Configuring Shorewall error: net Zone: eth0:0.0.0.0/0

almost000 · 06-12-2007, 06:33 AM

I don't have a clue on what I am doing. all I know. that eth0 is a trusted side. and eth1 the internet.
I do have webmin install. I just learned how to use webmin

.

Code:

Failed to start firewall : Compiling...
Initializing...
Determining Zones...
   IPv4 Zones: net loc
   Firewall Zone: fw
Validating interfaces file...
Validating hosts file...
Pre-processing Actions...
   Pre-processing /usr/share/shorewall/action.Drop...
   Pre-processing /usr/share/shorewall/action.Reject...
Validating Policy file...
Determining Hosts in Zones...
   net Zone: eth0:0.0.0.0/0
   ERROR: detectnets not allowed on interface with default route - eth1
/sbin/shorewall: line 251:  2506 Terminated              $SHOREWALL_SHELL ${SHAREDIR}/compiler $debugging $nolock compile ${VARDIR}/.start

almost000 · 06-12-2007, 02:23 PM

I relized that I did have my interface backwards. I think that is a bad ouch.

webmin running check shorwall.

Code:

Checking configuration ..
Checking...
Initializing...
Determining Zones...
   IPv4 Zones: net loc
   Firewall Zone: fw
Validating interfaces file...
Validating hosts file...
Pre-processing Actions...
   Pre-processing /usr/share/shorewall/action.Drop...
   Pre-processing /usr/share/shorewall/action.Reject...
Validating Policy file...
Determining Hosts in Zones...
   net Zone: eth1:0.0.0.0/0
   WARNING: Zone loc is empty
Deleting user chains...
Checking /etc/shorewall/routestopped ...
Creating Interface Chains...
Checking Common Rules
Adding Anti-smurf Rules
Adding rules for DHCP
Checking TCP Flags checking...
Checking Kernel Route Filtering...
Checking Martian Logging...
Compiling IP Forwarding...
Checking /etc/shorewall/rules...
Checking Actions...
Checking /usr/share/shorewall/action.Drop for Chain Drop...
Checking /usr/share/shorewall/action.Reject for Chain Reject...
Checking /etc/shorewall/policy...
Checking Masquerading/SNAT
Checking Traffic Control Rules...
Checking Rule Activation...
Shorewall configuration verified
.. your firewall configuration looks OK.