Shorewall configuration ('run_iptables'

Quintus14 · 01-30-2005, 07:11 AM

Hi,

I want to configure a shorewall on a new CentOS-(4.0beta-)server - I do have the shorewall-configuration-files of my old (Debian-)server and I have downloaded and installed the actual version of shorewall (2.2.0).

I think I did have done all, which I did 2 years ago on the old server....

... but the shorewall does not start:

Quote:

/etc/shorewall/shorewall.conf: line 13: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 14: run_iptables: command not found

What is wrong with the command 'run_iptables'?

Thx
Quintus
(Linux-(nearly-)Newbee)

Quintus14 · 01-31-2005, 11:12 AM

This ist the output from the log:

Quote:

/etc/shorewall/shorewall.conf: line 13: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 14: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 15: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 16: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 17: run_iptables: command not found
/etc/shorewall/shorewall.conf: line 18: run_iptables: command not found
/usr/sbin/shorewall: line 838: /usr/share/shorewall/firewall: Keine Berechtigung (= no authorisation)
/usr/sbin/shorewall: line 838: exec: /usr/share/shorewall/firewall: cannot execute: Keine Berechtigung (= no authorisation)

Nobody any idea....?

Thx,
Quintus

johnnydangerous · 02-03-2005, 05:57 AM

try on giptables.org - great, not sure if u need that shorewall I'm having many troubles unistalling it after I tested it.. now it's a total mess - the shorewall also if you really need shorewall maybe webmin can help to sort out problems regarding sw

Quintus14 · 02-03-2005, 08:16 AM

Hi,

FYI - we found a solution:

1.) on the CentOS-installation is no command 'run_iptables' present (nobody knows why) - replacing the command 'run_iptables' with 'iptables' in the shorewall.conf did solve this problem.

2.) setting '/usr/share/shorewall/firewall' with chmod to 755 did solve the 'cannot execute'-problem.

Thanks - it's running now

Regards, Quintus14