I finally got all my config files converted over to 3.0 (I like to modify the ones that come with, rather than copying current ones over. Easier to avoid problems that way). Anyhow, I went to run a "shorwall check" and it makes it through the check just fine and tells me it''s ok. But during the NAT validation I get this error: "/usr/share/shorewall/firewall: line 128: $RESTOREBASE: ambiguous redirect" It happens when it validates each NAT entry, but it continues and states that it all checks out ok. Just wondering what the error is all about. Is it something I need to fix on my end, or is it a bug in the check / start portion of Shorewall?
On Thursday 27 October 2005 17:35, Preston Kutzner wrote:> > > It happens when it validates each NAT entry, but it continues and states > that it all checks out ok. Just wondering what the error is all about. > Is it something I need to fix on my end, or is it a bug in the check / > start portion of Shorewall?I won''t be able to tell until I see a trace. shorewall trace check 2> /tmp/trace and post the /tmp/trace file. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Tom Eastep wrote:> On Thursday 27 October 2005 17:35, Preston Kutzner wrote: > >> >>It happens when it validates each NAT entry, but it continues and states >>that it all checks out ok. Just wondering what the error is all about. >>Is it something I need to fix on my end, or is it a bug in the check / >>start portion of Shorewall? > > > I won''t be able to tell until I see a trace. > > shorewall trace check 2> /tmp/trace > > and post the /tmp/trace file. > > -TomI''ll post it tomorrow.
On Thursday 27 October 2005 19:50, Preston Kutzner wrote:> > I''ll post it tomorrow.Ok -- I won''t be able to look at it until Sunday. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
On Thursday 27 October 2005 20:03, Tom Eastep wrote:> On Thursday 27 October 2005 19:50, Preston Kutzner wrote: > > I''ll post it tomorrow. > > Ok -- I won''t be able to look at it until Sunday.In the meantime, I suspect that the attached patch against /usr/share/shorewall/firewall will correct the problem. -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net PGP Public Key \ https://lists.shorewall.net/teastep.pgp.key
Tom Eastep wrote:> On Thursday 27 October 2005 20:03, Tom Eastep wrote: > >>On Thursday 27 October 2005 19:50, Preston Kutzner wrote: >> >>>I''ll post it tomorrow. >> >>Ok -- I won''t be able to look at it until Sunday. > > > In the meantime, I suspect that the attached patch > against /usr/share/shorewall/firewall will correct the problem.Yes, the patch corrected the problem.