Startup scripts not continuing after Shorewall script

charleswj · 10-10-2005, 01:21 AM

I'm trying to configure Sentry Firewall which is based on Slackware and will be using Shorewall to configure iptables. My firewall script is rc.shorewall, which is being called from rc.inet2. My problem comes in when I actually enable rc.shorewall. Anything that runs after Shorewall is being silently skipped. This includes such important daemons as syslogd and sshd.

I've tried adding some "echo" and "sleep" commands to rc.inet2 and rc.shorewall to confirm my suspicion that execution isn't returning after Shorewall completes. I've also tried running rc.inet2 from the command line with the same results.

What could be causing this to happen? I would have thought that if there was a problem in one step, that wouldn't prefent execution from continuing. Additionally, is there any way to run a startup script with more verbose output to maybe catch the problem?

Thank you in advance to everyone.

Charles

ciotog · 10-10-2005, 04:32 PM

Are you certain that rc.shorewall is actually ending? Is there a blank line at the end of the script? Try putting

Code:

exit 0

as the last line.

charleswj · 10-11-2005, 01:23 AM

That's the problem: it's not ending. Well, to be clear it's more like it's short-circuiting somewhere. I get a login prompt and everything but anything in the boot process that would have happened after rc.shorewall never executes.

In rc.shorewall, I changed this line:

Code:

exec /sbin/shorewall -f start

to

Code:

echo "Before"; sleep 5
exec /sbin/shorewall -f start
echo "After"; sleep 5

I do get the "Before" but after the firewall scripts run, I get no other output including no "After". Complicating things further is the fact that this is a LiveCD-based firewall and the way it is structured doesn't let me modify or replace anything in /bin or /sbin.

Any ideas on what could cause the startup process to die early?

gbonvehi · 10-11-2005, 01:45 AM

exec will stop the script from further processing, remove exec and you're done

charleswj · 10-11-2005, 03:47 PM

Thanks gbonvehi, that seems to have done the trick. I'll post again later with more details for posterity's sake.

Charles