524558 – net-firewall/shorewall-core-4.5.21.10 with dev-lang/perl-5.20 - Can't use string ("nat") as a HASH ref while "strict refs" in use at /usr/share/shorewall/Shorewall/Chains.pm line 3454.

Bug 524558 - net-firewall/shorewall-core-4.5.21.10 with dev-lang/perl-5.20 - Can't use string ("nat") as a HASH ref while "strict refs" in use at /usr/share/shorewall/Shorewall/Chains.pm line 3454.

Summary: net-firewall/shorewall-core-4.5.21.10 with dev-lang/perl-5.20 - Can't use str...

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Thomas Deutschmann (RETIRED)

URL:
Whiteboard:
Keywords:

Depends on:	522278
Blocks:	perl-5.20
	Show dependency tree

Reported:	2014-10-05 22:21 UTC by Christer Ekholm
Modified:	2014-11-18 16:00 UTC (History)
CC List:	2 users (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Christer Ekholm 2014-10-05 22:21:51 UTC

$ sudo shorewall restart
Compiling...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Compiling /etc/shorewall/zones...
Compiling /etc/shorewall/interfaces...
Determining Hosts in Zones...
Locating Action Files...
Compiling /etc/shorewall/policy...
Running /etc/shorewall/initdone...
Adding Anti-smurf Rules
Adding rules for DHCP
Compiling TCP Flags filtering...
Compiling ARP Filtering...
Compiling Kernel Route Filtering...
Compiling Martian Logging...
Compiling /etc/shorewall/masq...
Compiling MAC Filtration -- Phase 1...
Compiling /etc/shorewall/blrules...
Compiling /etc/shorewall/rules...
Compiling /etc/shorewall/conntrack...
Compiling MAC Filtration -- Phase 2...
Applying Policies...
Compiling /usr/share/shorewall/action.Reject for chain Reject...
Compiling /usr/share/shorewall/action.Broadcast for chain Broadcast...
Compiling /usr/share/shorewall/action.Drop for chain Drop...
Generating Rule Matrix...
Optimizing Ruleset...
Can't use string ("nat") as a HASH ref while "strict refs" in use at /usr/share/shorewall/Shorewall/Chains.pm line 3454.

Upstream has a fix for this in their current stable branch (4.6.2.3)
see ftp://ftp.shorewall.org/pub/shorewall/4.6/shorewall-4.6.2/releasenotes.txt

As a workaround I have applied the fix from 4.6.2.3 to my installed
shorewall. So I'm happy with that. But I think I should report this
anyway just to let you know.

Reproducible: Always

Comment 1 Thomas Deutschmann (RETIRED) gentoo-dev

2014-10-06 11:04:03 UTC

Thanks for the report. The new shorewall which includes the fix is waiting since September for getting included into portage, see bug 522278.

Because you are shorewall user: Please can you comment in bug 522278 whether you like the new monolithic ebuild and if you think a news item would be needed or not. Thanks!

Comment 2 Christer Ekholm 2014-10-06 17:44:12 UTC

I have no preference for either split ebuild or monolithic. Simply use
whatever is easier to maintain.

I have now tested to upgrade to 4.6.3.4 from bleeding-edge, with only
a trivial conflict to resolve.

WARNING: One or more updates/rebuilds have been skipped due to a dependency conflict:

net-firewall/shorewall:0

  (net-firewall/shorewall-4.6.3.4:0/0::bleeding-edge, ebuild scheduled for merge) conflicts with
    =net-firewall/shorewall-4.5.21.10 required by (net-firewall/shorewall6-4.5.21.10:0/0::gentoo, installed)


Just unmerge all `qlist -I shorewall` and then install shorewall
again.  I don't think a news item is neccesary for that.

Comment 3 Thomas Deutschmann (RETIRED) gentoo-dev

2014-11-18 16:00:00 UTC

This was fixed today with net-firewall/shorewall-4.6.5.2 (bug 522278), which is now available within portage.