Re: shorewall

On 09/29/2015 03:17 PM, Erich Titl wrote:
> Hi Folks
> 
> Am 29.09.2015 um 22:32 schrieb Erich Titl:
>> Hi Folks
>>
>> I seem to be stuck in my 5_2  attempts :-(
>>
>> shorewall refuses to start and I have difficulties understanding why. I
>> can see there are a number of iptables related modules missing
> 
> I checked the sha sums of all files which I would think are relevant for
> my installation
> linux, modules.sqfs, iptables, libnetfilter stuff...
> 
> They all match the ones from the 5.2 geode tarball at sourceforge, so I
> am pretty sure there is no  mismatch there
> 
> I am observing the following
> 
> [   46.352907] nf_conntrack version 0.5.0 (4002 buckets, 16008 max)
> [   46.678087] xt_CT: No such helper "tftp"
> [   46.711720] xt_CT: No such helper "tftp-0"
> [   46.745385] xt_CT: No such helper "RAS"
> [   46.899835] xt_CT: No such helper "snmp"
> [   46.933877] xt_CT: No such helper "amanda"
> [   47.025431] xt_CT: No such helper "sane"
> [   47.060872] xt_CT: No such helper "sane-0"
> [   47.097270] xt_CT: No such helper "netbios-ns"
> [   47.132871] xt_CT: No such helper "irc"
> [   47.169289] xt_CT: No such helper "irc-0"
> 
> This appears to come from missing helpers for nf_conntrack. I have set
> AUTOHELPERS=Yes
> in shorewall.conf, so shorewall is supposed to load helpers when needed.
> 
> Any bright ideas welcome

AUTOHELPERS=Yes doesn't cause helpers to be loaded automatically, unless
module autoloading is enabled. It rather associates each helper with its
standard protocols and ports -- see the /etc/shorewall/conntrack file.
The standard /usr/share/shorewall/helpers file should cause them to be
loaded however, provided that the setting of MODULE_SUFFIX in
shorewall.conf is correct.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

------------------------------------------------------------------------------


_______________________________________________
leaf-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-devel

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlYLEe0ACgkQovemm2xWKsQtcQCeIiLzrCcF82SCcNPEvtsaHq0H
coUAniS8M+N19529YYE+S6aAz3OW5vnZ
=LO+M
-----END PGP SIGNATURE-----