Re: [Shorewall-users] Shorewall 3.2.4 tcrules: SCP/SSH distinction stopped working

[Zachary P. <ze...@ba...>]

> With patch this time...
>
> Zachary Palmer wrote:
>
>   
>> Once again, that was working dandy right up until sometime recently,
>> when I presumably did something stupid and broke it.  However, I have
>> not touched my firewall configuration since I added those lines and
>> verified that they worked (and quite successfully, too).  So I'm really
>> not sure why it's not working.  The error message produced by shorewall
>> check is:
>>
>> ...
>>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp - 110   -" Compiled
>>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp 22    -" Compiled
>>   TC Rule "3 0.0.0.0/0 0.0.0.0/0 tcp - 22   -" Compiled
>>   ERROR: Invalid Mark or Mask value: -
>> Terminated
>>
>>     
>
> Attached is a patch for /usr/share/shorewall/compiler that should correct the
> problem. The patch is against 3.2.5 but applies to 3.2.4 with an offset.
>
> -Tom
>   
>   
Shiny!  I applied your patch to my copy of Shorewall 3.2.4 and 
everything seems to be merry and bright.  I just have no clue how I got 
this to work before... and honestly, I did... even tested the shaping 
ability several times.

Oh well.  It's better to know why something was broken than why it 
wasn't, I suppose.  Thanks!

Cheers,

Zachary Palmer