Package: ferm
Version: 2.4-1
Severity: normal

Dear Maintainer,

In the upstream version v2.3.1 ferm renamed SYNPROXY's timestamp option
to timestamps, presumably following iptables' documentation[1].

However, the current iptables source[2] still calls the option timestamp
and fails when `--timestamps` is passed:

# iptables -j SYNPROXY --timestamps
iptables v1.8.2 (nf_tables): unknown option "--timestamps"

# iptables-legacy -j SYNPROXY --timestamps
iptables v1.8.2 (legacy): unknown option "--timestamps"

The option was renamed[3] back to `timestamp` in version 2.4.1, but
Buster still comes with 2.4 which has this bug.

[1]: https://git.netfilter.org/iptables/tree/extensions/libxt_SYNPROXY.man
[2]: https://git.netfilter.org/iptables/plain/extensions/libxt_SYNPROXY.c
[3]: https://github.com/MaxKellermann/ferm/pull/17

-- System Information:
Debian Release: 10.4
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.19.0-9-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages ferm depends on:
ii  debconf              1.5.71
ii  init-system-helpers  1.56+nmu1
ii  iptables             1.8.2-4
ii  lsb-base             10.2019051400
ii  perl                 5.28.1-6

Versions of packages ferm recommends:
pn  libnet-dns-perl  <none>

ferm suggests no packages.

-- Configuration Files:
/etc/ferm/ferm.conf changed [not included]

-- debconf information excluded

Reply via email to