+ shift + '[' -z '' ']' + '[' -n '' ']' + g_purge= + g_noroutes= + g_timestamp= + g_recovering= + g_sha1sum1=sha-lh-4a171da2419e102d3502 + g_sha1sum2=sha-rh-eef6256a54271e459bfd + g_counters= + g_compiled= + g_file= + g_docker= + g_dockeringress= + g_dockernetwork= + g_forcereload= + g_fallback= + '[' -n '' ']' + initialize + umask 077 + g_family=4 + g_confdir=/etc/shorewall + g_product=Shorewall + g_program=shorewall + g_basedir=/usr/share/shorewall + CONFIG_PATH=:/etc/shorewall:/usr/share/shorewall + '[' -f /etc/shorewall/vardir ']' + '[' -n /var/lib/shorewall ']' + '[' -n /var/lib ']' + '[' -n /etc ']' + '[' -n /usr/share ']' + TEMPFILE= + DISABLE_IPV6=Yes + MODULESDIR= + LOAD_HELPERS_ONLY=Yes + LOCKFILE= + SUBSYSLOCK=/run/lock/shorewall + LOG_VERBOSITY=2 + RESTART=restart + '[' -n reload ']' + '[' -n 0 ']' + '[' -n restore ']' + SHOREWALL_VERSION=5.2.1.4 + PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin + TERMINATOR=fatal_error + DONT_LOAD= + STARTUP_LOG=/var/log/shorewall-init.log + '[' -z '' ']' ++ mywhich iptables ++ local dir +++ split /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin:/usr/local/sbin +++ local ifs +++ ifs=' ' +++ IFS=: +++ echo /sbin /bin /usr/sbin /usr/bin /usr/local/bin /usr/local/sbin +++ IFS=' ' ++ for dir in $(split $PATH) ++ '[' -x /sbin/iptables ']' ++ echo /sbin/iptables ++ return 0 + IPTABLES=/sbin/iptables + '[' -n /sbin/iptables -a -x /sbin/iptables ']' + case $IPTABLES in + IP6TABLES=/sbin/ip6tables + IPTABLES_RESTORE=/sbin/iptables-restore + '[' -x /sbin/iptables-restore ']' + g_tool=/sbin/iptables + g_tool='/sbin/iptables --wait' + IP=ip + TC=tc + IPSET=ipset + FW_NET=220.233.164.62/32 + LOC_NET=192.168.1.0/24 + g_stopping= + '[' -d /var/lib/shorewall ']' + '[' -n /var/log/shorewall-init.log ']' + touch /var/log/shorewall-init.log + chmod 0600 /var/log/shorewall-init.log + '[' 0 -eq 1 ']' + finished=0 + '[' 0 -eq 0 -a 5 -gt 0 ']' + option=-V + case $option in + option=V + '[' -z V ']' + '[' -n V ']' + case $option in + option= + '[' -z '' -a 5 -gt 0 ']' + shift + option=1 + '[' -n 1 ']' + case $option in + VERBOSITY=1 + option= + '[' -n '' ']' + shift + '[' 0 -eq 0 -a 3 -gt 0 ']' + option=-R + case $option in + option=R + '[' -z R ']' + '[' -n R ']' + case $option in + option= + '[' -z '' -a 3 -gt 0 ']' + shift + option=restore + '[' -n restore ']' + case $option in + RESTOREFILE=restore + option= + '[' -n '' ']' + shift + '[' 0 -eq 0 -a 1 -gt 0 ']' + option=start + case $option in + finished=1 + '[' 1 -eq 0 -a 1 -gt 0 ']' + COMMAND=start + case "$COMMAND" in + '[' 1 -ne 1 ']' + start_command + product_is_started + qt1 /sbin/iptables --wait -L shorewall -n + local status + '[' 1 ']' + /sbin/iptables --wait -L shorewall -n + status=1 + '[' 1 -ne 4 ']' + return 1 + progress_message3 'Starting Shorewall....' + local timestamp + timestamp= + '[' 1 -ge 0 ']' + '[' -n '' ']' + echo 'Starting Shorewall....' Starting Shorewall.... + '[' 2 -ge 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Starting Shorewall....' + detect_configuration + local interface + interface= + case $COMMAND in + local waittime + case "$COMMAND" in + interface_is_usable ppp0 + local status + status=0 + loopback_interface ppp0 + '[' ppp0 = lo ']' + ip link show ppp0 + fgrep -q LOOPBACK + interface_is_up ppp0 ++ ip -4 link list dev ppp0 ++ grep -e '[<,]UP[,>]' + '[' -n '5: ppp0: mtu 1492 qdisc pfifo_fast state UNKNOWN mode DEFAULT group default qlen 3' ']' ++ find_first_interface_address_if_any ppp0 ++ '[' 4 -eq 4 ']' +++ ip -f inet addr show ppp0 +++ grep 'inet .* global' +++ head -n1 ++ addr=' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ++ '[' -n ' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ']' ++ echo inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0 ++ sed 's/\s*inet //;s/\/.*//;s/ peer.*//' + '[' 220.233.164.62 '!=' 0.0.0.0 ']' ++ ip -4 link list dev ppp0 ++ fgrep 'state DOWN' + '[' -z '' ']' + '[' start '!