fwsnort fails in 14.04

[Rituraj B]

What I did:
- Update the snort rules: sudo fwsnort --update-rules
- Run fwsnort: sudo fwsnort
- instantiate the fwsnort policy: sudo /var/lib/fwsnort/fwsnort.sh

The result:

[+] Splicing fwsnort 11647 rules into the iptables policy...
iptables-restore v1.6.0: invalid port/service `[6789]' specified
Error occurred at line: 11464
Try `iptables-restore -h' or 'iptables-restore --help' for more information.

This is a bug which is fixed in upstream version of fwsnort 1.6.7

The discussion is on the below forum:

https://superuser.com/questions/1189290/fwsnort-wont-apply-rules-in-iptables

System Information

lsb_release -rd
Description: Ubuntu 14.04.5 LTS
Release: 14.04

[Rituraj B (riturajb)]

Please assign this to branch Trusty (14.04)

[Rituraj B (riturajb)]

This bug affects another user as well hence changing the status to "confirmed".

[Rituraj B (riturajb)]

Adding Mhall in the loop as the package maintenar for this package is "ubuntu-devel-discuss" and being one of the owner of the list.
Please note - this is a security issue , but I did not find a way to raise flag for the same after filling the bug.

[Rituraj B (riturajb)]

https://launchpad.net/ubuntu/+source/fwsnort/1.6.7-3

The source is uploaded to unstable by Adrian Bunk

[Rituraj B (riturajb)]

The patch is not released for Ubuntu. Cause it still does not work in Ubuntu.

There has been no action on this bug - it has not been assigned to anyone so far !!

[Naresh Khalasi (nkhalasi)]

But it works on ubuntu 16.04 by creating the service definition?

-- Sent from my iPhone --

> On 24-Oct-2017, at 19:48, Rituraj B <email address hidden> wrote:
>
> The patch is not released for Ubuntu. Cause it still does not work in
> Ubuntu.
>
> There has been no action on this bug - it has not been assigned to
> anyone so far !!
>
> --
> You received this bug notification because you are subscribed to the bug
> report.
> https://bugs.launchpad.net/bugs/1705218
>
> Title:
> fwsnort fails in 14.04
>
> Status in fwsnort package in Ubuntu:
> Confirmed
> Status in fwsnort package in Debian:
> Fix Released
>
> Bug description:
> What I did:
> - Update the snort rules: sudo fwsnort --update-rules
> - Run fwsnort: sudo fwsnort
> - instantiate the fwsnort policy: sudo /var/lib/fwsnort/fwsnort.sh
>
> The result:
>
> [+] Splicing fwsnort 11647 rules into the iptables policy...
> iptables-restore v1.6.0: invalid port/service `[6789]' specified
> Error occurred at line: 11464
> Try `iptables-restore -h' or 'iptables-restore --help' for more information.
>
> This is a bug which is fixed in upstream version of fwsnort 1.6.7
>
> The discussion is on the below forum:
>
> https://superuser.com/questions/1189290/fwsnort-wont-apply-rules-in-
> iptables
>
> System Information
>
> lsb_release -rd
> Description: Ubuntu 14.04.5 LTS
> Release: 14.04
>
> To manage notifications about this bug go to:
> https://bugs.launchpad.net/ubuntu/+source/fwsnort/+bug/1705218/+subscriptions