Discussion:
[Shorewall-users] Note on debian stretch and NFLOG
Wayne S
2017-07-12 09:42:18 UTC
Permalink
Just a note if anyone else has this issue.

I was testing shorewall with Debian Stretch and ran into an issue with NFLOG and the --nflog-range parameter. The shorewall version in Stretch is 5.0.15.6. however the nflog-size change is not done until 5.1.

My fix was to change the logging parameters from

LOG="NFLOG(1,0,1)"
LOGBL="NFLOG(2,0,1):bl"
...

to

LOG="NFLOG(1,,)"
LOGBL="NFLOG(2,,):bl"
...

since I was using the defaults for the other parameters.

Wayne

Loading...