Re: Problem Starting Shorewall - ULOG problem

Tom Eastep
Wed, 05 Aug 2009 20:49:21 -0000

Mekabe Ramein wrote:
> On Wed, Aug 5, 2009 at 11:40 PM, Mekabe Ramein<mrmrmrmr@gmail.com>
wrote:
>> On Wed, Aug 5, 2009 at 10:26 PM, Tom
Eastep<teastep@shorewall.net> wrote:
>>> Mekabe Ramein wrote:
>>>> Hi,
>>>>
>>>> I am moving my old Shorewall configuration to a new box with
new
>>>> version of Shorewall.
>>>> Unfortunately I have a problem starting it if I keep the
"ULOG"
>>>> parameter in the following line of rules file.
>>>>
>>>> REDIRECT:ULOG   wall    82      tcp     80
>>>>
>>>> If I remove the ":ULOG" from that line, Shorewall
starts successfully.
>>>>
>>>> I am attachig the start trace "shorewall -vv start"
output to this email.
>>>>
>>>> The given error is :
>>>> iptables v1.3.5: Need TCP or UDP with port specification
>>>> Try `iptables -h'' or ''iptables
--help'' for more information.
>>>>    ERROR: Command "/sbin/iptables -A log0 -j REDIRECT
--to-port 82" Failed
>>>>
>>>>
>>>> What is the problem ?
>>> The attached patch should correct the problem.
>>>
>>>        patch /usr/share/shorewall/Shorewall/Chains.pm <
logging.diff
>>>
>>> -Tom
>>
>> Thank you. It really solved the problem. I assume this patch will be
>> included in the final release, right ?
>> Btw, ACCEPT rule with ULOG parameter was being accepted while REDIRECT
was not.
>>
>> Thanks.
>>
>
> I just noticed that I receive the following warning when starting
Shorewall:
>    WARNING: RFC1918_LOG_LEVEL=ULOG ignored. The
''norfc1918''
> interface/host option is no longer supported
>
> What does that mean ? Should I take any actions ?

Please read the release notes.