Ignore default route when detecting masq networks; refuse to start with ipchains module loaded

git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@497 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb

Shorewall/firewall

@@ -2700,8 +2700,12 @@ get_routed_subnets() # $1 = interface name
 
     ip route show dev $1 2> /dev/null |
 	while read address rest; do
-	    [ "$address" = "${address%/*}" ] && address="${address}/32"
+	    if [ "x$address" = xdefault ]; then
-	    echo $address
+		error_message "Warning: default route ignored on interface $1"
+	    else
+		[ "$address" = "${address%/*}" ] && address="${address}/32"
+		echo $address
+	    fi
         done
 }
 
@@ -3010,6 +3014,9 @@ verify_os_version() {
 	startup_error "Shorewall version $version does not work with kernel version $osversion"
 	;;
     esac
+
+    [ -n "`lsmod 2> /dev/null | grep '^ipchains'`" ] && \
+	startup_error "Shorewall can't start with the ipchains kernel module loaded - see FAQ #8"
 }
 
 #