Package: ferm
Version: 2.0.3-1
Severity: normal

logtest01:~# /usr/sbin/ferm --flush --shell /etc/ferm/ferm.conf
/sbin/iptables-restore <<EOT
# Generated by ferm 2.0.3 on Sun Feb 21 02:19:03 2010
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:log_and_reject ACCEPT [0:0]
:log_or_drop ACCEPT [0:0]
:munin ACCEPT [0:0]
:nagios ACCEPT [0:0]
:ssh ACCEPT [0:0]
COMMIT
EOT
iptables-restore v1.4.2: Can't set policy `log_and_reject' on `ACCEPT' line 6: 
Bad built-in chain name

Failed to run /sbin/iptables-restore
/sbin/ip6tables-restore <<EOT
# Generated by ferm 2.0.3 on Sun Feb 21 02:19:03 2010
*filter
:FORWARD ACCEPT [0:0]
:INPUT ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:log_and_reject ACCEPT [0:0]
:log_or_drop ACCEPT [0:0]
:ssh ACCEPT [0:0]
COMMIT
EOT
ip6tables-restore v1.4.2: Can't set policy `log_and_reject' on `ACCEPT' line 6: 
Bad built-in chain name

Failed to run /sbin/ip6tables-restore

Firewall rules rolled back.

Since stop calls --flush, this fails as it exits non-zero.  Since 
dpkg -P ferm calls stop, this fails as well.

Cheers,

-- System Information:
Debian Release: 5.0.3
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.26-2-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.utf8, LC_CTYPE=en_US.utf8 (charmap=UTF-8) (ignored: LC_ALL 
set to en_US.utf8)
Shell: /bin/sh linked to /bin/bash

Versions of packages ferm depends on:
ii  debconf                  1.5.24          Debian configuration management sy
ii  iptables                 1.4.2-6         administration tools for packet fi
ii  lsb-base                 3.2-20          Linux Standard Base 3.2 init scrip
ii  perl                     5.10.0-19lenny2 Larry Wall's Practical Extraction 

ferm recommends no packages.

ferm suggests no packages.

-- debconf information:
  ferm/enable: true



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to