Re: Problem Starting Shorewall - ULOG problem

Mekabe Ramein
Wed, 05 Aug 2009 20:40:12 -0000

On Wed, Aug 5, 2009 at 10:26 PM, Tom Eastep<teastep@shorewall.net>
wrote:
> Mekabe Ramein wrote:
>> Hi,
>>
>> I am moving my old Shorewall configuration to a new box with new
>> version of Shorewall.
>> Unfortunately I have a problem starting it if I keep the
"ULOG"
>> parameter in the following line of rules file.
>>
>> REDIRECT:ULOG   wall    82      tcp     80
>>
>> If I remove the ":ULOG" from that line, Shorewall starts
successfully.
>>
>> I am attachig the start trace "shorewall -vv start" output to
this email.
>>
>> The given error is :
>> iptables v1.3.5: Need TCP or UDP with port specification
>> Try `iptables -h'' or ''iptables --help'' for
more information.
>>    ERROR: Command "/sbin/iptables -A log0 -j REDIRECT --to-port
82" Failed
>>
>>
>> What is the problem ?
>
> The attached patch should correct the problem.
>
>        patch /usr/share/shorewall/Shorewall/Chains.pm < logging.diff
>
> -Tom


Thank you. It really solved the problem. I assume this patch will be
included in the final release, right ?
Btw, ACCEPT rule with ULOG parameter was being accepted while REDIRECT was not.

Thanks.