-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Rob,
I can confirm the behaviour. From the first glance at the code I suspect the author simply forgot to add the appropriate log chains. I will forward this to upstream. Regards, Bastian Rob Mahurin schrieb: > Package: fiaif > Version: 1.19.2-11 > Severity: normal > > Hi. With > > INPUT[5]="ACCEPT_LOG tcp 3306 0.0.0.0/0=>0.0.0.0/0" > > in /etc/fiaif/zone.ext, connections to this port are logged as both > accepted and dropped > > Dec 22 13:47:39 sns kernel: [FIAIF_ACCEPT]:IN=eth0 OUT= MAC=xxx SRC=xxx > DST=xxx LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20659 DF PROTO=TCP SPT=34180 > DPT=3306 WINDOW=5840 RES=0x00 SYN URGP=0 > Dec 22 13:47:39 sns kernel: [FIAIF_DROP]:IN=eth0 OUT= MAC=xxx SRC=xxx > DST=xxx LEN=60 TOS=0x00 PREC=0x00 TTL=46 ID=20659 DF PROTO=TCP SPT=34180 > DPT=3306 WINDOW=5840 RES=0x00 SYN URGP=0 > > and connections fail. But with > > INPUT[5]="LOG tcp 3306 0.0.0.0/0=>0.0.0.0/0" > INPUT[6]="ACCEPT tcp 3306 0.0.0.0/0=>0.0.0.0/0" > > connections are logged and accepted. I expected these to be equivalent. > I'm not sure whether there's a similar problem with DROP_NOLOG and > REJECT_NOLOG. > - -- ,''`. Bastian Kleineidam : :' : GnuPG Schlüssel `. `' gpg --keyserver wwwkeys.pgp.net --recv-keys 32EC6F3E `- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFFtl6keBwlBDLsbz4RArw6AJ9vIeZ3C4JRWWeyFEMpgWDEU1CSSQCgmBJ8 1AXe5GxwgcTuuVquOlIXfmw= =cPJ2 -----END PGP SIGNATURE-----
