[Bug 219930] blacklistd do not remove (unblock) ip from ipfw table

[bugzilla-noreply at freebsd.org]

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219930

            Bug ID: 219930
           Summary: blacklistd do not remove (unblock) ip from ipfw table
           Product: Base System
           Version: 11.0-RELEASE
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: bin
          Assignee: freebsd-bugs at FreeBSD.org
          Reporter: freebsd at ihead.ru

1)
cat /etc/blacklistd.conf | grep -v ^#
[local]
ftp             stream  *       *               *       3       1m

[remote]

2) Run blacklistd in console for debug with 1 second checking interval:
blacklistd -v -d -t 1

3) Connect to ftpd and make some invalid auths.

4) The output in console (blacklistd -v -d -t 1):
[local]
              target    type    proto   owner   name    nfail   duration
                  21    6       *       *       *       3       60
[remote]
              source    type    proto   owner   name    nfail   duration
Connected to blacklist server
processing type=1 fd=5 remote=192.168.10.250:59383 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look:   target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge:      target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result:     target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59383: count=0/3 last=1970/01/01
03:00:00 now=2017/06/11 22:36:33
processing type=1 fd=5 remote=192.168.10.250:59415 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look:   target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge:      target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result:     target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59415: count=1/3 last=2017/06/11
22:36:33 now=2017/06/11 22:36:38
processing type=1 fd=5 remote=192.168.10.250:59437 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look:   target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found:  target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge:      target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result:     target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59437: count=2/3 last=2017/06/11
22:36:38 now=2017/06/11 22:36:44
run /usr/libexec/blacklistd-helper [control add blacklistd tcp 192.168.10.250
32 21 ]
add returns (null)

5)
ipfw table port21 list
--- table(port21), set(0) ---
192.168.10.250/32 0

6) Blocked IP-address is not automatically removed from ipfw table port21.

-- 
You are receiving this mail because:
You are the assignee for the bug.