Re: hosts problem

Remco Barendse
Sun, 30 Apr 2006 14:09:47 -0000

>>> What entry do you have for eth0 in /etc/shorewall/interfaces?
>>
>> Just this:
>>
>> #ZONE   INTERFACE       BROADCAST       OPTIONS
>> loc     eth0            detect          blacklist
>
> Many Shorewall users had this silly configuration with early Shorewall
> versions -- that''s why I added the error message. The error
message is
> documented at http://www.shorewall.net/ErrorMessages.html.
>
> The entry in /etc/shorewall/interfaces is equivalent to this entry in
> /etc/shorewall/hosts:
>
> loc	eth0:0.0.0.0/0
>
> In other words, your interface entry already associates the entire IPv4
> address space through eth0 with zone ''loc''. So it is
indeed superfluous
> to now add 10.1.0.0/16 and 10.2.0.0/16.
>
> You should be able to remove the the hosts file entry entirely and add
> ''routeback'' to the entry in /etc/shorewall/interfaces;
e.g.,
>
> #ZONE   INTERFACE       BROADCAST       OPTIONS
> loc     eth0            detect          blacklist,routeback


Thanks, that worked like a charm.  Sorry for bothering you and the list
with this, I should have upgraded earlier.

Thanks again!
Remco