Package: ferm Version: 2.2-3 Severity: serious -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
The systemd service shipped by the package starts ferm too late. As advised in <https://wiki.debian.org/Teams/pkg-systemd/rcSMigration>, firewall services should be started before network interfaces are brought up. This is done as follows: [Unit] DefaultDependencies=no Wants=network-pre.target Before=network-pre.target shutdown.target Conflicts=shutdown.target The shutdown.target stuff is added to maintain compatibility with how ferm worked under sysvinit, since using DefaultDependencies=no will by default result in a service that is not stopped during shutdown. - -- System Information: Debian Release: 8.4 APT prefers stable-updates APT policy: (550, 'stable-updates'), (550, 'stable'), (530, 'testing'), (520, 'unstable'), (510, 'experimental'), (500, 'unstable-debug') Architecture: amd64 (x86_64) Kernel: Linux 4.5.0-1-amd64 (SMP w/2 CPU cores) Locale: LANG=en_GB.utf8, LC_CTYPE=en_GB.utf8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages ferm depends on: ii debconf 1.5.59 ii iptables 1.6.0-2 ii lsb-base 4.1+Debian13+nmu1 ii perl 5.22.2-1 Versions of packages ferm recommends: ii libnet-dns-perl 1.05-2 ferm suggests no packages. - -- Configuration Files: /etc/default/ferm changed [not included] /etc/ferm/ferm.conf changed [not included] - -- debconf information excluded -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJXNeLfAAoJENILQgJc2ie58w8P/0AsqcyQkN4igtXXCWIGe5VD QNNrlSzT3jUKvxf0Bny2D/8dmB0zvUKLGXT+9AE5ufg1JGGhKU2KgqYDRru2LVUJ xCarzxPG9rhTyvSD1XuPoScza83Sf4v7DUgknupZH6Wn1RJsIoHHQpOZF9zGs1Wa alxtUDsdrnG8Q1d8w4hNVtILUW3vdx2Ke40gJqlFKhoK8AwR4M7PVAnxlCUCdMqK orr7dstFwa6r2bY9T0+9h1qEWysl2q5UJwBeYIKuQ+WW33nkpOa9VcykXFoKgT2D 09UNQHbFRSPV0PwdHuM7FKIj3QSLbsomWp7e73tfcLvI8mgUeNYGHI37LBAwKusV XqbhgZyWiRvKxjbcs3eRzAcwu/2J329g+IV3AwPSBzE9O9PSHBF9Mjh6kqld7NWt iolWshsro7qVRqJNR2ywRBEaU7AJH+AiogwVdrnP2cLdwlg17UQEqdbQG81ILkcF ihazHyG9UFW6fup8nfVft8Tf6Rv1w3hG8d7P2Yfu+OjWTNLCYu2u1jl+YG4HHaCP Y5L2ZqNbT417WyKrYSJT6KwIB8b40V+t2NOsY3D1qZjNYtMRuORs0dtELjtNVGri /hslo4rs/P39Z7Fyw7Q5f/Y209bxbCXwZzOYTwC+cSgPMsJZvFWTWsYOJucLZwry FAniPMh5RnPrfIQH6Qga =KbHe -----END PGP SIGNATURE-----
