Re: [gentoo-user] Shorewall failure following upgrade

[Rumen Yotov <rumen_yotov@dir.bg>]

[-- Attachment #1: Type: text/plain, Size: 1317 bytes --]

Jeff Cranmer wrote:

>I have recently updated shorewall on my 2.4 gentoo OS
>I now get the following error:
>
>/usr/share/shorewall/firewall: line 254: exists_:_frwd=Yes: command not
>found
>Warning: wierd character in interface `$' (No aliases, :, ! or *).
>iptables v1.2.11: Couldn't load match
>`policy':/lib/iptables/libipt_policy.so: cannot open shared object file:
>No such file or directory
>
>Try `iptables -h' or 'iptables --help' for more information.
>   ERROR: Command "/sbin/iptables -A ppp0_fwd -s 0.0.0.0/0 -o $ -d
>_hosts -m policy --pol ipsec --dir out $:_ipsec_options
>$:_ipsec_out_options -j :_policychain" Failed
>Processing /etc/shorewall/stop ...
>IP Forwarding Enabled
>Processing /etc/shorewall/stopped ...
>Terminated
>
>It works correctly on my 2.6 Gentoo OS.  Any suggestions on how to
>repair gratefully received.
>
>Thanks
>
>Jeff
>
>
>  
>
Hi,
Works OK on a 2.6 system, too. It depends only on: iptables, iproute2
and virtual/libc (glibc).
Some suggestions:
1.try "revdep-rebuild -pv" later w/o "p" to check if something needs to
be rebuild (suspect 'iptables' here);
2.Check for "required options" (see shorewall docs) in the kernel config
(maybe something was changed);
3.Check the five 'basic' ;) config files:
/etc/shorewall/shorewall.conf&policy&interfaces&zones&rules.
HTH. Rumen

[-- Attachment #2: S/MIME Cryptographic Signature --]
[-- Type: application/x-pkcs7-signature, Size: 3397 bytes --]