Tom Robinson
2014-Sep-10 07:45 UTC
ERROR: The PREROUTING SECTION is not allowed when ACCOUNTING_TABLE=filter /etc/shorewall/accounting (line 13)
# shorewall version 4.5.20 CentOS 5.10 Hi, I hope that I'm just being completely blinkered by something and an idiot. Maybe someone can enlighten me. Please hit me with a clue stick! I don't understand why, when I've set ACCOUNTING_TABLE=mangle in /etc/shorewall/shorewall.conf: # grep '^ACCOUNTING_TABLE' /etc/shorewall/shorewall.conf ACCOUNTING_TABLE=mangle I get this error when checking shorewall: # shorewall check Checking... Processing /etc/shorewall/params ... Processing /etc/shorewall/shorewall.conf... Loading Modules... Checking /etc/shorewall/zones... Checking /etc/shorewall/interfaces... Checking /etc/shorewall/hosts... Determining Hosts in Zones... Locating Action Files... Checking /etc/shorewall/policy... Running /etc/shorewall/initdone... Adding Anti-smurf Rules Adding rules for DHCP Checking TCP Flags filtering... Checking Kernel Route Filtering... Checking Martian Logging... Checking /etc/shorewall/tcinterfaces... Checking /etc/shorewall/tcpri... Checking /etc/shorewall/masq... Checking MAC Filtration -- Phase 1... Checking /etc/shorewall/blrules... Checking /etc/shorewall/rules... Checking MAC Filtration -- Phase 2... Applying Policies... Checking /usr/share/shorewall/action.Reject for chain Reject... Checking /usr/share/shorewall/action.Broadcast for chain Broadcast... Checking /usr/share/shorewall/action.Drop for chain Drop... Checking /etc/shorewall/accounting... Use of uninitialized value in string eq at /usr/lib/perl5/vendor_perl/5.8.8/Shorewall/Accounting.pm line 126, <$currentfile> line 13. ERROR: The PREROUTING SECTION is not allowed when ACCOUNTING_TABLE=filter /etc/shorewall/accounting (line 13) What am I missing? Regards, Tom -- Tom Robinson IT Manager/System Administrator MoTeC Pty Ltd 121 Merrindale Drive Croydon South 3136 Victoria Australia T: +61 3 9761 5050 F: +61 3 9761 5051 E: tom.robinson@motec.com.au ------------------------------------------------------------------------------ Want excitement? Manually upgrade your production database. When you want reliability, choose Perforce Perforce version control. Predictably reliable. http://pubads.g.doubleclick.net/gampad/clk?id=157508191&iu=/4140/ostg.clktrk