On Fri, Jan 08, 2010 at 11:29:58PM +0100, Franck Joncourt wrote:
> On Fri, Jan 08, 2010 at 12:47:18PM -0500, AJ Weber wrote:
> > Newbie to fwknop, so please excuse the simple questions...
> > I don't know what did it, but I wonder if my "apt-get -f" command "adjusted" my
> > conf file so it no longer works. I was testing it just fine, and suddenly I
> > get the following when trying to start the service:
> > root@...# service fwknop-server restart
> > Stopping FireWall KNock OPerator: knopwatchd knoptm fwknopd *
> > Starting FireWall KNock OPerator: fwknopd [*] Required variable IPFW_SET_NUM
> > is not defined in /etc/fwknop/fwknop.conf at /usr/sbin/fwknopd line 6552.
> > * Unable to start the daemon.
> > Is there a way to re-run the config program that ran during pkg install (I
> > don't know why I can't find that info...sorry), or what is the appropriate
> > value for this variable?
> The IPFW_SET_NUM variable has been added since 1.9.11. Therefore, I think you
> ugraded to 1.9.11 or newer. If you have done some modifications in fwknop.conf
> you should have been asked what to do during the upgrade:
> - keep the local file (this is the default if I remmeber well)
> - install the maintainer's configuration file
> Thus, if you kept you local configuration file, you have not all the
> required variables to make fwknop >= 1.9.11 work. To avoid that problem, grab
> the latest configuration file and create another one with the variables you
> want to override. Then, instruct fwknop to use both of them by updating
> /etc/default/fwknop-server accordingly.
> Here is an example:
> DAEMON_ARGS="--Override-config /root/fwknop.override.conf"
> This way, you can set whatever variables you want without worrying about