Re: Problem Starting Shorewall - ULOG problem

Mekabe Ramein
Wed, 05 Aug 2009 20:41:59 -0000

On Wed, Aug 5, 2009 at 11:40 PM, Mekabe Ramein<mrmrmrmr@gmail.com>
wrote:
> On Wed, Aug 5, 2009 at 10:26 PM, Tom Eastep<teastep@shorewall.net>
wrote:
>> Mekabe Ramein wrote:
>>> Hi,
>>>
>>> I am moving my old Shorewall configuration to a new box with new
>>> version of Shorewall.
>>> Unfortunately I have a problem starting it if I keep the
"ULOG"
>>> parameter in the following line of rules file.
>>>
>>> REDIRECT:ULOG   wall    82      tcp     80
>>>
>>> If I remove the ":ULOG" from that line, Shorewall starts
successfully.
>>>
>>> I am attachig the start trace "shorewall -vv start"
output to this email.
>>>
>>> The given error is :
>>> iptables v1.3.5: Need TCP or UDP with port specification
>>> Try `iptables -h'' or ''iptables --help''
for more information.
>>>    ERROR: Command "/sbin/iptables -A log0 -j REDIRECT
--to-port 82" Failed
>>>
>>>
>>> What is the problem ?
>>
>> The attached patch should correct the problem.
>>
>>        patch /usr/share/shorewall/Shorewall/Chains.pm < logging.diff
>>
>> -Tom
>
>
> Thank you. It really solved the problem. I assume this patch will be
> included in the final release, right ?
> Btw, ACCEPT rule with ULOG parameter was being accepted while REDIRECT was
not.
>
> Thanks.
>

I just noticed that I receive the following warning when starting Shorewall:
   WARNING: RFC1918_LOG_LEVEL=ULOG ignored. The ''norfc1918''
interface/host option is no longer supported

What does that mean ? Should I take any actions ?