These mistakes would probably be avoided if people used set -o nounset in their scripts. It is like using -w in perl: why get your customers to debug your scripts if the interpreter does it for free? Bob On Tue, 21 Jun 2005, [iso-8859-15] Jürgen Mell wrote:
Hi List,
On Tuesday 21 June 2005 14:38, Frank Stuehmer wrote:
Hi list,
just tried to use fresh installed Suse 9.3 updated with you.
SuSEfirewall2-3.3-18.2
/etc/sysconfig/SuSEfirewall2 with FW_ALLOW_INCOMING_HIGHPORTS_UDP="yes"
Start FW complains, four lines "iptables: No chain/target/match by that name"
Reasons are in /sbin/SuSEfirewall lines 1460 and 1469: for CHAIN in $input_zones; do --> chain=input_$chain
should be "CHAIN=input_$CHAIN".
Frank Stuehmer
There is another typo in line 1629 (the line-wrapping is done by kmail - originally this is one long line)
$LAA $IPTABLES -A $chain -d $net1 $snet2 $proto $rport -i $dev -j LOG \ ${LOG}"-`rulelog $CHAIN`-ACC-MASQ " -m state --state ESTABLISHED,RELATED
should probably read
$LAA $IPTABLES -A $chain -d $net1 $snet2 $proto $rport -i $dev -j LOG \ ${LOG}"-`rulelog $chain`-ACC-MASQ " -m state --state ESTABLISHED,RELATED
Bye, Jürgen
============================================================== Bob Vickers R.Vickers@cs.rhul.ac.uk Dept of Computer Science, Royal Holloway, University of London WWW: http://www.cs.rhul.ac.uk/home/bobv Phone: +44 1784 443691