ports/175527: security/expiretable doesn't work in FreeBSD 9.x
Cristiano Deana
cris at gufi.org
Wed Jan 23 11:20:01 UTC 2013
>Number: 175527
>Category: ports
>Synopsis: security/expiretable doesn't work in FreeBSD 9.x
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: maintainer-update
>Submitter-Id: current-users
>Arrival-Date: Wed Jan 23 11:20:00 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator: Cristiano Deana
>Release:
>Organization:
>Environment:
>Description:
Due to changes in pf, expiretable doesn't work in FreeBSD 9.x
>How-To-Repeat:
Put some ip address in a table, call it "badhosts", then:
# /usr/local/sbin/expiretable -v -t 3600 badhosts
expiretable: badhosts: Failed to remove address(es).: Invalid argument
badhosts: -1 of 9 entries deleted.
>Fix:
Apply the patch below
Patch attached with submission follows:
diff -ruN expiretable.orig/Makefile expiretable/Makefile
--- expiretable.orig/Makefile 2012-11-17 07:01:03.000000000 +0100
+++ expiretable/Makefile 2013-01-23 12:07:01.000000000 +0100
@@ -7,6 +7,7 @@
PORTNAME= expiretable
PORTVERSION= 0.6
+PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= http://expiretable.fnord.se/
diff -ruN expiretable.orig/files/patch-expiretable expiretable/files/patch-expiretable
--- expiretable.orig/files/patch-expiretable 1970-01-01 01:00:00.000000000 +0100
+++ expiretable/files/patch-expiretable 2013-01-23 12:02:36.000000000 +0100
@@ -0,0 +1,10 @@
+--- expiretable.c.orig 2013-01-23 11:56:08.000000000 +0100
++++ expiretable.c 2013-01-23 11:56:26.000000000 +0100
+@@ -290,6 +290,7 @@
+ for (i = 0; i < astats_count; i++) {
+ if (astats[i].pfras_tzero <= min_timestamp) {
+ del_addrs_list[del_addrs_count] = astats[i].pfras_a;
++ del_addrs_list[del_addrs_count].pfra_fback = 0;
+ del_addrs_count++;
+ }
+ }
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list