Shorewall: Error on boot

daghenningsorbo · 03-08-2009, 09:12 AM

Hello.
I have a little problem getting Shorewall to start at boot. It gives the following error in shorewall-init.log:

Code:

23:29:41 Setting up Masquerading/SNAT...
   ERROR: Unable to determine the routes through interface "eth0"
23:29:41 IP Forwarding Enabled
Terminated

My /etc/shorewall/masq looks like this:

Code:

###############################################################################
#INTERFACE		SOURCE		ADDRESS		PROTO	PORT(S)	IPSEC	MARK
wlan0                    eth0
#LAST LINE -- ADD YOUR ENTRIES ABOVE THIS LINE -- DO NOT REMOVE

(the interfaces are correct, internet from wireless -> wired network)

I have read that the error message says the interface is not brought up, but it should be. I do it manually in rc.local:

Code:

#!/bin/sh -e
#
# rc.local
#

ifup eth0
/etc/init.d/dhcp3-server restart
/etc/init.d/nfs-user-server start
/usr/sbin/hostapd /etc/hostapd/hostapd.conf
/sbin/shorewall start

exit 0

Does anyone have an idea about what's going on?

Distro: Xubuntu 8.10
Shorewall version 4.0.12-1

daghenningsorbo · 03-12-2009, 04:02 PM

Anyone who knows what the problem might be??

pokey · 03-12-2009, 10:26 PM

It may be that shorewall is getting started before rc.local in the boot process, I think rc.local gets executed last on boot. Else you could check /var/log/syslog at the time of it happening or post more of your /etc/shorewall/{interfaces,zones,rules,policy} if you're unsure.

HTH

daghenningsorbo · 03-13-2009, 05:26 AM

Hi, thanx for the answer!
I got it to work now by just don't using rc.local, but now some other issues revealed itself, on which I will start a new thread:
http://www.linuxquestions.org/questi...0/#post3474047