On 05/12/2018 12:57 AM, Jean-Francois Bogaerts wrote:
> Dear Tom,
> 
> Still the same
> 
> Attached trace output for the same command:   sh -x
> /var/lib/shorewall/firewall disable eth2 > trace3
> 

Okay -- I was able to test this one and it does the right thing.

Again, revert the prior patch:

    patch -R /usr/share/shorewall/lib.runtime < INTERFACESTATE1.patch

And apply this one

    patch /usr/share/shorewall/lib.runtime < INTERFACESTATE1.patch
    shorewall compile

-Tom
-- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________
diff --git a/Shorewall/Perl/lib.runtime b/Shorewall/Perl/lib.runtime
index f8d8fdcdc..b06075261 100644
--- a/Shorewall/Perl/lib.runtime
+++ b/Shorewall/Perl/lib.runtime
@@ -192,7 +192,7 @@ find_default_interface() {
 # Determine if Interface is up
 #
 interface_is_up() {
-    [ -n "$($IP -$g_family link list dev $1 2> /dev/null | grep -e '[<,]UP[,>]')" ]
+    [ -n "$($IP -$g_family link list dev $1 2> /dev/null | grep -e '[<,]UP[,>]' | grep -v ' state DOWN ')" ]
 }
 
 #

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
Shorewall-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to