[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
A bit late to the party... This bug report and the associated discussion thread helped me as well. Thank you @oliver-vpr and @fmarier for the discussion and the resolution! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
This bug was fixed in the package fwknop - 2.6.11-2 --- fwknop (2.6.11-2) unstable; urgency=medium * Enable NFQ in default config file (LP: #2076224) * Remove unnecessary libpcap0.8-dev build dep * Bump Standards-Version up to 4.7.0 -- Francois Marier Sat, 10 Aug 2024 14:29:05 -0700 ** Changed in: fwknop (Ubuntu) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
Fixed in Debian unstable: https://tracker.debian.org/news/1554161/accepted-fwknop-2611-2-source- into-unstable/ ** Changed in: fwknop (Ubuntu) Status: New => Fix Committed ** Changed in: fwknop (Ubuntu) Assignee: (unassigned) => François Marier (fmarier) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
Yes, that would have helped me. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
Good point about new installations. Maybe I should delete this part of the default config file that ships with fwknop-server: https://salsa.debian.org/debian/fwknop/-/blame/master/server/fwknopd.conf.inst?ref_type=heads#L37-53 and then toggle this one ON by default: https://salsa.debian.org/debian/fwknop/-/blame/master/server/fwknopd.conf.inst?ref_type=heads#L55-65 Do you think that would have helped in your case? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
I do like apt-listchanges and using it to announce a switch from PCAP to NFQ there. But lets assume, I install a new server and I install fwknop- server with it, than I don't see the apt-listchanges. So how should new user know, that PCAP is not available in Ubuntu? PCAP is so prominent in the freshly installed packages, that many users will probably use it or at least they'll try and fail. Anyway, thank you very much for the hint and your help. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
> But would it be possible to express the shift to NFQ in the /etc/fwknop/fwknopd.conf? I guess, that would be really helpful for others. That's an option, but the usual place to include this kind of information is via the NEWS file. This is the notice you would have seen (either on the screen or by email depending on your config) if you had the apt-listchanges package installed: https://salsa.debian.org/debian/fwknop/-/tree/master/debian?ref_type=heads I'd definitely recommend you install apt-listchanges if you don't already have it. This is how you'll find out about changes to all other packages that may require changing local configuration files. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
Honestly, I didn't know that Ubuntu switched to NFQ. I always used PCAP, which work flawlessly. I thought that NFQ needed an open port on the firewall to work, but I just tried it out and it doesn't seem to be necessary. Actually that was my biggest concern. I just didn't wanted to have any open port on the firewall. So, I guess NFQ is a good alternative. But would it be possible to express the shift to NFQ in the /etc/fwknop/fwknopd.conf? I guess, that would be really helpful for others. Isn't it possible to kick out the PCAP config part? or at least put in a notice, that people should use NFQ instead of PCAP? Thanks for your help! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 2076224] Re: fwknopd is missing PCAP support with new LTS
The move from PCAP to NFQ was intentional in order to make fwknopd more reliable: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949331#26 Unfortunately, it doesn't appear possible to have support for both PCAP and NFQ at the same time. Can you talk more about your use case and why using NFQ is not an option? ** Bug watch added: Debian Bug tracker #949331 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=949331 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2076224 Title: fwknopd is missing PCAP support with new LTS To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/fwknop/+bug/2076224/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
