Re: hosts problem

Tom Eastep
Sun, 30 Apr 2006 13:59:57 -0000

Remco Barendse wrote:
>>> When I use the exact same line I get this error starting shorewall:
>>> ERROR: Invalid zone definition for zone loc
>>>
>>> When I leave out the eth0: bit in that line I get an error that the
>>> zones I defined are invalid.
>>>
>>> Where did I go wrong?
>>
>> What entry do you have for eth0 in /etc/shorewall/interfaces?
>
> Just this:
>
> #ZONE   INTERFACE       BROADCAST       OPTIONS
> loc     eth0            detect          blacklist

Many Shorewall users had this silly configuration with early Shorewall
versions -- that''s why I added the error message. The error message is
documented at http://www.shorewall.net/ErrorMessages.html.

The entry in /etc/shorewall/interfaces is equivalent to this entry in
/etc/shorewall/hosts:

loc	eth0:0.0.0.0/0

In other words, your interface entry already associates the entire IPv4
address space through eth0 with zone ''loc''. So it is indeed
superfluous
to now add 10.1.0.0/16 and 10.2.0.0/16.

You should be able to remove the the hosts file entry entirely and add
''routeback'' to the entry in /etc/shorewall/interfaces; e.g.,

#ZONE   INTERFACE       BROADCAST       OPTIONS
loc     eth0            detect          blacklist,routeback

-Tom
--
Tom Eastep    \ Nothing is foolproof to a sufficiently talented fool
Shoreline,     \ http://shorewall.net
Washington USA  \ teastep@shorewall.net
PGP Public Key   \ https://lists.shorewall.net/teastep.pgp.key