Hi, shorewall provides an "SUBSYSLOCK" option, which isn't honored by the init script. From man page: SUBSYSLOCK=[pathname] This parameter should be set to the name of a file that the firewall should create if it starts successfully and remove when it stops. Creating and removing this file allows Shorewall to work with your distribution's initscripts. For RedHat, this should be set to /var/lock/subsys/shorewall. For Debian, the value is /var/state/shorewall and in LEAF it is /var/run/shorwall. Reproducible: Always Steps to Reproduce: 1. /etc/init.d/shorewall start 2. /sbin/shorewall stop 3. /etc/init.d/shorewall status Actual Results: The init script reports, that shorewall is still running. Expected Results: The init script should read the status from '/sbin/shorewall status'. In that case, we stopped shorewall, so the init script should'n report shorewall is still running.
Fixed in 4.5.19 by Thomas himself. Thank you Thomas :).