=' enable ']' + '[' '!' -f /var/lib/shorewall/ppp0_disabled ']' + run_isusable_exit ppp0 + true + status=0 + return 0 + '[' -z '' -o '' = ppp0 ']' ++ find_first_interface_address_if_any ppp0 ++ '[' 4 -eq 4 ']' +++ ip -f inet addr show ppp0 +++ grep 'inet .* global' +++ head -n1 ++ addr=' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ++ '[' -n ' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ']' ++ echo inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0 ++ sed 's/\s*inet //;s/\/.*//;s/ peer.*//' + SW_PPP0_ADDRESS=220.233.164.62 ++ get_all_bcasts ++ ip -f inet addr show ++ grep 'inet.*brd' ++ grep -v '/32 ' ++ sed 's/inet.*brd //; s/scope.*//;' ++ sort -u + ALL_BCASTS=' 127.255.255.255 192.168.1.255 255.255.255.255' + SW_PPP0_IS_USABLE= + '[' -z '' -o '' = ppp0 ']' + interface_is_usable ppp0 + local status + status=0 + loopback_interface ppp0 + '[' ppp0 = lo ']' + ip link show ppp0 + fgrep -q LOOPBACK + interface_is_up ppp0 ++ ip -4 link list dev ppp0 ++ grep -e '[<,]UP[,>]' + '[' -n '5: ppp0: mtu 1492 qdisc pfifo_fast state UNKNOWN mode DEFAULT group default qlen 3' ']' ++ find_first_interface_address_if_any ppp0 ++ '[' 4 -eq 4 ']' +++ ip -f inet addr show ppp0 +++ grep 'inet .* global' +++ head -n1 ++ addr=' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ++ '[' -n ' inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0' ']' ++ echo inet 220.233.164.62 peer 220.233.1.3/32 scope global ppp0 ++ sed 's/\s*inet //;s/\/.*//;s/ peer.*//' + '[' 220.233.164.62 '!=' 0.0.0.0 ']' ++ ip -4 link list dev ppp0 ++ fgrep 'state DOWN' + '[' -z '' ']' + '[' start '!=' enable ']' + '[' '!' -f /var/lib/shorewall/ppp0_disabled ']' + run_isusable_exit ppp0 + true + status=0 + return 0 + SW_PPP0_IS_USABLE=Yes + '[' -f /var/lib/shorewall/ppp0.address ']' + define_firewall + local options + progress_message2 Initializing... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Initializing... Initializing... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Initializing...' + echo 'MODULESDIR=""' + cat + reload_kernel_modules + local save_modules_dir + save_modules_dir= + local directory + local moduledirectories + moduledirectories= + local moduleloader + moduleloader=modprobe + local uname + local extras + qt mywhich modprobe + mywhich modprobe + '[' -n '' ']' + '[' -z '' ']' ++ uname -r + uname=4.19.8-gentoo + MODULESDIR=/lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter:/lib/modules/4.19.8-gentoo/kernel/net/netfilter:/lib/modules/4.19.8-gentoo/kernel/net/sched:/lib/modules/4.19.8-gentoo/extra:/lib/modules/4.19.8-gentoo/extra/ipset + '[' -n '' ']' + '[' -d /sys/module/ ']' ++ split /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter:/lib/modules/4.19.8-gentoo/kernel/net/netfilter:/lib/modules/4.19.8-gentoo/kernel/net/sched:/lib/modules/4.19.8-gentoo/extra:/lib/modules/4.19.8-gentoo/extra/ipset ++ local ifs ++ ifs=' ' ++ IFS=: ++ echo /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter /lib/modules/4.19.8-gentoo/kernel/net/netfilter /lib/modules/4.19.8-gentoo/kernel/net/sched /lib/modules/4.19.8-gentoo/extra /lib/modules/4.19.8-gentoo/extra/ipset ++ IFS=' ' + for directory in $(split $MODULESDIR) + '[' -d /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter ']' + moduledirectories=' /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter' + for directory in $(split $MODULESDIR) + '[' -d /lib/modules/4.19.8-gentoo/kernel/net/netfilter ']' + moduledirectories=' /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter /lib/modules/4.19.8-gentoo/kernel/net/netfilter' + for directory in $(split $MODULESDIR) + '[' -d /lib/modules/4.19.8-gentoo/kernel/net/sched ']' + moduledirectories=' /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter /lib/modules/4.19.8-gentoo/kernel/net/netfilter /lib/modules/4.19.8-gentoo/kernel/net/sched' + for directory