On 04/16/2018 11:03 AM, colony.three--- via Shorewall-users wrote: > > > ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ > > On April 16, 2018 10:56 AM, Tom Eastep <teas...@shorewall.net> wrote: > >> >> >> On 04/16/2018 10:50 AM, colony.three--- via Shorewall-users wrote: >> >>> ‐‐‐‐‐‐‐ Original Message ‐‐‐‐‐‐‐ >>> >>> On April 16, 2018 10:42 AM, Tom Eastep teas...@shorewall.net wrote: >>> >>>> On 04/16/2018 10:24 AM, colony.three--- via Shorewall-users wrote: >>>> >>>>> Anyone seen this? >>>>> >>>>> Nov 29 01:42:29 Compiling MAC Filtration -- Phase 2... >>>>> >>>>> Nov 29 01:42:29 Applying Policies... >>>>> >>>>> Nov 29 01:42:29 Compiling /usr/share/shorewall/action.Broadcast for >>>>> >>>>> chain Broadcast... >>>>> >>>>> Nov 29 01:42:29 ERROR: Invalid parameter (DROP),Multicast(DROP) >>>>> >>>>> /usr/share/shorewall/action.Broadcast (line 1) >>>>> >>>>> from (line EOF) >>>>> >>>>> shorewall version >>>>> ================= >>>>> >>>>> 5.0.15.6 >>>> >>>> Don't see why you would be getting that message on 5.0.15.6. What does >>>> >>>> your /usr/share/shorewall/action.Broadcast look like? >> >> What is your setting of DROP_DEFAULT in shorewall.conf? >> >> -Tom >> > > > DROP_DEFAULT="Broadcast(DROP),Multicast(DROP)" > > I didn't change it, but commenting it out does not help. Same with the other > settings which specify (DROP),Multicast(DROP). > > I do have a restrictive sysctl, if that makes any difference. It's working > fine on all my other (CentOS7.4) machines. (attached) > >
Those setting are not valid on 5.0.15.6. The ability to list multiple actions wasn't introduced until Shorewall 5.1.2. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users
