Public bug reported:

Binary package hint: ufw

UFW Won't Let You Change in the Logging section all of the -j LOG in
/lib/ufw/user.rules for 0.30pre1.

I use ufw in a different distro and since this is just a script based
firewall it should at least allow the users the options to change
options.

For example I want to have ufw log to a different file so I've installed
ulogd to do this and if I try to change all the -j LOG lines like this:

### LOGGING ###
-A ufw-after-logging-input -j ULOG --log-prefix "[UFW BLOCK] " -m limit --limit 
3/min --limit-burst 10
-A ufw-after-logging-output -j ULOG --log-prefix "[UFW ALLOW] " -m limit 
--limit 3/min --limit-burst 10
-A ufw-after-logging-forward -j ULOG --log-prefix "[UFW BLOCK] " -m limit 
--limit 3/min --limit-burst 10
-A ufw-logging-deny -j ULOG --log-prefix "[UFW BLOCK] " -m limit --limit 3/min 
--limit-burst 10
-A ufw-logging-allow -j ULOG --log-prefix "[UFW ALLOW] " -m limit --limit 3/min 
--limit-burst 10
-I ufw-before-logging-input -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10
-I ufw-before-logging-output -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10
-I ufw-before-logging-forward -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10

To then allow ulogd to log the firewall to a log of my own choice, which
I made /var/log/firewall, when I try to start ufw with this cmd, I get
this error.

r...@box:/lib/ufw# ufw enable
ERROR: problem running ufw-init

I'm reporting this a bug because the end-user should be able to make
these changes the ufw accepts but it's not.

Can we please get a fix for this?

THANKS

** Affects: ufw (Ubuntu)
     Importance: Undecided
         Status: New

** Description changed:

  Binary package hint: ufw
  
  UFW Won't Let You Change in the Logging section all of the -j LOG in
  /lib/ufw/user.rules for 0.30pre1.
  
  I use ufw in a different distro and since this is just a script based
  firewall it should at least allow the users the options to change
  options.
  
  For example I want to have ufw log to a different file so I've installed
  ulogd to do this and if I try to change all the -j LOG lines like this:
  
  ### LOGGING ###
  -A ufw-after-logging-input -j ULOG --log-prefix "[UFW BLOCK] " -m limit 
--limit 3/min --limit-burst 10
  -A ufw-after-logging-output -j ULOG --log-prefix "[UFW ALLOW] " -m limit 
--limit 3/min --limit-burst 10
  -A ufw-after-logging-forward -j ULOG --log-prefix "[UFW BLOCK] " -m limit 
--limit 3/min --limit-burst 10
  -A ufw-logging-deny -j ULOG --log-prefix "[UFW BLOCK] " -m limit --limit 
3/min --limit-burst 10
  -A ufw-logging-allow -j ULOG --log-prefix "[UFW ALLOW] " -m limit --limit 
3/min --limit-burst 10
  -I ufw-before-logging-input -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10
  -I ufw-before-logging-output -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10
  -I ufw-before-logging-forward -j ULOG --log-prefix "[UFW AUDIT] " -m state 
--state NEW -m limit --limit 3/min --limit-burst 10
  
+ To then allow ulogd to log the firewall to a log of my own choice, which
+ I made /var/log/firewall, when I try to start ufw with this cmd, I get
+ this error.
  
- To then allow ulogd to log the firewall to a log of my own choice, which I 
made /var/log/firewall, when I try to start ufw with this cmd, I get this error.
- 
- r...@slackware:/lib/ufw# ufw enable
+ r...@box:/lib/ufw# ufw enable
  ERROR: problem running ufw-init
  
  I'm reporting this a bug because the end-user should be able to make
  these changes the ufw accepts but it's not.
  
  Can we please get a fix for this?
  
- 
  THANKS

-- 
UFW Won't Let You Change -j LOG
https://bugs.launchpad.net/bugs/594500
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to