Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 258634 - net-firewall/shorewall-perl-4.2.4 fails to start with REDIRECT rule
Summary: net-firewall/shorewall-perl-4.2.4 fails to start with REDIRECT rule
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High critical (vote)
Assignee: Vieri
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-02-11 19:25 UTC by dulios
Modified: 2009-02-22 13:48 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description dulios 2009-02-11 19:25:49 UTC
Shorewall fails to start at boot and when restarting it doesn't apply the REDIRECT rule:

REDIRECT            local       3128            tcp     www


Reproducible: Always

Steps to Reproduce:
1. put "REDIRECT            local       3128            tcp     www" in /etc/shorewall/rules
2. shorewall restart
3.

Actual Results:  
...
Initializing...
Processing /etc/shorewall/init ...
Setting up ARP filtering...
Setting up Route Filtering...
Setting up Martian Logging...
Setting up Accept Source Routing...
Setting up Proxy ARP...
Setting up Traffic Control...
Preparing iptables-restore input...
Running /sbin/iptables-restore...
iptables-restore v1.4.2: conntrack: Bad value for "--ctorigdstport" option: "www"
Error occurred at line: 165
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
   ERROR: iptables-restore Failed. Input is in /var/lib/shorewall/.iptables-restore-input
Processing /etc/shorewall/stop ...
IP Forwarding Enabled
Processing /etc/shorewall/stopped ...
/sbin/shorewall: line 742: 15533 Terminated              $SHOREWALL_SHELL ${VARDIR}/.restart $debugging restart


Expected Results:  
...
Initializing...
Processing /etc/shorewall/init ...
Setting up ARP filtering...
Setting up Route Filtering...
Setting up Martian Logging...
Setting up Accept Source Routing...
Setting up Proxy ARP...
Setting up Traffic Control...
Preparing iptables-restore input...
Running /sbin/iptables-restore...
Setting up dynamic rules...
IP Forwarding Enabled
Processing /etc/shorewall/start ...
Processing /etc/shorewall/started ...
done.
Comment 1 Vieri 2009-02-12 07:34:52 UTC
(In reply to comment #0)
> REDIRECT            local       3128            tcp     www

What is the output of grep www /etc/services ?
Does "REDIRECT            local       3128            tcp     80" yield the same error?
Comment 2 Vieri 2009-02-12 08:18:52 UTC
should be fixed in Shorewall-perl 4.2.5.2

please see http://bugs.gentoo.org/show_bug.cgi?id=257895

Comment 3 Peter Volkov (RETIRED) gentoo-dev 2009-02-22 13:48:20 UTC
shorewall-perl-2.4.6 was added to the tree. Thank you Vieri for squashing this bug and thank you dulios for report.