-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
On 05/26/2017 07:06 AM, Thomas Deutschmann wrote:
> Hi,
>
> with <=shorewall-5.0.15.6, the following blrules file for
> shorewall6 compiled and "BLACKLIST" action expanded to "blacklog"
> like expected:
>
>> # cat /etc/shorewall6/blrules # # Shorewall6 --
>> /etc/shorewall6/blrules # # For information about entries in this
>> file, type "man shorewall6-blrules" # # Please see
>> http://shorewall.net/blacklisting_support.htm for additional #
>> information. # ###########################################...
>> #ACTION SOURCE DEST BLACKLIST
>> net:+blacklist $FW
>
>
> With shorewall-5.1.4 I am getting the following error
>
>> Checking /etc/shorewall6/blrules... ERROR: Unknown ACTION
>> (BLACKLIST) /etc/shorewall6/blrules (line 11)
>
> The same blrules file for shorewall (the non IPv6 variant!) still
> works...
>
> Regression or have I missed a change?
Regression, which should be corrected by the attached patch.
- -Tom
- --
Tom Eastep \ Q: What do you get when you cross a mobster with
Shoreline, \ an international standard?
Washington, USA \ A: Someone who makes you an offer you can't
http://shorewall.org \ understand
\_______________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org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=4+xR
-----END PGP SIGNATURE-----
diff --git a/Shorewall6/actions.std b/Shorewall6/actions.std
index 69ea468..5fd11c6 100644
--- a/Shorewall6/actions.std
+++ b/Shorewall6/actions.std
@@ -17,6 +17,7 @@ allowInvalid inline # Accepts packets in the INVALID conntrack state
allowMcast inline # Silently Allow Multicast
AutoBL noinline # Auto-blacklist IPs that exceed thesholds
AutoBLL noinline # Helper for AutoBL
+BLACKLIST logjump,section # Add sender to the dynamic blacklist
Broadcast noinline # Handles Broadcast/Anycast
Drop # Default Action for DROP policy (deprecated)
dropBcast inline # Silently Drop Broadcast
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users