shorewall

Hi Folks

I seem to be stuck in my 5_2  attempts :-(

shorewall refuses to start and I have difficulties understanding why. I
can see there are a number of iptables related modules missing

I compared the libnetfilter checksums and they match the ones from 5_2
on the packages directory

This is the dependency file for shorewall

SALT# cat shorwall.deplrp
iptables
perl
libdigest-sha1-perl
ulogd

sha1sum < iptables.lrp
42ced149fa5785038a534f0a72c4a6fa3813590a  -
sha1sum < perl.lrp
694dceead040a80947cadf61a975dae7ab8bc929  -
sha1sum < libdigest-sha1-perl.lrp
e2a1d90c734bcc9f6fd48437857f0b18835009bd  -
 sha1sum < ulogd.lrp
7e2dfb5be46077efb099a629218852ee6416bccf  -

these checksums match

SALT# lsmod | grep ipt
iptable_nat 1115 0 - Live 0xc0e96000
nf_nat_ipv4 3547 1 iptable_nat, Live 0xc0e8f000
iptable_mangle 992 0 - Live 0xc0e24000
iptable_raw 832 0 - Live 0xc0dac000
iptable_filter 888 1 - Live 0xc0d30000
ip_tables 7458 4 iptable_nat,iptable_mangle,iptable_raw,iptable_filter,
Live 0xc0d28000
x_tables 8447 13
xt_recent,xt_comment,xt_addrtype,xt_NFLOG,xt_mark,iptable_mangle,xt_tcpudp,xt_CT,iptable_raw,xt_multiport,xt_conntrack,iptable_filter,ip_tables,
Live 0xc0d1a000

I _believe_ the modules are loaded correctly.

but there are errors in dmesg

[   42.485874] ip_tables: (C) 2000-2006 Netfilter Core Team
[   46.352907] nf_conntrack version 0.5.0 (4002 buckets, 16008 max)
[   46.678087] xt_CT: No such helper "tftp"
[   46.711720] xt_CT: No such helper "tftp-0"
[   46.745385] xt_CT: No such helper "RAS"
[   46.899835] xt_CT: No such helper "snmp"
[   46.933877] xt_CT: No such helper "amanda"
[   47.025431] xt_CT: No such helper "sane"
[   47.060872] xt_CT: No such helper "sane-0"
[   47.097270] xt_CT: No such helper "netbios-ns"
[   47.132871] xt_CT: No such helper "irc"
[   47.169289] xt_CT: No such helper "irc-0"
[   47.638070] ipt_REJECT: Unknown symbol nf_send_reset (err 0)
[   47.638151] ipt_REJECT: Unknown symbol nf_send_unreach (err 0)
[   49.084124] ipt_REJECT: Unknown symbol nf_send_reset (err 0)
[   49.084210] ipt_REJECT: Unknown symbol nf_send_unreach (err 0)

could someone please check the checksums on a running system and tell me
if 5_2 holds the correct packages?


Thanks

ET



------------------------------------------------------------------------------