[Shorewall-users] Problems with TOS file

[Jonathan B. <jb...@re...>]

Hi,

I'm returning to Shorewall after a 4 year absence.  In my new job, I'm
in the process of upgrading our router.  It currently has Shorewall 3.*
running on it.

I've downloaded and install 4.4 on the new system>

Configuring Shorewall 4.4 on an Ubuntu system.

Have a problem with the TOS file.  I have a number of zones defined
(zones file and tos file are below).  One of the zones is called LAN.
When the source zone is LAN, I get the following error:


> ERROR: Unknown Interface (LAN) : /etc/shorewall/tos (line 9)

When I replace the LAN with "eth0", it works.  According to the manual,
it should accept any zone declared in the Zones file.  Instead, it is
requiring an interface.

This is still in a test environment.

Any ideas?

Thanks in advance.



JBB


> #
> # Shorewall version 4 - Zones File
> #
> # For information about this file, type "man shorewall-zones"
> #
> # The manpage is also online at
> # http://www.shorewall.net/manpages/shorewall-zones.html
> #
> ###############################################################################
> #ZONE   TYPE            OPTIONS         IN                      OUT
> #                                       OPTIONS                 OPTIONS
> fw      firewall
> VPN     ipv4
> LAN     ipv4
> DMZ     ipv4
> DMZ2    ipv4
> WAN0    ipv4
> WAN1    ipv4
> WAN2    ipv4
> WAN3    ipv4
> WAN4    ipv4
> #LAST LINE - ADD YOUR ENTRIES ABOVE THIS ONE - DO NOT REMOVE

> #
> # Shorewall version 4 - Tos File
> #
> # For information about entries in this file, type "man shorewall-tos"
> #
> ###############################################################################
> #SOURCE         DEST            PROTOCOL        SOURCE  DEST    TOS     MARK
> #                                               PORTS   PORTS
> eth0    all     tcp     -       443     8
> eth0    all     tcp     -       80      8
> eth0    all     tcp     -       443     16
> eth0    all     tcp     -       80      16
> #LAST LINE -- Add your entries above -- DO NOT REMOVE