Re: Shorewall on EL10

On 11/21/25 1:20 AM, Simon Matter via Shorewall-users wrote:
> Hi,
> 
>> On 9/25/25 3:14 PM, Simon Matter via Shorewall-users wrote:
>>> Hi,
>>>
>>> I'm trying to migrate an old firewall to AlmaLinux 10 (RHEL10
>>> compatible).
>>> I'm having problems with the traffic shaping like this:
>>>
>>> Setting up Traffic Control...
>>> Error: TC classifier not found.
>>> We have an error talking to the kernel
>>>      ERROR: Command "tc filter add dev enp4s0 parent ffff: protocol all
>>> prio
>>> 10 estimator 250ms 4sec basic police avrate 500000kbit drop" Failed
>>>
>>
>> Shorewall can only work with Iptables and almalinux 10 is only Nftables
>> based.
>>
>> Do you have the TC utility installed?
> 
> AlmaLinux 10 (like RHEL 10) have iptables as well and the filtering works
> well. Only the traffic shaping doesn't work. The TC utility is installed.
> 
> Regards,
> Simon
> 
> 
> 
> _______________________________________________
> Shorewall-users mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/shorewall-users

I haven't messed with traffic shaping for years, but I remember having 
to make sure all the tc stuff was configured in my kernel.  IIRC, it's 
not included by default.  There should be instructions in the Shorewall 
docs regarding required kernel modules/features to enable traffic 
shapping successfully.

Regards,
Kevin