in $(split $MODULESDIR) + '[' -d /lib/modules/4.19.8-gentoo/extra ']' + for directory in $(split $MODULESDIR) + '[' -d /lib/modules/4.19.8-gentoo/extra/ipset ']' + '[' -n ' /lib/modules/4.19.8-gentoo/kernel/net/ipv4/netfilter /lib/modules/4.19.8-gentoo/kernel/net/netfilter /lib/modules/4.19.8-gentoo/kernel/net/sched' ']' + read command + eval loadmodule ip_conntrack_amanda ++ loadmodule ip_conntrack_amanda ++ local modulename ++ modulename=ip_conntrack_amanda ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_amanda ++ local e ++ e=ip_conntrack_amanda ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_amanda ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_amanda + read command + eval loadmodule ip_conntrack_ftp ++ loadmodule ip_conntrack_ftp ++ local modulename ++ modulename=ip_conntrack_ftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_ftp ++ local e ++ e=ip_conntrack_ftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_ftp ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_ftp + read command + eval loadmodule ip_conntrack_h323 ++ loadmodule ip_conntrack_h323 ++ local modulename ++ modulename=ip_conntrack_h323 ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_h323 ++ local e ++ e=ip_conntrack_h323 ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_h323 ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_h323 + read command + eval loadmodule ip_conntrack_irc ++ loadmodule ip_conntrack_irc ++ local modulename ++ modulename=ip_conntrack_irc ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_irc ++ local e ++ e=ip_conntrack_irc ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_irc ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_irc + read command + eval loadmodule ip_conntrack_netbios_ns ++ loadmodule ip_conntrack_netbios_ns ++ local modulename ++ modulename=ip_conntrack_netbios_ns ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_netbios_ns ++ local e ++ e=ip_conntrack_netbios_ns ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_netbios_ns ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_netbios_ns + read command + eval loadmodule ip_conntrack_pptp ++ loadmodule ip_conntrack_pptp ++ local modulename ++ modulename=ip_conntrack_pptp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_pptp ++ local e ++ e=ip_conntrack_pptp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_pptp ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_pptp + read command + eval loadmodule ip_conntrack_sip ++ loadmodule ip_conntrack_sip ++ local modulename ++ modulename=ip_conntrack_sip ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_sip ++ local e ++ e=ip_conntrack_sip ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_sip ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_sip + read command + eval loadmodule ip_conntrack_tftp ++ loadmodule ip_conntrack_tftp ++ local modulename ++ modulename=ip_conntrack_tftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_conntrack_tftp ++ local e ++ e=ip_conntrack_tftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_conntrack_tftp ']' ++ case $moduleloader in ++ modprobe -q ip_conntrack_tftp + read command + eval loadmodule ip_nat_amanda ++ loadmodule ip_nat_amanda ++ local modulename ++ modulename=ip_nat_amanda ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_amanda ++ local e ++ e=ip_nat_amanda ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_amanda ']' ++ case $moduleloader in ++ modprobe -q ip_nat_amanda + read command + eval loadmodule ip_nat_ftp ++ loadmodule ip_nat_ftp ++ local modulename ++ modulename=ip_nat_ftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_ftp ++ local e ++ e=ip_nat_ftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_ftp ']' ++ case $moduleloader in ++ modprobe -q ip_nat_ftp + read command + eval loadmodule ip_nat_h323 ++ loadmodule ip_nat_h323 ++ local modulename ++ modulename=ip_nat_h323 ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_h323 ++ local e ++ e=ip_nat_h323 ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_h323 ']' ++ case $moduleloader in ++ modprobe -q ip_nat_h323 + read command + eval loadmodule ip_nat_irc ++ loadmodule ip_nat_irc ++ local modulename ++ modulename=ip_nat_irc ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_irc ++ local e ++ e=ip_nat_irc ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_irc ']' ++ case $moduleloader in ++ modprobe -q ip_nat_irc + read command + eval loadmodule ip_nat_pptp ++ loadmodule ip_nat_pptp ++ local modulename ++ modulename=ip_nat_pptp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_pptp ++ local e ++ e=ip_nat_pptp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_pptp ']' ++ case $moduleloader in ++ modprobe -q ip_nat_pptp + read command + eval loadmodule ip_nat_sip ++ loadmodule ip_nat_sip ++ local modulename ++ modulename=ip_nat_sip ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_sip ++ local e ++ e=ip_nat_sip ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_sip ']' ++ case $moduleloader in ++ modprobe -q ip_nat_sip + read command + eval loadmodule ip_nat_snmp_basic ++ loadmodule ip_nat_snmp_basic ++ local modulename ++ modulename=ip_nat_snmp_basic ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_snmp_basic ++ local e ++ e=ip_nat_snmp_basic ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_snmp_basic ']' ++ case $moduleloader in ++ modprobe -q ip_nat_snmp_basic + read command + eval loadmodule ip_nat_tftp ++ loadmodule ip_nat_tftp ++ local modulename ++ modulename=ip_nat_tftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ip_nat_tftp ++ local e ++ e=ip_nat_tftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ip_nat_tftp ']' ++ case $moduleloader in ++ modprobe -q ip_nat_tftp + read command + eval loadmodule nf_conntrack_ftp ++ loadmodule nf_conntrack_ftp ++ local modulename ++ modulename=nf_conntrack_ftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_ftp ++ local e ++ e=nf_conntrack_ftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_ftp ']' + read command + eval loadmodule nf_conntrack_h323 ++ loadmodule nf_conntrack_h323 ++ local modulename ++ modulename=nf_conntrack_h323 ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_h323 ++ local e ++ e=nf_conntrack_h323 ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_h323 ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_h323 + read command + eval loadmodule nf_conntrack_irc ++ loadmodule nf_conntrack_irc ++ local modulename ++ modulename=nf_conntrack_irc ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_irc ++ local e ++ e=nf_conntrack_irc ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_irc ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_irc + read command + eval loadmodule nf_conntrack_netbios_ns ++ loadmodule nf_conntrack_netbios_ns ++ local modulename ++ modulename=nf_conntrack_netbios_ns ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_netbios_ns ++ local e ++ e=nf_conntrack_netbios_ns ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_netbios_ns ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_netbios_ns + read command + eval loadmodule nf_conntrack_netlink ++ loadmodule nf_conntrack_netlink ++ local modulename ++ modulename=nf_conntrack_netlink ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_netlink ++ local e ++ e=nf_conntrack_netlink ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_netlink ']' + read command + eval loadmodule nf_conntrack_pptp ++ loadmodule nf_conntrack_pptp ++ local modulename ++ modulename=nf_conntrack_pptp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_pptp ++ local e ++ e=nf_conntrack_pptp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_pptp ']' + read command + eval loadmodule nf_conntrack_proto_gre ++ loadmodule nf_conntrack_proto_gre ++ local modulename ++ modulename=nf_conntrack_proto_gre ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_proto_gre ++ local e ++ e=nf_conntrack_proto_gre ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_proto_gre ']' + read command + eval loadmodule nf_conntrack_proto_sctp ++ loadmodule nf_conntrack_proto_sctp ++ local modulename ++ modulename=nf_conntrack_proto_sctp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_proto_sctp ++ local e ++ e=nf_conntrack_proto_sctp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_proto_sctp ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_proto_sctp + read command + eval loadmodule nf_conntrack_proto_udplite ++ loadmodule nf_conntrack_proto_udplite ++ local modulename ++ modulename=nf_conntrack_proto_udplite ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_proto_udplite ++ local e ++ e=nf_conntrack_proto_udplite ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_proto_udplite ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_proto_udplite + read command + eval loadmodule nf_conntrack_sip sip_direct_media=0 ++ loadmodule nf_conntrack_sip sip_direct_media=0 ++ local modulename ++ modulename=nf_conntrack_sip ++ shift ++ local moduleoptions ++ moduleoptions=sip_direct_media=0 ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_sip ++ local e ++ e=nf_conntrack_sip ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_sip ']' + read command + eval loadmodule nf_conntrack_tftp ++ loadmodule nf_conntrack_tftp ++ local modulename ++ modulename=nf_conntrack_tftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_tftp ++ local e ++ e=nf_conntrack_tftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_tftp ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_tftp + read command + eval loadmodule nf_conntrack_sane ++ loadmodule nf_conntrack_sane ++ local modulename ++ modulename=nf_conntrack_sane ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_conntrack_sane ++ local e ++ e=nf_conntrack_sane ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_conntrack_sane ']' ++ case $moduleloader in ++ modprobe -q nf_conntrack_sane + read command + eval loadmodule nf_nat_amanda ++ loadmodule nf_nat_amanda ++ local modulename ++ modulename=nf_nat_amanda ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_amanda ++ local e ++ e=nf_nat_amanda ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_amanda ']' ++ case $moduleloader in ++ modprobe -q nf_nat_amanda + read command + eval loadmodule nf_nat_ftp ++ loadmodule nf_nat_ftp ++ local modulename ++ modulename=nf_nat_ftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_ftp ++ local e ++ e=nf_nat_ftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_ftp ']' + read command + eval loadmodule nf_nat_h323 ++ loadmodule nf_nat_h323 ++ local modulename ++ modulename=nf_nat_h323 ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_h323 ++ local e ++ e=nf_nat_h323 ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_h323 ']' ++ case $moduleloader in ++ modprobe -q nf_nat_h323 + read command + eval loadmodule nf_nat_irc ++ loadmodule nf_nat_irc ++ local modulename ++ modulename=nf_nat_irc ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_irc ++ local e ++ e=nf_nat_irc ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_irc ']' ++ case $moduleloader in ++ modprobe -q nf_nat_irc + read command + eval loadmodule nf_nat ++ loadmodule nf_nat ++ local modulename ++ modulename=nf_nat ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat ++ local e ++ e=nf_nat ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat ']' + read command + eval loadmodule nf_nat_pptp ++ loadmodule nf_nat_pptp ++ local modulename ++ modulename=nf_nat_pptp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_pptp ++ local e ++ e=nf_nat_pptp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_pptp ']' + read command + eval loadmodule