Re: [Shorewall-devel] Shorewall 4.5.2 RC 2

[Tom E. <te...@sh...>]

On 4/9/12 3:14 PM, "Steven Jan Springl" <st...@sp...> wrote:

>Tom
>
>In the attached config. accounting entry:
>
>RPFILTER:COUNT  -  -  eth0
>
>generates the following iptables rule:
>
>-A INPUT -o eth0 -j RPFILTER
>
>which produces the following error message:
>
>iptables-restore v1.4.13: Can't use -o with INPUT
>
>Additionally accounting entry:
>
>RPFILTER:COUNT  -  eth0  -
>
>generates the following iptables rule:
>
>-A OUTPUT -i eth0 -j RPFILTER
>
>which produces the following error message:
>
>ptables-restore v1.4.13: Can't use -i with OUTPUT
>
>Note, neither of these errors occur if OPTIMIZE=0 is specified.

Steven,

If we make any change here, it will be in the documentation. The entire
reason for adding sections to the accounting file was to be able to detect
this particular issue.

-Tom
You do not need a parachute to skydive. You only need a parachute to
skydive twice.