PGNd
2014-Aug-22 01:05 UTC
mangle chain created in /tcstart-invoked QoS script is cleared by end of complete 'firewall' reload?
I've cleaned up my variable naming in my external QoS tc-script. It's defined in 'lib.private', and in process creates a new mangle table chain, 'SHAPER_EGRESS'. /lib.private qos_control() { ... function define_rules_up() { ... /usr/sbin/iptables -t mangle -N SHAPER_EGRESS ... } ... case "$1" in ... start) define_rules_up ;; esac } and invoked in /tcstart qos_control start Ater `firewall start`, the firewall's up, with no apparent errors But when I check with shorewall show mangle I do NOT see the SHAPER_EGRESS mangle chain. If I modify the 'qos+control()' script with an 'exit', /lib.private qos_control() { ... function define_rules_up() { ... /usr/sbin/iptables -t mangle -N SHAPER_EGRESS ... } ... case "$1" in ... start) define_rules_up ++ exit ;; esac } and then check shorewall show mangle I *do* see the SHAPER_EGRESS chain, and all the rules I've added to it. But, the firewall itself isn't up Shorewall Lite isn't started 'Something' between the exec of /tcstart, and the complete firewall (re)load is clearing that SHAPER_EGRESS mangle chain. I'll single-step if I have to, but -- -- any ideas as to what step in the execution flow might be clearing that chain, and where I configure to prevent it -- i.e., to preserve my defined/populated chain through fw (re)start? ------------------------------------------------------------------------------ Slashdot TV. Video for Nerds. Stuff that matters. http://tv.slashdot.org/