Tom In the attached config. the following tcfilters entry: eth0:130 1.1.1.0/24 2.2.0.0/16 tcp 100 produces the following message: Use of uninitialized value $Shorewall::Tc::lastrule in string eq at /usr/share/shorewall/Shorewall/Tc.pm line 1126, <$currentfile> line 11. Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
Beta 4 is now available for testing.
Problems corrected:
1) A typo in /usr/share/shorewall/prog.footer has been corrected.
2) Entries in /etc/shorewall/rules were being applied twice while
those in /etc/shorewall/routes were not being applied at all.
3) Routing changes to the main and default tables were not being
backed out during restart and stop processing.
New Features:
1) The ''enable'' command now installs the
interface''s traffic shaping
configuration (if any) and ensures that the interface''s settings
in /proc are correct.
The ''disable'' command now removes the
interface''s traffic shaping
configuration (if any).
Thank you for testing,
-Tom
--
Tom Eastep \ When I die, I want to go like my Grandfather who
Shoreline, \ died peacefully in his sleep. Not screaming like
Washington, USA \ all of the passengers in his car
http://shorewall.net \________________________________________________
------------------------------------------------------------------------------
Special Offer -- Download ArcSight Logger for FREE!
Finally, a world-class log management solution at an even better
price-free! And you''ll get a free "Love Thy Logs" t-shirt
when you
download Logger. Secure your free ArcSight Logger TODAY!
http://p.sf.net/sfu/arcsisghtdev2dev
On Tue, 2011-08-30 at 06:43 -0700, Tom Eastep wrote:> Beta 4 is now available for testing. > > Problems corrected: > > 1) A typo in /usr/share/shorewall/prog.footer has been corrected. > > 2) Entries in /etc/shorewall/rules were being applied twice while > those in /etc/shorewall/routes were not being applied at all. > > 3) Routing changes to the main and default tables were not being > backed out during restart and stop processing. >Before attempting to restart with Beta 4, it is necessary to execute the following command: touch /var/lib/shorewall/undo_main_routing That problem will be rectified in RC 1. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tuesday 30 August 2011 14:32:34 Steven Jan Springl wrote:> Tom > > In the attached config. the following tcfilters entry: > > eth0:130 1.1.1.0/24 2.2.0.0/16 tcp 100 > > produces the following message: > > Use of uninitialized value $Shorewall::Tc::lastrule in string eq > at /usr/share/shorewall/Shorewall/Tc.pm line 1126, <$currentfile> line 11. > > Steven.Tom There was a bug in the original config. I have attached an updated config. This config also produces the following message: [: 1590: -gt: unexpected operator Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tue, 2011-08-30 at 21:22 +0100, Steven Jan Springl wrote:> On Tuesday 30 August 2011 14:32:34 Steven Jan Springl wrote: > > Tom > > > > In the attached config. the following tcfilters entry: > > > > eth0:130 1.1.1.0/24 2.2.0.0/16 tcp 100 > > > > produces the following message: > > > > Use of uninitialized value $Shorewall::Tc::lastrule in string eq > > at /usr/share/shorewall/Shorewall/Tc.pm line 1126, <$currentfile> line 11. > > > > Steven. > > Tom > > There was a bug in the original config. I have attached an updated config. > This config also produces the following message: > > [: 1590: -gt: unexpected operatorSteven, The first problem is fixed by this patch -- please see if you are still seeing the second problem. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tuesday 30 August 2011 22:36:40 Tom Eastep wrote:> On Tue, 2011-08-30 at 21:22 +0100, Steven Jan Springl wrote: > > On Tuesday 30 August 2011 14:32:34 Steven Jan Springl wrote: > > > Tom > > > > > > In the attached config. the following tcfilters entry: > > > > > > eth0:130 1.1.1.0/24 2.2.0.0/16 tcp 100 > > > > > > produces the following message: > > > > > > Use of uninitialized value $Shorewall::Tc::lastrule in string eq > > > at /usr/share/shorewall/Shorewall/Tc.pm line 1126, <$currentfile> line > > > 11. > > > > > > Steven. > > > > Tom > > > > There was a bug in the original config. I have attached an updated > > config. This config also produces the following message: > > > > [: 1590: -gt: unexpected operator > > Steven, > > The first problem is fixed by this patch -- please see if you are still > seeing the second problem. > > Thanks, > -TomTom Applying the patch produced the following messages: patching file Misc.pm Hunk #1 succeeded at 473 with fuzz 2 (offset -3 lines). Hunk #2 FAILED at 529. 