nf_nat_proto_gre ++ loadmodule nf_nat_proto_gre ++ local modulename ++ modulename=nf_nat_proto_gre ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_proto_gre ++ local e ++ e=nf_nat_proto_gre ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_proto_gre ']' + read command + eval loadmodule nf_nat_sip ++ loadmodule nf_nat_sip ++ local modulename ++ modulename=nf_nat_sip ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_sip ++ local e ++ e=nf_nat_sip ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_sip ']' + read command + eval loadmodule nf_nat_snmp_basic ++ loadmodule nf_nat_snmp_basic ++ local modulename ++ modulename=nf_nat_snmp_basic ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_snmp_basic ++ local e ++ e=nf_nat_snmp_basic ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_snmp_basic ']' ++ case $moduleloader in ++ modprobe -q nf_nat_snmp_basic + read command + eval loadmodule nf_nat_tftp ++ loadmodule nf_nat_tftp ++ local modulename ++ modulename=nf_nat_tftp ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_nat_tftp ++ local e ++ e=nf_nat_tftp ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_nat_tftp ']' ++ case $moduleloader in ++ modprobe -q nf_nat_tftp + read command + eval loadmodule ipt_LOG ++ loadmodule ipt_LOG ++ local modulename ++ modulename=ipt_LOG ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search ipt_LOG ++ local e ++ e=ipt_LOG ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/ipt_LOG ']' ++ case $moduleloader in ++ modprobe -q ipt_LOG + read command + eval loadmodule nf_log_ipv4 ++ loadmodule nf_log_ipv4 ++ local modulename ++ modulename=nf_log_ipv4 ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nf_log_ipv4 ++ local e ++ e=nf_log_ipv4 ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nf_log_ipv4 ']' + read command + eval loadmodule xt_LOG ++ loadmodule xt_LOG ++ local modulename ++ modulename=xt_LOG ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search xt_LOG ++ local e ++ e=xt_LOG ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/xt_LOG ']' + read command + eval loadmodule xt_NFLOG ++ loadmodule xt_NFLOG ++ local modulename ++ modulename=xt_NFLOG ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search xt_NFLOG ++ local e ++ e=xt_NFLOG ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/xt_NFLOG ']' + read command + eval loadmodule nfnetlink_log ++ loadmodule nfnetlink_log ++ local modulename ++ modulename=nfnetlink_log ++ shift ++ local moduleoptions ++ moduleoptions= ++ local modulefile ++ local suffix ++ '[' -d /sys/module/ ']' ++ list_search nfnetlink_log ++ local e ++ e=nfnetlink_log ++ '[' 1 -gt 1 ']' ++ return 1 ++ '[' '!' -d /sys/module/nfnetlink_log ']' + read command + MODULESDIR= + run_init_exit + progress_message2 Processing /etc/shorewall/init ... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Processing /etc/shorewall/init ... Processing /etc/shorewall/init ... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Processing' /etc/shorewall/init ... + load_ipsets + true + '[' start = reload ']' + rm -f /var/lib/shorewall/.UPnP + rm -f /var/lib/shorewall/.forwardUPnP + qt1 /sbin/iptables -L shorewall -n + local status + '[' 1 ']' + /sbin/iptables -L shorewall -n + status=1 + '[' 1 -ne 4 ']' + return 1 + delete_proxyarp + '[' -f /var/lib/shorewall/proxyarp ']' + '[' -f /var/lib/shorewall/nat ']' + disable_ipv6 + local temp ++ ip -f inet6 addr list + temp= + '[' -n '' ']' + delete_tc1 + run_tcclear_exit + progress_message2 Processing /etc/shorewall/tcclear ... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Processing /etc/shorewall/tcclear ... Processing /etc/shorewall/tcclear ... