Subject: [alpine-devel] Shorewall in 3.0.4

From: Nicolas <[email-masked]>
Date: Tue, 02 Sep 2014 21:07:19 +0200

Hello everyone,

I'm planning to migrate some firewall machines running AlpineLinux 2.7 
to AlpineLinux 3.0.4

Maybe I make a mistake but

On alpine 2.7 I have :

apk search shorewall -==>

shorewall-core-4.5.21.3-r0
shorewall-common-4.2.11-r3
shorewall-shell-4.2.11-r6
shorewall6-4.5.21.3-r0
shorewall6-doc-4.5.21.3-r0
shorewall-4.5.21.3-r0
acf-shorewall-0.10.0-r0
shorewall-common-doc-4.2.11-r3
shorewall-doc-4.5.21.3-r0

On the fresh 3.0.4 I got this only :

shorewall-common-4.2.11-r3
shorewall-shell-4.2.11-r6
acf-shorewall-0.11.0-r0
shorewall-common-doc-4.2.11-r3

Both boxes have the same /etc/apk/repositories configuration (just 
version number changes in the mirror).
Is it normal or aren't the working 4.5 shorewall not yet in stable 
alpine 3.0.4 ?

Thanks in advance and kind regards to all for the great job.

Nicolas.

---
Unsubscribe:  [email-masked]
Help:         [email-masked]
---

---

From: Natanael Copa <[email-masked]>
Date: Wed, 3 Sep 2014 08:13:36 +0200

On Tue, 02 Sep 2014 21:07:19 +0200

> Is it normal or aren't the working 4.5 shorewall not yet in stable 

Latest shorewall does not build:
http://bugs.alpinelinux.org/issues/2981

IIRC they have a static whitelist of known distros in configure script
and Alpine is not one those.

I believe it is easy to fix.

> Thanks in advance and kind regards to all for the great job.

-nc

---

---

From: Nicolas <[email-masked]>
Date: Wed, 03 Sep 2014 15:03:48 +0200

> I believe it is easy to fix.

Hi Natanel,

As you advised i had a look in the configure script of a shorewall 
4.6.3.
First the script depends bash but that's not a problem for building.

The script tries to recognize the OS version based at begining on the ID 
variable in /etc/os-release.
As you know (better than me) this is 'alpine' for an alpine.
Then it fails because it doesnt find a shorewallrc.alpine file.

If we consider alpine is like a generic linux a workaround is

ln -s shorewallrc.default shorewallrc.alpine

In the base directory of extracted shorewall.

The the configure passes. Maybe we could use a more specific rc file 
based on debian or other.

Regards.

Nicolas.

---

---

From: Natanael Copa <[email-masked]>
Date: Thu, 4 Sep 2014 11:41:45 +0200

On Wed, 03 Sep 2014 15:03:48 +0200

> based on debian or other.

I pushed it to edge/main with a custom shorewallrc.alpine.

Could you please do basic testing in edge and verify that it is not
totally non-functional. Then I can add it to the 3.0-stable.

Thanks!

-nc

---

---

From: Nicolas <[email-masked]>
Date: Thu, 04 Sep 2014 14:01:49 +0200

> totally non-functional. Then I can add it to the 3.0-stable.

I made test on a fresh out-of-box Alpine 3.0.4.
Shorewall 4.6.3 installs with dependencies (perl, iproute2).

I made a basic configuration
Command works. rc-service shorewall commands work fine.
rc-update add shorewall too
After a lbu commit and reboot shorewall is ok with my rules.

I believe this is quite a good news !

If you could add shorewall6 too it would be nice.

Regards,

---

---

From: Natanael Copa <[email-masked]>
Date: Thu, 4 Sep 2014 15:26:51 +0200

On Thu, 04 Sep 2014 14:01:49 +0200
 
> I believe this is quite a good news !

Nice!

I have pushed shorewall and shorewall6 to 3.0-stable.

Thank you very much for help with testing!

-nc

---

---

From: n22e113 <[email-masked]>
Date: Mon, 01 Dec 2014 17:27:32 -0500

> Thank you very much for help with testing!
Hi, Many thanks for a great software.
'apk add shorewall' then 'apk add acf-shorewall' resulted in many error messages and acf-shorewall tries to overwrite shorewall-4.6.3.2-r0.
Cheers!

---

---

From: Natanael Copa <[email-masked]>
Date: Tue, 2 Dec 2014 08:31:47 +0100

On Mon, 01 Dec 2014 17:27:32 -0500

> 'apk add shorewall' then 'apk add acf-shorewall' resulted in many error messages and acf-shorewall tries to overwrite shorewall-4.6.3.2-r0.

acf-shorewall is still using the old shell implementation of shorewall
(shorewall-shell). It has not been ported to shorewall perl yet.

apk del shorewall
apk add acf-shorewall

should pull in the proper deps.

That said, support for shorewall-shell is completely dropped in v3.1 so
it might be an idea to test acf-shorewall for v3.1 to find out what
needs to be fixed. (but i doubt anyone care...)

-nc

---

---

From: Ted Trask <[email-masked]>
Date: Tue, 2 Dec 2014 13:37:25 +0000 (UTC)

I vote for removing acf-shorewall from the 3.1 release. I do not have intentions of making it work with shorewall (instead of with shorewall-shell). I would recommend people switch to awall and acf-awall.
Ted
      From: Natanael Copa <[email-masked]>
 To: n22e113 <[email-masked]> 
Cc: [email-masked] 
 Sent: Tuesday, December 2, 2014 2:31 AM
 Subject: Re: [alpine-devel] Re: Shorewall in 3.0.4 & v3.0.6-17-g111133a

apk del shorewall
apk add acf-shorewall

-nc

---

---

From: n22e113 <[email-masked]>
Date: Tue, 02 Dec 2014 10:51:43 -0500

> I vote for removing acf-shorewall from the 3.1 release. I do not have intentions of making it work with shorewall (instead of with shorewall-shell). I would recommend people switch to awall and acf…
Form: http://wiki.alpinelinux.org/wiki/How-To_Alpine_Wall
Quote: "This material is work-in-progress ...
Do not follow instructions here until this notice is removed.
(Last edited by Larena on 17 Sep 2014.)"
Q. Any reliable docs for newbies?

---

---

From: Ted Trask <[email-masked]>
Date: Tue, 2 Dec 2014 18:32:38 +0000 (UTC)

I think that document is good to go. Not sure why that note is still there.
Ted
      From: n22e113 <[email-masked]>
 To: [email-masked] 
 Sent: Tuesday, December 2, 2014 10:51 AM
 Subject: [alpine-devel] Re: Shorewall in 3.0.4 & v3.0.6-17-g111133a

---