Re: Shorewall not starting

On 7/29/23 15:25, Philip Le Riche via Shorewall-users wrote:
> As before, this is running under Linux Mint (Ubuntu-based), and this 
> time I installed Shorewall from the standard repository for the distro 
> (perhaps that was my mistake?) It's failing to start on boot even though 
> I have STARTUP_ENABLED=Yes in my shorewall.conf.
> 

What output do you get if you do 'systemctl status shorewall'?

> I thought it was related to the fact that sshd and apache2 are also 
> failing to start. This is because not all interfaces aren't up by the 
> time their startup scripts run. This, in turn, seems to be because the 
> 16 IP address aliases on the school net NIC (NATted to local IPs of the 
> Raspberry Pis) are apparently taking around 25 seconds to initialise. 
> (Originally, I set these up manually but I'm now letting Shorewall do it 
> by setting ADD_IP_ALIASES=Yes, now Shorewall is taking 25 seconds to 
> start.)
> 
> However, I now think that's a separate problem (perhaps I could add 
> /usr/share/shorewall/wait4ifup to their startup scripts) since nothing 
> appears in /var/log/shorewall.init until I manually start Shorewall.
> 

Is 'shorewall.init' a typo?

> Also, I was surprised to find that /etc/systemd/system/shorewall.service 
> didn't exist.
> 
> Are there any more diagnostics or fixes I can try before I try 
> uninstalling shorewall as installed from the repository and reinstalling 
> it using the tarball from shorewall.net? And should I include 
> shorewall-init? (The network switch to which the Pis re connected might 
> be switched off at the time the firewall is booted.)
> 

You could try [1] to see if it could help you solve the race condition 
issue.

Using 'optional'[2]  might also help.

I would first try to get Shorewall going before adding shorewall-init 
into the mix!


[1] 
https://www.freedesktop.org/software/systemd/man/systemd-networkd-wait-online.service.html
[2]  https://shorewall.org/manpages/shorewall-interfaces.html

-- 
Matt Darfeuille <[email protected]>
Community: https://sourceforge.net/p/shorewall/mailman/message/37107049/
SPC: https://sourceforge.net/p/shorewall/mailman/message/36596609/
Homepage: https://shorewall.org