ports/175527: security/expiretable doesn't work in FreeBSD 9.x

Cristiano Deana cris at gufi.org
Wed Jan 23 11:20:01 UTC 2013


>Number:         175527
>Category:       ports
>Synopsis:       security/expiretable doesn't work in FreeBSD 9.x
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jan 23 11:20:00 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator:     Cristiano Deana
>Release:        
>Organization:
>Environment:
>Description:
Due to changes in pf, expiretable doesn't work in FreeBSD 9.x

>How-To-Repeat:
Put some ip address in a table, call it "badhosts", then:

# /usr/local/sbin/expiretable -v -t 3600 badhosts
expiretable: badhosts: Failed to remove address(es).: Invalid argument
badhosts: -1 of 9 entries deleted.


>Fix:
Apply the patch below

Patch attached with submission follows:

diff -ruN expiretable.orig/Makefile expiretable/Makefile
--- expiretable.orig/Makefile	2012-11-17 07:01:03.000000000 +0100
+++ expiretable/Makefile	2013-01-23 12:07:01.000000000 +0100
@@ -7,6 +7,7 @@
 
 PORTNAME=	expiretable
 PORTVERSION=	0.6
+PORTREVISION=	1
 CATEGORIES=	security
 MASTER_SITES=	http://expiretable.fnord.se/
 
diff -ruN expiretable.orig/files/patch-expiretable expiretable/files/patch-expiretable
--- expiretable.orig/files/patch-expiretable	1970-01-01 01:00:00.000000000 +0100
+++ expiretable/files/patch-expiretable	2013-01-23 12:02:36.000000000 +0100
@@ -0,0 +1,10 @@
+--- expiretable.c.orig	2013-01-23 11:56:08.000000000 +0100
++++ expiretable.c	2013-01-23 11:56:26.000000000 +0100
+@@ -290,6 +290,7 @@
+ 			for (i = 0; i < astats_count; i++) {
+ 				if (astats[i].pfras_tzero <= min_timestamp) {
+ 					del_addrs_list[del_addrs_count] = astats[i].pfras_a;
++					del_addrs_list[del_addrs_count].pfra_fback = 0;
+ 					del_addrs_count++;
+ 				}
+ 			}


>Release-Note:
>Audit-Trail:
>Unformatted:


More information about the freebsd-ports-bugs mailing list