Package: ferm Version: 2.4-1 Severity: normal Dear Maintainer,
In the upstream version v2.3.1 ferm renamed SYNPROXY's timestamp option to timestamps, presumably following iptables' documentation[1]. However, the current iptables source[2] still calls the option timestamp and fails when `--timestamps` is passed: # iptables -j SYNPROXY --timestamps iptables v1.8.2 (nf_tables): unknown option "--timestamps" # iptables-legacy -j SYNPROXY --timestamps iptables v1.8.2 (legacy): unknown option "--timestamps" The option was renamed[3] back to `timestamp` in version 2.4.1, but Buster still comes with 2.4 which has this bug. [1]: https://git.netfilter.org/iptables/tree/extensions/libxt_SYNPROXY.man [2]: https://git.netfilter.org/iptables/plain/extensions/libxt_SYNPROXY.c [3]: https://github.com/MaxKellermann/ferm/pull/17 -- System Information: Debian Release: 10.4 APT prefers stable APT policy: (500, 'stable') Architecture: amd64 (x86_64) Kernel: Linux 4.19.0-9-amd64 (SMP w/8 CPU cores) Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages ferm depends on: ii debconf 1.5.71 ii init-system-helpers 1.56+nmu1 ii iptables 1.8.2-4 ii lsb-base 10.2019051400 ii perl 5.28.1-6 Versions of packages ferm recommends: pn libnet-dns-perl <none> ferm suggests no packages. -- Configuration Files: /etc/ferm/ferm.conf changed [not included] -- debconf information excluded