Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-06-19 Thread Matt Darfeuille
On 6/19/2018 7:14 PM, Brian J. Murrell wrote: > On Tue, 2018-06-19 at 09:39 -0700, Tom Eastep wrote: >> >> It is in 5.2.0 > > Hrm. I had to patch /usr/share/shorewall/action.IfEvent by hand with > 5.2.0. > >> Does your distro install the common Shorewall files in >> a directory other than

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-06-19 Thread Brian J. Murrell
On Tue, 2018-06-19 at 09:39 -0700, Tom Eastep wrote: > > It is in 5.2.0 Hrm. I had to patch /usr/share/shorewall/action.IfEvent by hand with 5.2.0. > Does your distro install the common Shorewall files in > a directory other than /usr/share/shorewall/? I don't believe so, no: $ rpm -qf

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-06-19 Thread Tom Eastep
On 06/19/2018 08:41 AM, Brian J. Murrell wrote: > On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: >> >> In the process, I discovered a bug in the 'reset' logic of IfEvent() >> when 'dst' is specified; that bug is corrected by the attached patch: >> >> patch

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-06-19 Thread Brian J. Murrell
On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: > > In the process, I discovered a bug in the 'reset' logic of IfEvent() > when 'dst' is specified; that bug is corrected by the attached patch: > > patch /usr/share/shorewall/action.IfEvent < IfEvent.patch I see this is missing from

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-04-15 Thread Tom Eastep
On 04/15/2018 08:38 AM, Brian J. Murrell wrote: > On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: >> >> I've tested the following: >> >> # >> # >> # IRC >> # >> SetEvent(IRC)

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-04-15 Thread Tom Eastep
On 04/15/2018 08:46 AM, Brian J. Murrell wrote: > Damn. I knew I shouldn't have hit send so quickly... > > On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: >> diff --git a/Shorewall/Actions/action.IfEvent >> b/Shorewall/Actions/action.IfEvent >> index 5f245ed22..64cbb8e25 100644 >> ---

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-04-15 Thread Brian J. Murrell
Damn. I knew I shouldn't have hit send so quickly... On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: > diff --git a/Shorewall/Actions/action.IfEvent > b/Shorewall/Actions/action.IfEvent > index 5f245ed22..64cbb8e25 100644 > --- a/Shorewall/Actions/action.IfEvent > +++

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-04-15 Thread Brian J. Murrell
On Fri, 2018-04-13 at 09:08 -0700, Tom Eastep wrote: > > I've tested the following: > > # > # > # IRC > # > SetEvent(IRC) { SOURCE=loc,apps, > DEST=net,

Re: [Shorewall-users] using events to allow ident only from recent irc connections

2018-04-13 Thread Tom Eastep
On 04/13/2018 06:24 AM, Brian J. Murrell wrote: > I'm having trouble wrapping my mind around what the Events > configuration looks like for the use-case of an IRC server wanting to > reach the ident server of an IRC client on connect. > > I.e. If IRC client C makes a connection to IRC server S on