On Mon, 27 Jul 2026 at 03:55, Justin Pryzby <[email protected]> wrote:
> > I appreciate that you've elected to preserve shorewall's configuration > files/interface. It's so successful and so well-liked that it's > important to keep it the same. > > Preservation of the config structure is a primary goal, please continue to report any divergence. Its a bit of challenge, but i'm happy to keeping pushing to get the compatibility 100%. > I hit a couple minor issues: > > ./rules -- If the 'net' zone is empty, this will be rejected. I understand > that's deliberate, but a behavior change from shorewall(tm). > DNAT net,loc vm:192.168.122.11 tcp 80,443,5679 > ERROR: DNAT source zone net has no interface or host to match (rules:19) > > Fixed in next release > ./conntrack -- We had an unmodified template file, which failed like > this. I moved it out of the way. > ERROR: /etc/shorewall/conntrack:6: unsupported ?FORMAT 3 > > Should have already been fixed? This was found and fixed in version. 0.1.5. > Maybe this dir should be protected, for consistency with shorewall? > drwxr-x--- 2 root root 4096 Jul 20 09:50 /var/lib/shorewall > drwxr-xr-x 2 root root 4096 Jul 20 09:52 /var/lib/shorewall-nft > > Fixed in next release > It looks like this already handles what we currently need. > When we do some more upgrades, we'll also want to support DOCKER=yes -- > it's not clear to me if that's implemented yet ? > > DOCKER=yes is implemented. Its better IMO - make sure your docker is outputing nftables (so you may need to check versions) https://github.com/sol1/shorewall-nft/blob/main/docs/design/docker.md Please try it out and let me know if that works for you. > It'd be great if a more people were to try it out and report back. I'm > sure Dave is interested in more feedback, even if it amounts to "X isn't > supported / didn't work right", it's useful to know what missing > features are "most wanted". > > Absolutely. I'm happy to take config files and whatever errors you have. Dave
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