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Processing' /etc/shorewall/tcclear ... + run_ip link list + ip -4 link list + read inx interface details + case $inx in + clear_one_tc lo + tc qdisc del dev lo root + tc qdisc del dev lo ingress + read inx interface details + case $inx in + read inx interface details + case $inx in + clear_one_tc net1 + tc qdisc del dev net1 root + tc qdisc del dev net1 ingress + read inx interface details + case $inx in + read inx interface details + case $inx in + clear_one_tc net0 + tc qdisc del dev net0 root + tc qdisc del dev net0 ingress + read inx interface details + case $inx in + read inx interface details + case $inx in + clear_one_tc ifb0 + tc qdisc del dev ifb0 root + tc qdisc del dev ifb0 ingress + read inx interface details + case $inx in + read inx interface details + case $inx in + clear_one_tc ppp0 + tc qdisc del dev ppp0 root + tc qdisc del dev ppp0 ingress + read inx interface details + case $inx in + read inx interface details + setup_common_rules + progress_message2 Setting up Route Filtering... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Setting up Route Filtering... Setting up Route Filtering... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Setting' up Route Filtering... + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/all/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/default/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/ifb0/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/lo/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/net0/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/net1/rp_filter ']' + echo 0 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/ppp0/rp_filter ']' + echo 0 + '[' -f /proc/sys/net/ipv4/conf/net1/rp_filter ']' + echo 1 + '[' -f /proc/sys/net/ipv4/conf/ppp0/rp_filter ']' + echo 1 + echo 0 + echo 0 + '[' -n '' ']' + ip -4 route flush cache + progress_message2 Setting up Martian Logging... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Setting up Martian Logging... Setting up Martian Logging... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Setting' up Martian Logging... + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/all/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/default/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/ifb0/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/lo/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/net0/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/net1/log_martians ']' + echo 1 + for file in /proc/sys/net/ipv4/conf/* + '[' -f /proc/sys/net/ipv4/conf/ppp0/log_martians ']' + echo 1 + echo 0 + '[' -f /proc/sys/net/ipv4/conf/net1/log_martians ']' + echo 1 + '[' -f /proc/sys/net/ipv4/conf/ppp0/log_martians ']' + echo 1 + progress_message2 Setting up Accept Source Routing... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Setting up Accept Source Routing... Setting up Accept Source Routing... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Setting' up Accept Source Routing... + '[' -f /proc/sys/net/ipv4/conf/ppp0/accept_source_route ']' + echo 0 + progress_message2 Setting up Proxy ARP... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Setting up Proxy ARP... Setting up Proxy ARP... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Setting' up Proxy ARP... + '[' -f /proc/sys/net/netfilter/nf_conntrack_helper ']' + progress_message 'Disabling Kernel Automatic Helper Association' + local timestamp + timestamp= + '[' 1 -gt 1 ']' + '[' 2 -gt 1 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Disabling Kernel Automatic Helper Association' + echo 0 + return 0 + setup_routing_and_traffic_shaping + '[' -z '' ']' + undo_routing + local undofiles + local f + '[' -z '' ']' + '[' -f /var/lib/shorewall/rt_tables ']' ++ ls '/var/lib/shorewall/undo_*routing' + undofiles= + '[' -n '' ']' + restore_default_route Yes + local result + result=1 + '[' -z '' -a -f /var/lib/shorewall/default_route ']' + return 1 + start_interface_ppp0 + '[' -n Yes ']' + cat + '[' start = enable ']' + echo 0 + '[' start = enable ']' + cat + cat + cat + cat + '[' start = restore ']' + setup_netfilter + local option + '[' start = reload -a -n '' ']' + option= + progress_message2 Preparing iptables-restore input... