Re: Problem Starting Shorewall - ULOG problem

Mekabe Ramein
Wed, 05 Aug 2009 21:16:18 -0000

which release notes ? for the RFC1918_LOG_LEVEL ?

On Wed, Aug 5, 2009 at 11:49 PM, Tom Eastep<teastep@shorewall.net>
wrote:
> Mekabe Ramein wrote:
>> On Wed, Aug 5, 2009 at 11:40 PM, Mekabe
Ramein<mrmrmrmr@gmail.com> wrote:
>>> On Wed, Aug 5, 2009 at 10:26 PM, Tom
Eastep<teastep@shorewall.net> wrote:
>>>> Mekabe Ramein wrote:
>>>>> Hi,
>>>>>
>>>>> I am moving my old Shorewall configuration to a new box
with new
>>>>> version of Shorewall.
>>>>> Unfortunately I have a problem starting it if I keep the
"ULOG"
>>>>> parameter in the following line of rules file.
>>>>>
>>>>> REDIRECT:ULOG   wall    82      tcp     80
>>>>>
>>>>> If I remove the ":ULOG" from that line, Shorewall
starts successfully.
>>>>>
>>>>> I am attachig the start trace "shorewall -vv
start" output to this email.
>>>>>
>>>>> The given error is :
>>>>> iptables v1.3.5: Need TCP or UDP with port specification
>>>>> Try `iptables -h'' or ''iptables
--help'' for more information.
>>>>>    ERROR: Command "/sbin/iptables -A log0 -j REDIRECT
--to-port 82" Failed
>>>>>
>>>>>
>>>>> What is the problem ?
>>>> The attached patch should correct the problem.
>>>>
>>>>        patch /usr/share/shorewall/Shorewall/Chains.pm <
logging.diff
>>>>
>>>> -Tom
>>>
>>> Thank you. It really solved the problem. I assume this patch will
be
>>> included in the final release, right ?
>>> Btw, ACCEPT rule with ULOG parameter was being accepted while
REDIRECT was not.
>>>
>>> Thanks.
>>>
>>
>> I just noticed that I receive the following warning when starting
Shorewall:
>>    WARNING: RFC1918_LOG_LEVEL=ULOG ignored. The
''norfc1918''
>> interface/host option is no longer supported
>>
>> What does that mean ? Should I take any actions ?
>
> Please read the release notes.
>
> -Tom
> --
> Tom Eastep        \ When I die, I want to go like my Grandfather who
> Shoreline,         \ died peacefully in his sleep. Not screaming like
> Washington, USA     \ all of the passengers in his car
> http://shorewall.net \________________________________________________
>
>
------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
> trial. Simplify your report design, integration and deployment - and focus
on
> what you do best, core application coding. Discover what''s new
with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/shorewall-users