shorewall-users January 2012 archive
Main Archive Page > Month Archives  > shorewall-users archives
shorewall-users: Re: [Shorewall-users] "echo" in param

Re: [Shorewall-users] "echo" in params gives errors

From: Tom Eastep <teastep_at_nospam>
Date: Sat Jan 07 2012 - 15:33:40 GMT
To: Shorewall Users <shorewall-users@lists.sourceforge.net>

On Sat, 2012-01-07 at 09:34 +0000, Keith Edmunds wrote:
> > My point is that it works for me so I can't give any more help based on
> > what little you have told us.
>
> Below is from Shorewall 4.4.11.6

I thought that your initial post indicated that you were running
4.4.27-1.

>
> An almost empty params file:
>
> # cat params
> ##############################################################################
> echo "This is params"
> #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE
> #
>
> shorewall.conf:
>
> # grep -i params shorewall.conf
> EXPORTPARAMS=Yes
> #
>
> A 'shorewall restart':
>
> # shorewall restart
> This is params
> Compiling...
> This is params
> Processing /etc/shorewall/shorewall.conf...
> Loading Modules...
> Compiling /etc/shorewall/zones...
> Compiling /etc/shorewall/interfaces...
> Determining Hosts in Zones...
> Preprocessing Action Files...
> Compiling ...
> Pre-processing /usr/share/shorewall/action.Drop...
> Pre-processing /usr/share/shorewall/action.Reject...
> Compiling /etc/shorewall/policy...
> Adding Anti-smurf Rules
> Adding rules for DHCP
> Compiling TCP Flags filtering...
> Compiling Kernel Route Filtering...
> Compiling Martian Logging...
> Compiling /etc/shorewall/masq...
> Compiling MAC Filtration -- Phase 1...
> Compiling /etc/shorewall/tunnels...
> Generating Transitive Closure of Used-action List...
> Processing /usr/share/shorewall/action.Reject for chain Reject...
> Processing /usr/share/shorewall/action.Drop for chain Drop...
> Compiling MAC Filtration -- Phase 2...
> Applying Policies...
> Generating Rule Matrix...
> Creating iptables-restore input...
> Compiling iptables-restore input for chain mangle:...
> Compiling /etc/shorewall/routestopped...
> Shorewall configuration compiled to /var/lib/shorewall/.restart
> printf: 4: This: expected numeric value
> printf: 4: is: expected numeric value
> printf: 4: params: expected numeric value
> Processing /etc/shorewall/params ...
> This is params
> Usage: /var/lib/shorewall/.restart [ options ]

After this happens, please:

sh -x /var/lib/shorewall/.restart restart 2> trace

And look at the trace to see what is going wrong. If you can't see the
problem, then please send me a copy of /var/lib/shorewall/.restart and
the trace file and I will take a look.

Again, do you *really* need EXPORTPARAMS=Yes? If not, turning it off
will eliminate this issue.

-Tom
-- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________

------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual
desktops for less than the cost of PCs and save 60% on VDI infrastructure
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox

_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users