https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=219930
Bug ID: 219930
Summary: blacklistd do not remove (unblock) ip from ipfw table
Product: Base System
Version: 11.0-RELEASE
Hardware: amd64
OS: Any
Status: New
Severity: Affects Some People
Priority: ---
Component: bin
Assignee: freebsd-bugs@FreeBSD.org
Reporter: free...@ihead.ru
1)
cat /etc/blacklistd.conf | grep -v ^#
[local]
ftp stream * * * 3 1m
[remote]
2) Run blacklistd in console for debug with 1 second checking interval:
blacklistd -v -d -t 1
3) Connect to ftpd and make some invalid auths.
4) The output in console (blacklistd -v -d -t 1):
[local]
target type proto owner name nfail duration
21 6 * * * 3 60
[remote]
source type proto owner name nfail duration
Connected to blacklist server
processing type=1 fd=5 remote=192.168.10.250:59383 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge: target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result: target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59383: count=0/3 last=1970/01/01
03:00:00 now=2017/06/11 22:36:33
processing type=1 fd=5 remote=192.168.10.250:59415 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge: target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result: target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59415: count=1/3 last=2017/06/11
22:36:33 now=2017/06/11 22:36:38
processing type=1 fd=5 remote=192.168.10.250:59437 msg=Login incorrect uid=0
gid=0
listening socket: 192.168.10.22:21
look: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=, nfail:*,
duration:*
check: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
found: target:21, proto:6, family:*, uid:*, name:*, nfail:3, duration:60
conf_apply: merge: target:21, proto:6, family:*, uid:*, name:*, nfail:3,
duration:60
conf_apply: to: target:192.168.10.22:21, proto:6, family:2, uid:0, name:=,
nfail:*, duration:*
conf_apply: result: target:192.168.10.22:21, proto:6, family:2, uid:*,
name:*, nfail:3, duration:60
Applied address 192.168.10.250:21
Applied address 192.168.10.250:21
process: db state info for 192.168.10.250:59437: count=2/3 last=2017/06/11
22:36:38 now=2017/06/11 22:36:44
run /usr/libexec/blacklistd-helper [control add blacklistd tcp 192.168.10.250
32 21 ]
add returns (null)
5)
ipfw table port21 list
--- table(port21), set(0) ---
192.168.10.250/32 0
6) Blocked IP-address is not automatically removed from ipfw table port21.
--
You are receiving this mail because:
You are the assignee for the bug.
_______________________________________________
freebsd-bugs@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-bugs
To unsubscribe, send any mail to "freebsd-bugs-unsubscr...@freebsd.org"
