Re: Issue on 7.3.1.1 on APU2 shorewall and ACCOUNT

I built the 3.25 version, without any patch or anything unless adding
the 5 lines in buildtool.cfg

Please note that then remove/clean macro is NOT working (i don't now
how to fix it)

Nota : Toolchain=x86_64-unknown-linux-uclibc


Date: Tue, 24 Sep 2024 17:31:53 +0200
From: "KP.Kirchdoerfer" <[email protected]>
To: [email protected]
Subject: Re: [leaf-user] Issue on 7.3.1.1 on APU2 shorewall and ACCOUNT


Hi;

Am Sonntag, 22. September 2024, 15:48:19 CEST schrieb [email protected]:
> Hello,
> 
> I suceeded to fix the problem by adding the following lines in
> buildtool.cfg of xtables-addons (in contents section of ipacct) &
> rebuilding the package.
> 
> <File>
> 	Filename = lib/xtables/libxt_ACCOUNT.so
> 	Source = lib/xtables/libxt_ACCOUNT.so
> 	Type = binary
> </File>  


Great you found a solution for yourself.

Anyway, the module libxt_ACCOUNT.so doesn't even build in my
environment and therfor I removed libxt_ACCOUNT.so from the package in
the false assumption it won't be neded any longer.
This is obviously wrong.

So the error here is somewhere else.

May I ask you what version of xtables_addons you are compiling?

kp
> 
> ===========================================================
> 
> 
> Date: Fri, 20 Sep 2024 16:12:21 +0200
> From: <[email protected]>
> To: [email protected]
> Subject: [leaf-user] Issue on 7.3.1.1 on APU2 shorewall and ACCOUNT
> 
> 
> Hello,
> 
> I have an issue on 7.3.1.1 (on APU2) : Shorewall fails to launch if
> accounting is used.
> 
> Error message in shorewall-init.log
> Sep 20 15:22:59 Compiling /etc/shorewall/accounting...
> Sep 20 15:23:00    ERROR: ACCOUNT Rules require ACCOUNT Target in your
> kernel and iptables /etc/shorewall/accounting (line 11)
> 
> but actually xt_ACCOUNT module is loaded :
> firewall# lsmod | grep xt_ACCOUNT
> xt_ACCOUNT 20480 0 - Live 0xffffffffc04d1000 (O)
> x_tables 32768 42
> xt_statistic,xt_connlimit,xt_helper,xt_realm,xt_NFQUEUE,xt_hashlimit,xt_tcpm
> ss,xt_CHECKSUM,ipt_rpfilter,xt_DSCP,xt_dscp,xt_TPROXY,xt_CLASSIFY,xt_TCPMSS,
> xt_length,xt_connmark,xt_owner,xt_iprange,xt_physdev,xt_policy,xt_NETMAP,xt_
> ACCOUNT,xt_nat,xt_REDIRECT,xt_MASQUERADE,xt_recent,xt_time,xt_comment,ipt_RE
> JECT,xt_addrtype,iptable_nat,xt_mark,iptable_mangle,xt_tcpudp,xt_CT,iptable_
> raw,xt_multiport,xt_conntrack,xt_NFLOG,xt_LOG,iptable_filter,ip_tables,
> Live 0xffffffffc04c3000
> 
> and iptaccount is also available :
> 
> firewall# iptaccount -a
> 
> libxt_ACCOUNT_cl userspace accounting tool v1.3
> 
> Finished.
> 
> 
> Nota : strictly same config was working well on 7.2.3 (kernel 5).
> 
> 
> Thanks a lot for your help or idea to fix the point.
> 
> 
> ------------------------------------------------------------------------
> leaf-user mailing list: [email protected]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/
> 
> 
> ------------------------------------------------------------------------
> leaf-user mailing list: [email protected]
> https://lists.sourceforge.net/lists/listinfo/leaf-user
> Support Request -- http://leaf-project.org/  






------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/


------------------------------------------------------------------------
leaf-user mailing list: [email protected]
https://lists.sourceforge.net/lists/listinfo/leaf-user
Support Request -- http://leaf-project.org/