View previous topic :: View next topic |
Author |
Message |
techiem2 Apprentice

Joined: 28 Sep 2002 Posts: 166 Location: The Net
|
Posted: Sat Sep 18, 2004 5:22 pm Post subject: Shorewall won't start. |
|
|
I'm trying to setup one of my boxes and a nice firewall/router to replace my current one.
I am running kernel 2.6.8-r3.
I have installed iptables and shorewall.
I followed the 2 interface howto for shorewall.
However, it won't start.
When I try to start shorewall, I get the following error:
------------------------------------------------
firewall root # /etc/init.d/shorewall start
* Starting firewall...
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
/sbin/runscript.sh: line 534: 9365 Terminated /sbin/shorewall start >/dev/null [ !! ]
--------------------------------------------------
Here is the full output of running
shorewall start
manually
---------------------------------------------
firewall files # shorewall start
Loading /usr/share/shorewall/functions...
Processing /etc/shorewall/params ...
Processing /etc/shorewall/shorewall.conf...
Starting Shorewall...
Initializing...
Shorewall has detected the following iptables/netfilter capabilities:
NAT: Available
Packet Mangling: Available
Multi-port Match: Available
Connection Tracking Match: Not available
Determining Zones...
Zones: net loc
Validating interfaces file...
Validating hosts file...
Validating Policy file...
Determining Hosts in Zones...
Net Zone: eth1:0.0.0.0/0
Local Zone: eth0:0.0.0.0/0
Processing /etc/shorewall/init ...
Deleting user chains...
iptables: No chain/target/match by that name
Processing /etc/shorewall/stop ...
iptables: No chain/target/match by that name
iptables: No chain/target/match by that name
IP Forwarding Enabled
Processing /etc/shorewall/stopped ...
Terminated
----------------------------------
Any ideas what I'm doing wrong?
Thanks. |
|
Back to top |
|
 |
himpierre l33t


Joined: 31 Aug 2002 Posts: 867 Location: Berlin
|
Posted: Sat Sep 18, 2004 6:37 pm Post subject: |
|
|
Quote: |
Connection Tracking Match: Not available
|
You have to enable connection tracking in your kernel.
t. |
|
Back to top |
|
 |
techiem2 Apprentice

Joined: 28 Sep 2002 Posts: 166 Location: The Net
|
Posted: Sat Sep 18, 2004 6:52 pm Post subject: |
|
|
yah.
I just figured that out.
Went back and found the troubleshooting FAQ on the site.
Then recompiled my kernel with all the needed options.
It starts now.
hehe.
Thanks. |
|
Back to top |
|
 |
|