From mboxrd@z Thu Jan  1 00:00:00 1970
From: Bernhard Bitsch <bbitsch@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: [PATCH] configroot: Add in LOGDROPHOSTILExxx values
Date: Thu, 11 Apr 2024 22:39:51 +0200
Message-ID: <7fbb6785-58c8-415b-81b3-2901f0b40109@ipfire.org>
In-Reply-To: <20240408165721.3503506-1-adolf.belka@ipfire.org>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============3499154525436811551=="
List-Id: <development.lists.ipfire.org>

--===============3499154525436811551==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Reviewed-by: Bernhard Bitsch <bbitsch(a)ipfire.org>

Am 08.04.2024 um 18:57 schrieb Adolf Belka:
> - I checked out doing a fresh install of CU184 and found that although the
>     LOGDROPHOSTILEIN and LOGDROPHOSTILEOUT entries were selected as "on" th=
e values were not
>     in the /var/ipfire/optionsfw/settings file.
> - After some investigfation I realised that when I created the LOGDROPHOSTI=
LE split into
>     incoming and outgoing I had not added them into the configroot lfs file.
> - This patch adds the two entries and this was tested out with a fresh inst=
all and
>     confirmed to update the settings file.
>=20
> Tested-by: Adolf Belka <adolf.belka(a)ipfire.org>
> Signed-off-by: Adolf Belka <adolf.belka(a)ipfire.org>
> ---
>   lfs/configroot | 4 +++-
>   1 file changed, 3 insertions(+), 1 deletion(-)
>=20
> diff --git a/lfs/configroot b/lfs/configroot
> index 66efe04b5..9f6c1ff8c 100644
> --- a/lfs/configroot
> +++ b/lfs/configroot
> @@ -1,7 +1,7 @@
>   #########################################################################=
######
>   #                                                                        =
     #
>   # IPFire.org - A linux based firewall                                    =
     #
> -# Copyright (C) 2007-2023  IPFire Team  <info(a)ipfire.org>               =
      #
> +# Copyright (C) 2007-2024  IPFire Team  <info(a)ipfire.org>               =
      #
>   #                                                                        =
     #
>   # This program is free software: you can redistribute it and/or modify   =
     #
>   # it under the terms of the GNU General Public License as published by   =
     #
> @@ -133,6 +133,8 @@ $(TARGET) :
>   	echo  "DROPWIRELESSFORWARD=3Don"	>> $(CONFIG_ROOT)/optionsfw/settings
>   	echo  "DROPSPOOFEDMARTIAN=3Don"	>> $(CONFIG_ROOT)/optionsfw/settings
>   	echo  "DROPHOSTILE=3Don"		>> $(CONFIG_ROOT)/optionsfw/settings
> +	echo  "LOGDROPHOSTILEIN=3Don"		>> $(CONFIG_ROOT)/optionsfw/settings
> +	echo  "LOGDROPHOSTILEOUT=3Don"	>> $(CONFIG_ROOT)/optionsfw/settings
>   	echo  "LOGDROPCTINVALID=3Don"	>> $(CONFIG_ROOT)/optionsfw/settings
>   	echo  "POLICY=3DMODE2"		>> $(CONFIG_ROOT)/firewall/settings
>   	echo  "POLICY1=3DMODE2"		>> $(CONFIG_ROOT)/firewall/settings

--===============3499154525436811551==--