On 11/9/10 12:36 PM, David Watkins wrote:
> I'm trying to introduce some time based rules into my shorewall firewall.
> 
> I have reason to believe that my kernel and iptables installations
> support time matched rules (because I can create them directly using
> iptables), but I can't get shorewall to create any.
> 
> AFAICT all I need to do is create the correct entry in
> /etc/shorewall/rules but I'm having difficulty and, surprisingly, I
> can't get Google to help me.
> 
> If anyone could point me to an example of a working rules file, or
> point out how I could get some better diagnostics then I'd be very
> gratefull.
> 
> I've included everything I think might be relevant below.  Sorry for
> the long posting.
> 
> Thanks
> 
> --------------------------------------------------------------------------------------------------------------------
> 
> 
> What I'm running:
> 
> Fedora Core 10
> 
> # uname -r
> 2.6.27.21-170.2.56.fc10.i586
> 
> # rpm -qa | grep iptables
> iptables-1.4.3.2-1.fc10.i386
> iptables-ipv6-1.4.3.2-1.fc10.i386
> 
> # rpm -qa | grep shorewall
> shorewall-common-4.2.10-1.fc10.1.noarch
> shorewall-shell-4.2.10-1.fc10.1.noarch
> shorewall-perl-4.2.10.3-1.fc10.1.noarch
> shorewall-4.2.10-1.fc10.1.noarch

Why, on FC10, are you using such an old version of Shorewall? (the
current version is 4.4.14)

And from the trace output, you are using Shorewall-shell which was
discontinued with version 4.4.0 and which doesn't support time-based rules.

-Tom
-- 
Tom Eastep        \ When I die, I want to go like my Grandfather who
Shoreline,         \ died peacefully in his sleep. Not screaming like
Washington, USA     \ all of the passengers in his car
http://shorewall.net \________________________________________________

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
The Next 800 Companies to Lead America's Growth: New Video Whitepaper
David G. Thomson, author of the best-selling book "Blueprint to a 
Billion" shares his insights and actions to help propel your 
business during the next growth cycle. Listen Now!
http://p.sf.net/sfu/SAP-dev2dev
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to