shorewall wants libnetfilter_acct.lrp

jeanrocco jr <[email protected]> Wed, 4 Aug 2021 16:23:13 -0400
Newsgroups gmane.linux.leaf.user
Message-ID <CACmT3xsCa7E8OCNqF23V_6L=8hThBn2+=HkMzoQWAKbPNH09Aw@mail.gmail.com>
Hello list !

Trying to figure-out rsyslog etc, I ran across a strange problem... On my
PI Zero W I understandably run without shorwall installed...

firewall# cat /etc/issue
Linux 5.10.42-bcmrpi #1 Sat Jun 12 12:47:24 CEST 2021
LEAF Bering-uClibc 7.1.0-beta1 Rev 1 uClibc 1.0.38  \n \l

while trying to understand how the logs work now, I tried to install
shorwall manually, and to my surprise I got:

firewall# apkg -i shorwall
shorwall installed.
libiptbl installed.
perl installed.
ulogd installed.
/mnt/libnetfilter_acct.lrp not found.

in fact I get a lot of libnetfilter not found... ( libnetfilter_log.lrp,
libnetfilter_cttimeout.lrp, etc... ) but I was able to install most of them
using the Webconf "Add Packages" link, but I can't find the
libnetfilter_acct.lrp package, looks like it is missing in the distribution.

Also notice that shorwall uses ulogd as a logger daemon... will this clash
with rsyslog ? I ask because the shorewall log does not work, as is, on my
7.0.3 APU2C2 ... I got it to work doing:

cat /etc/logrotate.d/shorewall
LOGS_DAILY="shorewall.log shorewall-init.log"
LOGSIZE=1024
USER=root
DAEMON=adm
DAEMON=ulogd
METHOD=reload
COMPRESS_ALL=1

the DAEMON=adm is no mistake, after trying everything , I got it to work
coping what lighttpd was doing:

cat /etc/logrotate.d/lighttpd
LOGS_DAILY="lighttpd/access.log lighttpd/error.log"
LOGS_WEEKLY=""
LOGSIZE=1024
USER=sh-httpd
DAEMON=adm
DAEMON=lighttpd
METHOD=restart
COMPRESS_ALL=1

I am somewhat "dazed and confused" by all this log apparent inconsistency
!!!
Has anyone figured out how to get the logs working properly ? I would like
to document this if necessary ...

thank's

jrb.

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/