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Preparing iptables-restore input... Preparing iptables-restore input... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Preparing' iptables-restore input... + exec + cat + '[' 220.233.164.62 '!=' 0.0.0.0 ']' + echo '-A ppp0_masq -s 192.168.1.0/24 -j SNAT --to-source 220.233.164.62' + cat + for address in $ALL_BCASTS + echo '-A Broadcast -d 127.255.255.255 -j DROP' + for address in $ALL_BCASTS + echo '-A Broadcast -d 192.168.1.255 -j DROP' + for address in $ALL_BCASTS + echo '-A Broadcast -d 255.255.255.255 -j DROP' + cat + '[' -f /var/lib/shorewall/.dynamic ']' + cat /var/lib/shorewall/.dynamic + cat + for address in $ALL_BCASTS + echo '-A reject -d 127.255.255.255 -j DROP' + for address in $ALL_BCASTS + echo '-A reject -d 192.168.1.255 -j DROP' + for address in $ALL_BCASTS + echo '-A reject -d 255.255.255.255 -j DROP' + cat + for address in $ALL_BCASTS + echo '-A smurfs -s 127.255.255.255 -g smurflog' + for address in $ALL_BCASTS + echo '-A smurfs -s 192.168.1.255 -g smurflog' + for address in $ALL_BCASTS + echo '-A smurfs -s 255.255.255.255 -g smurflog' + cat + exec + '[' -n '' ']' + command='/sbin/iptables-restore ' + progress_message2 'Running /sbin/iptables-restore ...' + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo 'Running /sbin/iptables-restore ...' Running /sbin/iptables-restore ... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Running /sbin/iptables-restore ...' + cat /var/lib/shorewall/.iptables-restore-input + /sbin/iptables-restore + '[' 0 '!=' 0 ']' + conditionally_flush_conntrack + '[' -n '' ']' + echo 1 + progress_message2 IPv4 Forwarding Enabled + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo IPv4 Forwarding Enabled IPv4 Forwarding Enabled + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 IPv4' Forwarding Enabled + run_start_exit + progress_message2 Processing /etc/shorewall/start ... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Processing /etc/shorewall/start ... Processing /etc/shorewall/start ... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Processing' /etc/shorewall/start ... + return 0 + do_iptables -N shorewall + local status + '[' 1 ']' + /sbin/iptables --wait -N shorewall + status=0 + '[' 0 -ne 4 ']' + return 0 + do_iptables -A shorewall -m recent --set --name %CURRENTTIME + local status + '[' 1 ']' + /sbin/iptables --wait -A shorewall -m recent --set --name %CURRENTTIME + status=0 + '[' 0 -ne 4 ']' + return 0 + set_state Started /etc/shorewall/ + '[' 2 -gt 1 ']' ++ date + echo 'Started Sat Jan 12 09:59:16 AEDT 2019 from /etc/shorewall/' ++ my_pathname ++ local pwd ++ pwd=/etc/shorewall +++ dirname /var/lib/shorewall/firewall ++ cd /var/lib/shorewall +++ basename /var/lib/shorewall/firewall ++ echo /var/lib/shorewall/firewall ++ cd /etc/shorewall + my_pathname=/var/lib/shorewall/firewall + '[' /var/lib/shorewall/firewall = /var/lib/shorewall/firewall ']' + run_started_exit + progress_message2 Processing /etc/shorewall/started ... + local timestamp + timestamp= + '[' 1 -gt 0 ']' + '[' -n '' ']' + echo Processing /etc/shorewall/started ... Processing /etc/shorewall/started ... + '[' 2 -gt 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 Processing' /etc/shorewall/started ... + date + case $COMMAND in + mylogger kern.info 'Shorewall started' + local level + level=kern.info + shift + '[' -n '' ']' + logger -p kern.info Shorewall started + status=0 + '[' 0 -eq 0 ']' + '[' -n /run/lock/shorewall ']' + touch /run/lock/shorewall + progress_message3 done. + local timestamp + timestamp= + '[' 1 -ge 0 ']' + '[' -n '' ']' + echo done. done. + '[' 2 -ge 0 ']' ++ date '+%b %e %T' + timestamp='Jan 12 09:59:16 ' + echo 'Jan 12 09:59:16 done.' + return 0 + exit 0