Re: Shorewall6 start error
Nagarjun J <[email protected]>
| Newsgroups | gmane.comp.security.shorewall |
|---|---|
| Message-ID | <CAEapupRAtc_LT5e8m+UTLcfswOqge3H26OZ0qa=-A2xrhZLb-w@mail.gmail.com> |
Hello, I did update the shorewall and shorewall-core package to 5.2.8, and did update as well, but still getting the same error on starting shorewall6. root@a48c0842-1c54-8659-7c7a-8d64480bc164:~#* shorewall6 version* 5.2.8 root@a48c0842-1c54-8659-7c7a-8d64480bc164:~#* shorewall version* 5.2.8 root@a48c0842-1c54-8659-7c7a-8d64480bc164:~*# shorewall update* Updating Shorewall configuration to 5.2.8... Processing /etc/shorewall/params ... Processing /etc/shorewall/shorewall.conf... No update required to configuration file /etc/shorewall/shorewall.conf; /etc/shorewall/shorewall.conf.bak not saved Loading Modules... Performing Shorewall 5.2 conversions... File /etc/shorewall/conntrack updated - old file renamed /etc/shorewall/conntrack.bak Compiling /etc/shorewall/zones... Compiling /etc/shorewall/interfaces... Compiling /etc/shorewall/hosts... Determining Hosts in Zones... Locating Action Files... Compiling /etc/shorewall/policy... Running /etc/shorewall/initdone... Adding Anti-smurf Rules Compiling TCP Flags filtering... Compiling Kernel Route Filtering... Compiling Martian Logging... Compiling MAC Filtration -- Phase 1... Compiling /etc/shorewall/rules... Compiling /etc/shorewall/conntrack... Compiling MAC Filtration -- Phase 2... Applying Policies... Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast... Compiling /usr/share/shorewall/action.Multicast for chain Multicast... Shorewall configuration verified root@a48c0842-1c54-8659-7c7a-8d64480bc164:~*# shorewall6 update* Updating Shorewall6 configuration to 5.2.8... Processing /etc/shorewall6/params ... Processing /etc/shorewall6/shorewall6.conf... No update required to configuration file /etc/shorewall6/shorewall6.conf; /etc/shorewall6/shorewall6.conf.bak not saved Loading Modules... Performing Shorewall 5.2 conversions... Compiling /etc/shorewall6/zones... Compiling /etc/shorewall6/interfaces... Compiling /etc/shorewall6/hosts... Determining Hosts in Zones... WARNING: *** inet6 is an EMPTY ZONE *** /etc/shorewall6/hosts (EOF) Locating Action Files... Compiling /etc/shorewall6/policy... Compiling TCP Flags filtering... Compiling MAC Filtration -- Phase 1... Compiling /etc/shorewall6/rules... Compiling /etc/shorewall6/conntrack... Compiling MAC Filtration -- Phase 2... Applying Policies... Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs... Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast... Compiling /usr/share/shorewall/action.Multicast for chain Multicast... Shorewall6 configuration verified root@a48c0842-1c54-8659-7c7a-8d64480bc164:~# *shorewall6 start* Compiling using Shorewall 5.2.8... Processing /etc/shorewall6/params ... Processing /etc/shorewall6/shorewall6.conf... Loading Modules... Compiling /etc/shorewall6/zones... Compiling /etc/shorewall6/interfaces... Compiling /etc/shorewall6/hosts... Determining Hosts in Zones... WARNING: *** inet6 is an EMPTY ZONE *** /etc/shorewall6/hosts (EOF) Locating Action Files... Compiling /etc/shorewall6/policy... Compiling TCP Flags filtering... Compiling MAC Filtration -- Phase 1... Compiling /etc/shorewall6/rules... Compiling /etc/shorewall6/conntrack... Compiling MAC Filtration -- Phase 2... Applying Policies... Compiling /usr/share/shorewall/action.AllowICMPs for chain AllowICMPs... Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast... Compiling /usr/share/shorewall/action.Multicast for chain Multicast... Generating Rule Matrix... Optimizing Ruleset... Creating ip6tables-restore input... Shorewall6 configuration compiled to /var/lib/shorewall6/.start Starting Shorewall6.... Initializing... Processing /etc/shorewall6/init ... *Setting up Proxy NDP...Preparing ip6tables-restore input...Running /usr/sbin/ip6tables-restore --wait 60...ip6tables-restore v1.8.3 (legacy): unknown option "--reject-with"Error occurred at line: 110Try `ip6tables-restore -h' or 'ip6tables-restore --help' for more information.* ERROR: ip6tables-restore Failed. Input is in /var/lib/shorewall6/.ip6tables-restore-input Processing /etc/shorewall6/stop ... Preparing ip6tables-restore input... Running /usr/sbin/ip6tables-restore --wait 60... Processing /etc/shorewall6/stopped ... Terminated Thanks, Nag On Thu, Dec 9, 2021 at 12:53 PM Matt Darfeuille <[email protected]> wrote: > On 12/9/2021 7:39 AM, Nagarjun J wrote: > > Hello, > > > > I tried loading latest shorewall6 version(5.2.8), still getting the same > > error message. One more question: does shorewall and shorewall-core > version > > also need to be the same as of shorewall6? > > > > Yes, the Shorewall6 package is dependent on the Shorewall packet and the > Shorewall-core pkg requiring that those three packages are on the same > version (5.2.8 in this case). > > So my suggestion is to update those three packages to 5.2.8 and todo a > 'shorewall update' and a 'shorewall6 update'. > > -- > Matt Darfeuille <[email protected]> > Community: https://sourceforge.net/p/shorewall/mailman/message/37107049/ > SPC: https://sourceforge.net/p/shorewall/mailman/message/36596609/ > Homepage: https://shorewall.org > > > _______________________________________________ > Shorewall-users mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/shorewall-users >