Re: Issue on 7.3.1.1 on APU2 shorewall and ACCOUNT

Hello,

I suceeded to fix the problem by adding the following lines in
buildtool.cfg of xtables-addons (in contents section of ipacct) &
rebuilding the package.

<File>
	Filename = lib/xtables/libxt_ACCOUNT.so
	Source = lib/xtables/libxt_ACCOUNT.so
	Type = binary
</File>


===========================================================


Date: Fri, 20 Sep 2024 16:12:21 +0200
From: <[email protected]>
To: [email protected]
Subject: [leaf-user] Issue on 7.3.1.1 on APU2 shorewall and ACCOUNT


Hello,

I have an issue on 7.3.1.1 (on APU2) : Shorewall fails to launch if
accounting is used.

Error message in shorewall-init.log 
Sep 20 15:22:59 Compiling /etc/shorewall/accounting...
Sep 20 15:23:00    ERROR: ACCOUNT Rules require ACCOUNT Target in your
kernel and iptables /etc/shorewall/accounting (line 11)

but actually xt_ACCOUNT module is loaded :
firewall# lsmod | grep xt_ACCOUNT
xt_ACCOUNT 20480 0 - Live 0xffffffffc04d1000 (O)
x_tables 32768 42
xt_statistic,xt_connlimit,xt_helper,xt_realm,xt_NFQUEUE,xt_hashlimit,xt_tcpmss,xt_CHECKSUM,ipt_rpfilter,xt_DSCP,xt_dscp,xt_TPROXY,xt_CLASSIFY,xt_TCPMSS,xt_length,xt_connmark,xt_owner,xt_iprange,xt_physdev,xt_policy,xt_NETMAP,xt_ACCOUNT,xt_nat,xt_REDIRECT,xt_MASQUERADE,xt_recent,xt_time,xt_comment,ipt_REJECT,xt_addrtype,iptable_nat,xt_mark,iptable_mangle,xt_tcpudp,xt_CT,iptable_raw,xt_multiport,xt_conntrack,xt_NFLOG,xt_LOG,iptable_filter,ip_tables,
Live 0xffffffffc04c3000

and iptaccount is also available :

firewall# iptaccount -a

libxt_ACCOUNT_cl userspace accounting tool v1.3

Finished.


Nota : strictly same config was working well on 7.2.3 (kernel 5).


Thanks a lot for your help or idea to fix the point.


------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/