1 out of 2 hunks FAILED -- saving rejects to file Misc.pm.rej I have attached a copy of Misc.pm.rej Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tue, 2011-08-30 at 22:55 +0100, Steven Jan Springl wrote:> Applying the patch produced the following messages: > > patching file Misc.pm > Hunk #1 succeeded at 473 with fuzz 2 (offset -3 lines). > Hunk #2 FAILED at 529. > 1 out of 2 hunks FAILED -- saving rejects to file Misc.pm.rej > > I have attached a copy of Misc.pm.rejSteven, I sent the wrong patch. Here is the correct one. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tuesday 30 August 2011 23:00:17 Tom Eastep wrote:> On Tue, 2011-08-30 at 22:55 +0100, Steven Jan Springl wrote: > > Applying the patch produced the following messages: > > > > patching file Misc.pm > > Hunk #1 succeeded at 473 with fuzz 2 (offset -3 lines). > > Hunk #2 FAILED at 529. > > 1 out of 2 hunks FAILED -- saving rejects to file Misc.pm.rej > > > > I have attached a copy of Misc.pm.rej > > Steven, > > I sent the wrong patch. Here is the correct one. > > -TomTom The patch has fixed the first problem, but not the second. Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tue, 2011-08-30 at 23:06 +0100, Steven Jan Springl wrote:> The patch has fixed the first problem, but not the second.Steven, Can you get a useful trace of the failing ''start'' (compile the configuration and then run the compiled script specifying ''trace start'')? I suspect that get_mtu() is returning an empty value but can''t be sure. Thanks, -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Tuesday 30 August 2011 23:42:58 Tom Eastep wrote:> On Tue, 2011-08-30 at 23:06 +0100, Steven Jan Springl wrote: > > The patch has fixed the first problem, but not the second. > > Steven, > > Can you get a useful trace of the failing ''start'' (compile the > configuration and then run the compiled script specifying ''trace > start'')? I suspect that get_mtu() is returning an empty value but can''t > be sure. > > Thanks, > -TomTom The trace is attached. Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Aug 30, 2011, at 3:58 PM, Steven Jan Springl wrote:> On Tuesday 30 August 2011 23:42:58 Tom Eastep wrote: >> On Tue, 2011-08-30 at 23:06 +0100, Steven Jan Springl wrote: >>> The patch has fixed the first problem, but not the second. >> >> Steven, >> >> Can you get a useful trace of the failing ''start'' (compile the >> configuration and then run the compiled script specifying ''trace >> start'')? I suspect that get_mtu() is returning an empty value but can''t >> be sure. >> >> Thanks, >> -Tom > > Tom > > The trace is attached. >Thanks, Steven This should fix it. -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Wednesday 31 August 2011 00:45:06 Tom Eastep wrote:> On Aug 30, 2011, at 3:58 PM, Steven Jan Springl wrote: > > On Tuesday 30 August 2011 23:42:58 Tom Eastep wrote: > >> On Tue, 2011-08-30 at 23:06 +0100, Steven Jan Springl wrote: > >>> The patch has fixed the first problem, but not the second. > >> > >> Steven, > >> > >> Can you get a useful trace of the failing ''start'' (compile the > >> configuration and then run the compiled script specifying ''trace > >> start'')? I suspect that get_mtu() is returning an empty value but can''t > >> be sure. > >> > >> Thanks, > >> -Tom > > > > Tom > > > > The trace is attached. > > Thanks, Steven > > This should fix it. > > -TomTom Confirmed, the patch has fixed the issue. Thanks. Steven. ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev
On Aug 30, 2011, at 5:09 PM, Steven Jan Springl wrote:> > Confirmed, the patch has fixed the issue. >Thanks, Steven -Tom Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ ------------------------------------------------------------------------------ Special Offer -- Download ArcSight Logger for FREE! Finally, a world-class log management solution at an even better price-free! And you''ll get a free "Love Thy Logs" t-shirt when you download Logger. Secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsisghtdev2dev