etc/shorewall/startup_disabled file exists). -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Tom Eastep wrote:> HOLZER Martin wrote: > >> here''s the complete log > > > I see -- so this problem only occurs when Shorewall startup is disabled > and you try to start it anyway (in your case, the > /etc/shorewall/startup_disabled file exists).But I see that it also fails in "shorewall stop" in strange and mysterious ways. Gee this is fun... -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
On Fri, 02 Jul 2004 07:31:48 -0700, Tom Eastep <teastep@shorewall.net> wrote:> > Tom Eastep wrote: > > HOLZER Martin wrote: > > > >> here''s the complete log > > > > > > I see -- so this problem only occurs when Shorewall startup is disabled > > and you try to start it anyway (in your case, the > > /etc/shorewall/startup_disabled file exists). > > But I see that it also fails in "shorewall stop" in strange and > mysterious ways. > > Gee this is fun...I \only\ see it in "shorewall stop": + save_progress_message ''Restoring IP Forwarding...'' + echo /usr/share/shorewall/firewall: line 112: $RESTOREBASE: ambiguous redirect + echo ''progress_message "Restoring IP Forwarding..."'' /usr/share/shorewall/firewall: line 113: $RESTOREBASE: ambiguous redirect + echo /usr/share/shorewall/firewall: line 114: $RESTOREBASE: ambiguous redirect + run_and_save_command ''echo 1 > /proc/sys/net/ipv4/ip_forward'' + echo ''echo 1 > /proc/sys/net/ipv4/ip_forward'' /usr/share/shorewall/firewall: line 125: $RESTOREBASE: ambiguous redirect + eval echo 1 ''>'' /proc/sys/net/ipv4/ip_forward ++ echo 1 + echo ''IP Forwarding Enabled''
Comatose Jones wrote:> On Fri, 02 Jul 2004 07:31:48 -0700, Tom Eastep <teastep@shorewall.net> wrote: > >>Tom Eastep wrote: >> >>>HOLZER Martin wrote: >>> >>> >>>>here''s the complete log >>> >>> >>>I see -- so this problem only occurs when Shorewall startup is disabled >>>and you try to start it anyway (in your case, the >>>/etc/shorewall/startup_disabled file exists). >> >>But I see that it also fails in "shorewall stop" in strange and >>mysterious ways. >> >>Gee this is fun... > > > > I \only\ see it in "shorewall stop":If you set CLEAR_TC=Yes in shorewall.conf, Shorewall is left in an indeterminent state after "shorwall stop" and the lock file remains on disk. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
Comatose Jones wrote:> On Fri, 02 Jul 2004 07:31:48 -0700, Tom Eastep <teastep@shorewall.net> wrote: > >>Tom Eastep wrote: >> >>>HOLZER Martin wrote: >>> >>> >>>>here''s the complete log >>> >>> >>>I see -- so this problem only occurs when Shorewall startup is disabled >>>and you try to start it anyway (in your case, the >>>/etc/shorewall/startup_disabled file exists). >> >>But I see that it also fails in "shorewall stop" in strange and >>mysterious ways. >> >>Gee this is fun... > > > > I \only\ see it in "shorewall stop": >Would you and Martin please try the version of the ''firewall'' script in CVS STABLE2/ ? Thanks, -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net