On 1/15/19 3:03 AM, Matt Darfeuille wrote: > On 1/15/2019 11:37 AM, Fog_Watch wrote: >> On Mon, 14 Jan 2019 08:12:53 -0800 >> Tom Eastep <teas...@shorewall.net> wrote: >> >>> I really can't see stalling >>> boot-up for more than 2 minutes if an interface isn't going to come up >> My modem takes 3 minutes to get a DSL sync, so about 3 1/2 minutes >> after a power blackout ppp0 can be created. If "wait" could be 3 >> minutes then I'd be more confident that Shorewall would start correctly >> after a resumption of power. >> > > Have you considered the 'optional' option in '/etc/shorewall/interfaces'?: > > http://shorewall.org/manpages/shorewall-interfaces.html >
Depending on how you have used ppp0 in your Shorewall configuration, if you use the 'optional' option for the interface, you may have to 'shorewall enable ppp0' after it comes up. This can be automated using a link status monitor like FooLSM. I'll consider raising the limit. But in the meantime, you can change it yourself: - in Zones.pm (you can use your distro's package manager to find the file), is a hash declaration for %maxoptionvalue which contains: wait = 120 - you can change that to: wait = 300 to up the limit to 5 minutes. -Tom -- Tom Eastep \ Q: What do you get when you cross a mobster with Shoreline, \ an international standard? Washington, USA \ A: Someone who makes you an offer you can't http://shorewall.org \ understand \_______________________________________________
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Shorewall-users mailing list Shorewall-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/shorewall-users