Dear all

i am getting the following error when i start shorewall


Failed to start firewall :
Compiling...
Loading /usr/share/shorewall/lib.base...
Loading /usr/share/shorewall/lib.config...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Loading Modules...
Loading library /usr/share/shorewall/lib.actions...
ERROR: Traffic Shaping requires mangle support in your kernel and iptables
/sbin/shorewall: line 330: 4495 Terminated $command $SHOREWALL_SHELL $sc $@


regards
shogun

My first guess is that mangle support was not compiled into your kernel. You can check this by looking at the config file for the compilation. If you are using a standard kernel for a recent distro, you will likely find the config file(s) in the /boot directory. If you compiled the kernel yourself, the config file will be in the top level directory of your kernel source and will be called .config (note the leading dot in the name, indicating it is a "hidden" file). Search for lines that have the string MANGLE in them.

If you need more assistance, please include the distro you are using in your next post.

The distro is RHEL-5 and i am getting the error when i start the iptatable services


[root@localhost ~]# service iptables status
Table: nat
iptables: unrecognized option `--list'
iptables: unrecognized option `--line-numbers'
Can't open nat: No such file or directoryTable: filter
iptables: unrecognized option `--list'
iptables: unrecognized option `--line-numbers'
Can't open filter: No such file or directory[root@localhost ~]#
[root@localhost ~]#

regards
shogun

The service iptables command works a little differently in RHEL5 than I am used to. But I am wondering if perhaps your /etc/sysconfig/iptables file contains contents that it should not. Since you are using RHEL5, it might be easiest if you took up the problem mentioned in post #3 with Red Hat.