hello,
Just installed Shorewall and it seems to be working ok after i setup policys but when I boot mandrake 9.1 i get message "Adding Common Rules
iptables v1.2.7a: host/network `dhcp' not found
Try `iptables -h' or 'iptables --help' for more information." and it says failed on the interactive startup. yet when i login and go to s. gibsons ShieldsUp and run probe every port is stealth like I set it up What gives. Can anyone explain whats happening and how do iget rid of this error message...
thanx
alan

p.s- if helpful this is on a 56k modem w/dhcp from my isp...

iptables v1.2.7a: host/network `dhcp' not found
Means the firewall script read a variable which value is "dhcp", and Iptables doesn't deal with variables called "dhcp". Run the script in debug mode ("sh -x scriptname 2>/tmp/error.log"), then check the output for where the error occurs (or check your Shorewall config files for a variable that has the value "dhcp") and correct it.

In my /etc/shorewall/interfaces file i have the last line as "net ppp0 dhcp". Now when i delete the dhcp and restart shorewall i dont get any error message and it says shorewall started fine. The only problem is my internet connection doesnt work then. as soon as I restore the dhcp field and restart shorewall I can surf ok. But of course the above error message has returned.Any thoughts on why this is happening...

alan

just wanted to add that I ran the debug command and the line that is causing the trouble is:
+ run_iptables -A reject -s dhcp -j DROP
+ iptables -A reject -s dhcp -j DROP
iptables v1.2.7a: host/network `dhcp' not found
Try `iptables -h' or 'iptables --help' for more information.
Doing a iptables -h i see that the -s parameter is supposed 2 be used as a source destination. But the the only place i have the dhcp variable is in the interfaces file as:
net ppp0 dhcp. is this incorrect?

alan

I have the same problem, but in my /etc/shorewall/interfaces file tags looks like this:
net ppp+ detect
masq eth0 detect
I can't start shorewall, I get this error:
ip tables v1.2.7a host/network '192.168.1.1_hosts' not found ....
and bla bla bla
can enybody tell me where I can solve this problem?

kernel compiling
kernel modules(especially iptables ones)
/etc/hosts
is the way to solve it

Fichero de configuración /etc/shorewall/shorewall.conf
STARTUP_ENABLED=Yes
CLAMPMSS=Yes

/etc/shorewall/zones
#ZONE DISPLAY OPTIONS
fw firewall
net ipv4
loc ipv4
dmz ipv4
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE
#######################################
/etc/shorewall/interfaces
#ZONE INTERFACE BROADCAST OPTIONS GATEWAY
net ppp0 detect
loc eth0 detect

ó if you have net interfaces
#ZONE INTERFACE BROADCAST OPTIONS GATEWAY
net eth0 detect
loc eth1 detect

If at all there was a service of DHCP, be as client, as server or as middleman, in some of the interfaces, the option dhcp should be added to allow the communication required for this service.
#ZONE INTERFACE BROADCAST OPTIONS GATEWAY
net ppp0 detect dhcp
loc eth1 detect dhcp
##############################################
/etc/shorewall/policy
#SOURCE DEST POLICY LOG LIMIT:BURST
loc net ACCEPT
fw net ACCEPT
net all DROP info
all all REJECT info
#############################################
/etc/shorewall/masq
#INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
ppp0 eth0
ppp0 eth1

ó

In the following example, he/she will be carried out enmascaramiento through the interface eth0 for the nets 192.168.0.0/24 and 192.168.1.0/24:
#INTERFACE SUBNET ADDRESS PROTO PORT(S) IPSEC
eth0 192.168.0.0/24
eth0 192.168.1.0/24
#LAST LINE -- ADD YOUR ENTRIES BEFORE THIS ONE -- DO NOT REMOVE

with the rules implmentas like like and send