similar to: Shorewall 4.1.0

Dear all, I have configured both shorewall and shorewall6 on my firewall. Shorewall is using ULOG as logging target and since that did not seem to work I tried using NFLOG in shorewall6. However, nothing is logged in the /var/log files. Three questions: - What am I doing wrong? I just use LOG=NFLOG in the params file. - Can I use NFLOG for shorewall too? - Do I need ulogd when setting the

http://bugzilla.netfilter.org/show_bug.cgi?id=652 Mariusz Kielpinski <kielpi at poczta.onet.pl> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |kielpi at poczta.onet.pl Status|ASSIGNED |NEW --- Comment #3 from

Hi! How I can use L7-Filter (http://l7-filter.sourceforge.net/) with Shorewall? Thank you very much! Bye. ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2005. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/

https://bugzilla.netfilter.org/show_bug.cgi?id=871 Summary: Running two instances of ulog causes abort in libnfnetlink Product: ulogd Version: SVN (please provide timestamp) Platform: All OS/Version: All Status: NEW Severity: critical Priority: P5 Component: ulogd AssignedTo:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #21 from Eric Leblond <eric at regit.org> --- Hello, (In reply to Netbug from comment #20) > Hi Eric, > > The new log; iptables-save_nflog_2 and the output I pasted for, > > cat /proc/net/netfilter/nf_log; > > All this is good now? All i see in the iptables rules regarding NFLOG is: -A INPUT -j NFLOG

https://bugzilla.netfilter.org/show_bug.cgi?id=945 Summary: Transmit performance regression with NAT and 3.14 Product: netfilter/iptables Version: unspecified Platform: x86_64 URL: http://www.linuxquestions.org/questions/linux-networki ng-3/linux-router-non-local-uploads-have-horrible-perf

https://bugzilla.netfilter.org/show_bug.cgi?id=977 Netbug <b1b30ee4 at opayq.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|RESOLVED |REOPENED Resolution|INVALID |--- --- Comment #27 from Netbug <b1b30ee4 at opayq.com>

https://bugzilla.netfilter.org/show_bug.cgi?id=1723 Bug ID: 1723 Summary: ebtables-nft help output woes Product: ebtables Version: unspecified Hardware: x86_64 OS: All Status: NEW Severity: enhancement Priority: P5 Component: ebtables-nft Assignee: pablo at netfilter.org

The attached is from my ISP (times are GMT -0800). This outage will impact: a) The mailing lists and mailing list archives. b) search of the Shorewall web site and list archives. I will be out of town when this outage occurs so I will have my fingers crossed that things will come back up ok. -Tom -- Tom Eastep \ Shorewall - iptables made easy Shoreline, \ http://shorewall.sf.net

https://bugzilla.netfilter.org/show_bug.cgi?id=992 Bug ID: 992 Summary: Missing space between NFQUEUE extra parameters Product: iptables Version: 1.4.x Hardware: x86_64 OS: Ubuntu Status: NEW Severity: enhancement Priority: P5 Component: iptables-save Assignee:

https://bugzilla.netfilter.org/show_bug.cgi?id=939 Summary: extensions: NFQUEUE: missing cpu-fanout Product: netfilter/iptables Version: linux-2.6.x Platform: x86_64 OS/Version: Debian GNU/Linux Status: NEW Severity: enhancement Priority: P5 Component: ip_tables (kernel) AssignedTo:

https://bugzilla.netfilter.org/show_bug.cgi?id=1322 Bug ID: 1322 Summary: Accepting in an nfqueue breaks multi-chain processing Product: nftables Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 Component: kernel Assignee: pablo at

https://bugzilla.netfilter.org/show_bug.cgi?id=1060 Bug ID: 1060 Summary: Garbage output Product: libnetfilter_log Version: unspecified Hardware: All OS: All Status: NEW Severity: normal Priority: P5 Component: libnetfilter_log Assignee: netfilter-buglog at lists.netfilter.org

http://bugzilla.netfilter.org/show_bug.cgi?id=723 Summary: extensions/libxt_NFLOG.man definines invalid range for - -nflog-group Product: iptables Version: CVS (please indicate timestamp) Platform: All OS/Version: All Status: NEW Severity: trivial Priority: P5 Component: iptables

https://bugzilla.netfilter.org/show_bug.cgi?id=921 Summary: log, ulog and nflog: command-line parameters are not supported Product: nftables Version: unspecified Platform: x86_64 OS/Version: All Status: NEW Severity: normal Priority: P5 Component: nft AssignedTo: pablo at

http://bugzilla.netfilter.org/show_bug.cgi?id=741 Summary: ULOGD segfaults on init Product: ulogd Version: SVN (please provide timestamp) Platform: i386 OS/Version: other Status: NEW Severity: blocker Priority: P5 Component: ulogd_MYSQL AssignedTo: netfilter-buglog at lists.netfilter.org

Hi all, I have been trying to run an IDS system on OpenVZ based VPS which requires that I run this IPTABLES command : iptables -A FORWARD -j NFQUEUE However, so far I have not suceeded. I always get this errors: iptables: Unknown error 4294967295 Even when the NFQUEUE  IP modules was enabled by the VPS provider, I still get these errors and this appears to be OpenVZ bug.  So I want to

https://bugzilla.mindrot.org/show_bug.cgi?id=1213 --- Comment #48 from Daniel Richard G. <skunk at iSKUNK.ORG> --- (In reply to Damien Miller from comment #47) > > There might be a few cases that we've missed, but please give > -current a spin and let us know if it has fixed all keyscan crashes > that you were seeing previously (I think it should...) Hi Damien, thank you

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #6 from Netbug <b1b30ee4 at opayq.com> --- I upgraded to ulogd 2.0.4 & kernel 3.17.2 but these did not make a difference, here's how the output looks now; Sat Nov 1 17:07:03 2014 <5> ulogd.c:843 building new pluginstance stack:

https://bugzilla.netfilter.org/show_bug.cgi?id=977 --- Comment #25 from Netbug <b1b30ee4 at opayq.com> --- Oh crap maybe I did screw this up, I didn't realize I needed to change a group. So you're saying it's showing it on 0 now and it needs to be on 1? I remember reading this before; Use NFLOG as your log level, and as with ULOG you can specify the group NFLOG(1,0,1). NFLOG