Re: DNAT with Multimac OR Multiple IP Setup v2

Tom Eastep
2009-08-27T20:51:46Z

Tom Eastep wrote:
> Donald wrote:
>> My apologies,
>>
>> I should have clarified.  Shorewall starts w/out any issue.  When doing
>> a shorewall dump, I get the error message:  /var/log/shorewall.log does
>> not exist.
>
> The Guidelines mention the proper setting of LOGFILE before collecting
> the dump.

Since you are obviously having a bad day, let me see if I can make this
clear.

Shorewall has no control over where Netfilter log messages go. If you
use the default logging setup in the sample configurations (e.g., you
use level ''info'' everywhere), then the destination of the log
messages
is wherever your logging daemon sends them. This is explained in
http://www.shorewall.net/shorewall_logging.html.

Given that Shorewall can''t predict where the messages are written, the
user must give Shorewall that information; that is the purpose of the
LOGFILE setting in shorewall.conf. Again -- LOGFILE doesn''t determine
where messages are logged; it tells /sbin/shorewall where to find them.

Log messages are a key debugging aid for you and for us. So the
''shorewall dump'' command includes them. Clearly if LOGFILE
points to a
non-existant file, the dump output won''t contain any log messages.
That''s why the error message that you saw is generated.