Re: shorewall wants libnetfilter_acct.lrp

   Hi

   -------- Originalnachricht --------
   Betreff: [leaf-user] shorewall wants libnetfilter_acct.lrp
   Von: jeanrocco jr
   An: leaf-user
   Cc:

     Hello list !
     Trying to figure-out rsyslog etc, I ran across a strange problem...
     On my
     PI Zero W I understandably run without shorwall installed...
     firewall# cat /etc/issue
     Linux 5.10.42-bcmrpi #1 Sat Jun 12 12:47:24 CEST 2021
     LEAF Bering-uClibc 7.1.0-beta1 Rev 1 uClibc 1.0.38 \n \l
     while trying to understand how the logs work now, I tried to install
     shorwall manually, and to my surprise I got:
     firewall# apkg -i shorwall
     shorwall installed.
     libiptbl installed.
     perl installed.
     ulogd installed.
     /mnt/libnetfilter_acct.lrp not found.

     If you used upgrade then there should have been a warning.

     in fact I get a lot of libnetfilter not found... (
     libnetfilter_log.lrp,
     libnetfilter_cttimeout.lrp, etc... ) but I was able to install most
     of them
     using the Webconf "Add Packages" link, but I can't find the
     libnetfilter_acct.lrp package, looks like it is missing in the
     distribution.
     Also notice that shorwall uses ulogd as a logger daemon... will this
     clash
     with rsyslog ? I ask because the shorewall log does not work, as is,
     on my
     7.0.3 APU2C2 ... I got it to work doing:
     cat /etc/logrotate.d/shorewall
     LOGS_DAILY="shorewall.log shorewall-init.log"
     LOGSIZE=1024
     USER=root
     DAEMON=adm
     DAEMON=ulogd

     This does not make any sense. The variables only hold one value.

     METHOD=reload
     COMPRESS_ALL=1
     the DAEMON=adm is no mistake, after trying everything , I got it to
     work
     coping what lighttpd was doing:
     cat /etc/logrotate.d/lighttpd
     LOGS_DAILY="lighttpd/access.log lighttpd/error.log"
     LOGS_WEEKLY=""
     LOGSIZE=1024
     USER=sh-httpd
     DAEMON=adm
     DAEMON=lighttpd

     This is just as much nonsense.

     METHOD=restart
     COMPRESS_ALL=1
     I am somewhat "dazed and confused" by all this log apparent
     inconsistency
     !!!

     Yes this inconsistency stems from the fact that there no automated
     testing and yes modifications are not thoroughly discussed.

     Has anyone figured out how to get the logs working properly ? I
     would like
     to document this if necessary ...

     You best start with a working version. Then work your way up.
     Cheers

     ET

------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/