Re: shorewall

Hi Folks

Am 29.09.2015 um 22:32 schrieb Erich Titl:
> Hi Folks
> 
> I seem to be stuck in my 5_2  attempts :-(
> 
> shorewall refuses to start and I have difficulties understanding why. I
> can see there are a number of iptables related modules missing

I checked the sha sums of all files which I would think are relevant for
my installation
linux, modules.sqfs, iptables, libnetfilter stuff...

They all match the ones from the 5.2 geode tarball at sourceforge, so I
am pretty sure there is no  mismatch there

I am observing the following

[   46.352907] nf_conntrack version 0.5.0 (4002 buckets, 16008 max)
[   46.678087] xt_CT: No such helper "tftp"
[   46.711720] xt_CT: No such helper "tftp-0"
[   46.745385] xt_CT: No such helper "RAS"
[   46.899835] xt_CT: No such helper "snmp"
[   46.933877] xt_CT: No such helper "amanda"
[   47.025431] xt_CT: No such helper "sane"
[   47.060872] xt_CT: No such helper "sane-0"
[   47.097270] xt_CT: No such helper "netbios-ns"
[   47.132871] xt_CT: No such helper "irc"
[   47.169289] xt_CT: No such helper "irc-0"

This appears to come from missing helpers for nf_conntrack. I have set
AUTOHELPERS=Yes
in shorewall.conf, so shorewall is supposed to load helpers when needed.

Any bright ideas welcome

ET





------------------------------------------------------------------------------