#860364 fail2ban: accesses the internet during build

#860364#5
Date:
2017-04-15 07:43:06 UTC
From:
To:
Dear Maintainer,

Whilst fail2ban builds successfully on unstable/amd64, according to
Debian Policy 4.9 packages may not attempt network access during
a build.

   00:00:00.000000 IP 6e3b207d1f60.45147 > OpenWrt.lan.domain: 44338+ A? abcdef.abcdef. (31)
   00:00:00.024609 IP OpenWrt.lan.domain > 6e3b207d1f60.45147: 44338 NXDomain* 0/0/0 (31)
   00:00:00.024724 IP 6e3b207d1f60.54851 > OpenWrt.lan.domain: 28414+ A? abcdef.abcdef.lan. (35)
   00:00:00.026383 IP OpenWrt.lan.domain > 6e3b207d1f60.54851: 28414 NXDomain 0/0/0 (35)
   00:00:00.026424 IP 6e3b207d1f60.46435 > OpenWrt.lan.domain: 40531+ A? abcdef.abcdef.chris-lamb.co.uk. (48)
   00:00:00.056806 IP OpenWrt.lan.domain > 6e3b207d1f60.46435: 40531 NXDomain* 0/0/0 (48)
   00:00:00.057466 IP 6e3b207d1f60.50194 > OpenWrt.lan.domain: 63751+ A? abcdef.abcdef. (31)
   00:00:00.062131 IP OpenWrt.lan.domain > 6e3b207d1f60.50194: 63751 NXDomain* 0/0/0 (31)
   00:00:00.062254 IP 6e3b207d1f60.38983 > OpenWrt.lan.domain: 24747+ A? abcdef.abcdef.lan. (35)
   00:00:00.064022 IP OpenWrt.lan.domain > 6e3b207d1f60.38983: 24747 NXDomain 0/0/0 (35)

  [..]

The full build log (including tcpdump output) is attached.


Regards,

#860364#10
Date:
2017-04-15 09:02:30 UTC
From:
To:
We'll need at least:
--- a/fail2ban/tests/utils.py +++ b/fail2ban/tests/utils.py @@ -175,7 +175,8 @@ def gatherTests(regexps=None, no_network=False): tests.addTest(unittest.makeSuite(databasetestcase.DatabaseTest)) # Filter - tests.addTest(unittest.makeSuite(filtertestcase.IgnoreIP)) + if not no_network: + tests.addTest(unittest.makeSuite(filtertestcase.IgnoreIP)) tests.addTest(unittest.makeSuite(filtertestcase.BasicFilter)) tests.addTest(unittest.makeSuite(filtertestcase.LogFile)) tests.addTest(unittest.makeSuite(filtertestcase.LogFileMonitor)) There is also some log parsing code that is accessing the internet too ("failed.dns.ch") but I'm finding it harder to find all the sources of that. Regards,