Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Jan 2013 11:19:05 GMT
From:      Cristiano Deana <cris@gufi.org>
To:        freebsd-gnats-submit@FreeBSD.org
Subject:   ports/175527: security/expiretable doesn't work in FreeBSD 9.x
Message-ID:  <201301231119.r0NBJ5C8079661@red.freebsd.org>
Resent-Message-ID: <201301231120.r0NBK1OO016602@freefall.freebsd.org>

next in thread | raw e-mail | index | archive | help

>Number:         175527
>Category:       ports
>Synopsis:       security/expiretable doesn't work in FreeBSD 9.x
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          maintainer-update
>Submitter-Id:   current-users
>Arrival-Date:   Wed Jan 23 11:20:00 UTC 2013
>Closed-Date:
>Last-Modified:
>Originator:     Cristiano Deana
>Release:        
>Organization:
>Environment:
>Description:
Due to changes in pf, expiretable doesn't work in FreeBSD 9.x

>How-To-Repeat:
Put some ip address in a table, call it "badhosts", then:

# /usr/local/sbin/expiretable -v -t 3600 badhosts
expiretable: badhosts: Failed to remove address(es).: Invalid argument
badhosts: -1 of 9 entries deleted.


>Fix:
Apply the patch below

Patch attached with submission follows:

diff -ruN expiretable.orig/Makefile expiretable/Makefile
--- expiretable.orig/Makefile	2012-11-17 07:01:03.000000000 +0100
+++ expiretable/Makefile	2013-01-23 12:07:01.000000000 +0100
@@ -7,6 +7,7 @@
 
 PORTNAME=	expiretable
 PORTVERSION=	0.6
+PORTREVISION=	1
 CATEGORIES=	security
 MASTER_SITES=	http://expiretable.fnord.se/
 
diff -ruN expiretable.orig/files/patch-expiretable expiretable/files/patch-expiretable
--- expiretable.orig/files/patch-expiretable	1970-01-01 01:00:00.000000000 +0100
+++ expiretable/files/patch-expiretable	2013-01-23 12:02:36.000000000 +0100
@@ -0,0 +1,10 @@
+--- expiretable.c.orig	2013-01-23 11:56:08.000000000 +0100
++++ expiretable.c	2013-01-23 11:56:26.000000000 +0100
+@@ -290,6 +290,7 @@
+ 			for (i = 0; i < astats_count; i++) {
+ 				if (astats[i].pfras_tzero <= min_timestamp) {
+ 					del_addrs_list[del_addrs_count] = astats[i].pfras_a;
++					del_addrs_list[del_addrs_count].pfra_fback = 0;
+ 					del_addrs_count++;
+ 				}
+ 			}


>Release-Note:
>Audit-Trail:
>Unformatted:



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201301231119.r0NBJ5C8079661>