#910739 fwsnort: All rules fail to import

Package:
fwsnort
Source:
fwsnort
Submitter:
Nigel Horne
Date:
2024-05-12 14:27:04 UTC
Severity:
normal
#910739#5
Date:
2018-10-10 14:27:41 UTC
From:
To:
I can't get any rules to import.  Here's what happens with update-rules
followed by an attempt to import.


root@njh:/etc/fwsnort# /usr/sbin/fwsnort --update-rules
[+] Downloading latest rules into /etc/fwsnort/snort_rules/--2018-10-10 10:25:27--  http://rules.emergingthreats.net/open/snort-2.9.0/emerging-all.rules
Resolving rules.emergingthreats.net (rules.emergingthreats.net)... 96.43.137.99, 204.12.217.19
Connecting to rules.emergingthreats.net (rules.emergingthreats.net)|96.43.137.99|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 13880047 (13M)
Saving to: ‘emerging-all.rules’

emerging-all.rules  100%[===================>]  13.24M  3.43MB/s    in 12s

2018-10-10 10:25:40 (1.06 MB/s) - ‘emerging-all.rules’ saved [13880047/13880047]

[+] Finished.
root@njh:/etc/fwsnort# /usr/sbin/fwsnort
[+] Testing /sbin/iptables for supported capabilities...
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
    Snort Rules File          Success   Fail      Total

[+] emerging-all.rules        0         17510     17510
                              =============================
                              0         17510     17510

[+] No rules parsed.

[+] Logfile: /var/log/fwsnort/fwsnort.log
[-] No Snort rules could be translated, exiting
root@njh:/etc/fwsnort#
#910739#10
Date:
2024-05-12 14:17:50 UTC
From:
To:
Dear Maintainer,

*** Reporter, please consider answering these questions, where appropriate ***

   * What led up to the situation?

       /sbin/iptables-restore < /var/lib/fwsnort/fwsnort.save

   * What exactly did you do (or not do) that was effective (or
     ineffective)?

     Ran the above command

   * What was the outcome of this action?

   # /sbin/iptables-restore < /var/lib/fwsnort/fwsnort.save
iptables-restore v1.8.10 (nf_tables): invalid port/service `!445' specified
Error occurred at line: 14081
Try `iptables-restore -h' or 'iptables-restore --help' for more information.

   * What outcome did you expect instead?

   That there would be no error messages and that it would work

*** End of the template - remove these template lines ***