Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 08 Nov 2016 12:22:14 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-ports-bugs@FreeBSD.org
Subject:   [Bug 214315] sshguard with ipfw does not work in FreeBSD 11.0
Message-ID:  <bug-214315-13@https.bugs.freebsd.org/bugzilla/>

next in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D214315

            Bug ID: 214315
           Summary: sshguard with ipfw does not work in FreeBSD 11.0
           Product: Ports & Packages
           Version: Latest
          Hardware: amd64
                OS: Any
            Status: New
          Severity: Affects Many People
          Priority: ---
         Component: Individual Port(s)
          Assignee: freebsd-ports-bugs@FreeBSD.org
          Reporter: admin@support.od.ua

sshguard with ipfw does not work in FreeBSD 11.0
And since sshguard called via syslog, and the service syslogd crashed.

I understand that the problem is a change in the format of ipfw table FreeB=
SD
11.0

# /usr/local/sbin/sshguard -a 60 -p 420 -s 1200 -b
120:/var/db/sshguard/blacklist.db
ipfw: failed to request table info: No such process
Could not initialize firewall

# ipfw show
00010    6534    1598558 allow ip from any to any via lo0
65533 5160642  355170504 allow ip from any to any
65534       0          0 allow ip6 from any to any
65535      16       1268 allow ip from any to any

# uname -a
FreeBSD tank.XXX.ua 11.0-STABLE FreeBSD 11.0-STABLE #0 r307394: Fri Oct 21
00:28:11 EEST 2016     root@tank.XXX.ua:/usr/obj/usr/src/sys/tank.XXX.ua.4=
=20
amd64


# /usr/local/sbin/sshguard -v
sshguard 1.7.0

# grep sshguard /etc/syslog.conf
auth.info;authpriv.info | exec /usr/local/sbin/sshguard -a 60 -p 420 -s 120=
0 -b
120:/var/db/sshguard/blacklist.db


# cat /var/db/ports/security_sshguard/options
# This file is auto-generated by 'make config'.
# Options for sshguard-1.7.0_1
_OPTIONS_READ=3Dsshguard-1.7.0_1
_FILE_COMPLETE_OPTIONS_LIST=3D IPFW NULL PF
OPTIONS_FILE_SET+=3DIPFW
OPTIONS_FILE_UNSET+=3DNULL
OPTIONS_FILE_UNSET+=3DPF

--=20
You are receiving this mail because:
You are the assignee for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214315-13>