Bug 43226 - Not iptables compatible
Summary: Not iptables compatible
Status: CLOSED RAWHIDE
Alias: None
Product: Red Hat Powertools
Classification: Retired
Component: portsentry (Show other bugs)
(Show other bugs)
Version: 7.1
Hardware: All Linux
medium
medium
Target Milestone: ---
Assignee: Tim Powers
QA Contact:
URL:
Whiteboard:
Keywords:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2001-06-02 00:05 UTC by Mike Chambers
Modified: 2008-05-01 15:38 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Environment:
Last Closed: 2001-06-04 23:59:21 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---


Attachments (Terms of Use)

Description Mike Chambers 2001-06-02 00:05:32 UTC
From Bugzilla Helper:
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0b; Windows NT 5.0)

Description of problem:
The portsentry.conf file has no entry for iptables in the "KILL_ROUTE" 
section.

How reproducible:
Always

Steps to Reproduce:
1.install portsentry
2.edit portsentry.conf
3.Look in Dropping Routes section
	

Actual Results:  # New ipchain support for Linux kernel version 2.102+
KILL_ROUTE="/sbin/ipchains -I input -s $TARGET$ -j DENY -l"

Expected Results:  # New iptables support for Linux kernel version 2.4+
KILL_ROUTE="/sbin/iptables -I INPUT -s $TARGET$ -j DROP -l"


Additional info:

The expected results may be wrong but that is what I manually change it to 
and it seems to work.

Maybe just needs tweaking or something to work more correctly.

Comment 1 Tim Powers 2001-06-04 14:04:01 UTC
How is it not working? I do notice that you have the "-l" still in there from
ipchains, perhaps you shouldn't do that with iptables and use the "--log-level"
flag instead? (I don't have much experience with iptables yet)

Tim

Comment 2 Mike Chambers 2001-06-04 23:59:16 UTC
What I meant is that only "ipchains" is in the config file, nothing for 
iptables.  I changed the ipchains myself manually to iptables so it would work.

Comment 3 Tim Powers 2001-06-05 13:02:35 UTC
Do this was more of an enhancement request than a bug. Sorry for
misunderstanding you. I updated the config file patch to include an iptables
entry (the same as you have in the report).

Thanks for the report. Look for portsentry-1.0-13 in rawhide when rawhide is
updated again. It is moving to the distro from Powertools, so look there instead.

Tim


Note You need to log in before you can comment on or make changes to this bug.