From owner-freebsd-bugs@FreeBSD.ORG Thu Dec 1 09:40:04 2005 Return-Path: X-Original-To: freebsd-bugs@hub.freebsd.org Delivered-To: freebsd-bugs@hub.freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 2230C16A41F for ; Thu, 1 Dec 2005 09:40:04 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (freefall.freebsd.org [216.136.204.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 4841143D5F for ; Thu, 1 Dec 2005 09:40:03 +0000 (GMT) (envelope-from gnats@FreeBSD.org) Received: from freefall.freebsd.org (gnats@localhost [127.0.0.1]) by freefall.freebsd.org (8.13.3/8.13.3) with ESMTP id jB19e3F7079620 for ; Thu, 1 Dec 2005 09:40:03 GMT (envelope-from gnats@freefall.freebsd.org) Received: (from gnats@localhost) by freefall.freebsd.org (8.13.3/8.13.1/Submit) id jB19e2Ih079616; Thu, 1 Dec 2005 09:40:03 GMT (envelope-from gnats) Resent-Date: Thu, 1 Dec 2005 09:40:03 GMT Resent-Message-Id: <200512010940.jB19e2Ih079616@freefall.freebsd.org> Resent-From: FreeBSD-gnats-submit@FreeBSD.org (GNATS Filer) Resent-To: freebsd-bugs@FreeBSD.org Resent-Reply-To: FreeBSD-gnats-submit@FreeBSD.org, Vasily Korytov Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id A358616A41F for ; Thu, 1 Dec 2005 09:34:29 +0000 (GMT) (envelope-from deskpot@bit.flexpro.ru) Received: from hub.flexpro.ru (flex-pro.rmt.ru [81.13.75.18]) by mx1.FreeBSD.org (Postfix) with ESMTP id C6A5B43D4C for ; Thu, 1 Dec 2005 09:34:28 +0000 (GMT) (envelope-from deskpot@bit.flexpro.ru) Received: from bit.flexpro.ru ([192.168.0.220]) by hub.flexpro.ru (8.13.4/8.13.4) with ESMTP id jB19YQHa033424 for ; Thu, 1 Dec 2005 12:34:26 +0300 (MSK) (envelope-from deskpot@bit.flexpro.ru) Received: from bit.flexpro.ru (smmsp@localhost [127.0.0.1]) by bit.flexpro.ru (8.13.4/8.13.3) with ESMTP id jB19Y8GE000762 for ; Thu, 1 Dec 2005 12:34:08 +0300 (MSK) (envelope-from deskpot@bit.flexpro.ru) Received: (from root@localhost) by bit.flexpro.ru (8.13.4/8.13.3/Submit) id jB19Y7Xg000761; Thu, 1 Dec 2005 12:34:07 +0300 (MSK) (envelope-from deskpot) Message-Id: <200511300754.jAU7s3Pd029304@bit.flexpro.ru> Date: Wed, 30 Nov 2005 10:54:03 +0300 (MSK) From: Vasily Korytov To: FreeBSD-gnats-submit@FreeBSD.org X-Send-Pr-Version: 3.113 Cc: Subject: misc/89789: [patch] 500.ipfwdenied uses deprecated syntax of ipfw X-BeenThere: freebsd-bugs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: Vasily Korytov List-Id: Bug reports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 01 Dec 2005 09:40:04 -0000 >Number: 89789 >Category: misc >Synopsis: 500.ipfwdenied uses deprecated syntax of ipfw >Confidential: no >Severity: non-critical >Priority: low >Responsible: freebsd-bugs >State: open >Quarter: >Keywords: >Date-Required: >Class: sw-bug >Submitter-Id: current-users >Arrival-Date: Thu Dec 01 09:40:02 GMT 2005 >Closed-Date: >Last-Modified: >Originator: Vasily Korytov >Release: FreeBSD 6.0-STABLE i386 >Organization: Good morning, Jah! >Environment: System: FreeBSD bit.flexpro.ru 6.0-STABLE FreeBSD 6.0-STABLE #0: Mon Nov 28 13:52:35 MSK 2005 root@bit.flexpro.ru:/usr/src/sys/i386/compile/HUB i386 FreeBSD 6-STABLE on i386 since 6.0-RELEASE up to the 27-11-05 snapshot. >Description: /etc/periodic/security/500.ipfwdenied issues a warning: ipfw: DEPRECATED: 'l' matched 'list' as a sub-string >How-To-Repeat: Install a 6.0 system, enable ipfw and don't set the daily_status_security_ipfwdenied_enable="NO" in /etc/periodic.conf. In the first root security output, you'll see the warning. >Fix: Patch is included: --- /etc/periodic/security/500.ipfwdenied~ Sun May 8 11:05:12 2005 +++ /etc/periodic/security/500.ipfwdenied Wed Nov 30 10:41:32 2005 @@ -42,7 +42,7 @@ case "$daily_status_security_ipfwdenied_enable" in [Yy][Ee][Ss]) TMP=`mktemp -t security` - if ipfw -a l 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then + if ipfw -a list 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then check_diff new_only ipfw ${TMP} "${host} ipfw denied packets:" fi rc=$? >Release-Note: >Audit-Trail: >Unformatted: