-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 05/26/2017 07:06 AM, Thomas Deutschmann wrote:
> Hi,
> 
> with <=shorewall-5.0.15.6, the following blrules file for
> shorewall6 compiled and "BLACKLIST" action expanded to "blacklog"
> like expected:
> 
>> # cat /etc/shorewall6/blrules # # Shorewall6 --
>> /etc/shorewall6/blrules # # For information about entries in this
>> file, type "man shorewall6-blrules" # # Please see
>> http://shorewall.net/blacklisting_support.htm for additional #
>> information. # ###########################################... 
>> #ACTION         SOURCE          DEST BLACKLIST
>> net:+blacklist  $FW
> 
> 
> With shorewall-5.1.4 I am getting the following error
> 
>> Checking /etc/shorewall6/blrules... ERROR: Unknown ACTION
>> (BLACKLIST) /etc/shorewall6/blrules (line 11)
> 
> The same blrules file for shorewall (the non IPv6 variant!) still
> works...
> 
> Regression or have I missed a change?

Regression, which should be corrected by the attached patch.

- -Tom
- -- 
Tom Eastep        \   Q: What do you get when you cross a mobster with
Shoreline,         \     an international standard?
Washington, USA     \ A: Someone who makes you an offer you can't
http://shorewall.org \   understand
                      \_______________________________________________
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
Comment: GPGTools - http://gpgtools.org
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=4+xR
-----END PGP SIGNATURE-----
diff --git a/Shorewall6/actions.std b/Shorewall6/actions.std
index 69ea468..5fd11c6 100644
--- a/Shorewall6/actions.std
+++ b/Shorewall6/actions.std
@@ -17,6 +17,7 @@ allowInvalid inline		# Accepts packets in the INVALID conntrack state
 allowMcast   inline		# Silently Allow Multicast
 AutoBL       noinline           # Auto-blacklist IPs that exceed thesholds
 AutoBLL      noinline           # Helper for AutoBL
+BLACKLIST    logjump,section	# Add sender to the dynamic blacklist
 Broadcast    noinline      	# Handles Broadcast/Anycast
 Drop		        	# Default Action for DROP policy (deprecated)
 dropBcast    inline		# Silently Drop Broadcast
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to