>Number:         24961
>Category:       kern
>Synopsis:       ipfilter 4.1.1 has problems parsing ipf.conf
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    kern-bug-people
>State:          open
>Class:          sw-bug
>Submitter-Id:   net
>Arrival-Date:   Mon Mar 29 18:41:00 UTC 2004
>Closed-Date:
>Last-Modified:
>Originator:     Arto Selonen
>Release:        NetBSD-current
>Organization:
>Environment:
NetBSD blah 1.6ZL NetBSD 1.6ZL (LCE) #30: Mon Mar 29 10:07:04 EEST 2004  blah@blah:/obj/sys/arch/i386/compile/BLAH i386

>Description:
Upgraded Ipfilter 4.1.1 failed to read a previously working /etc/ipf.conf. The following changes had to be made:

"port = auth" => "port = 113"
re-write rules that used return-icmp() structure to not have
() in them

>How-To-Repeat:
try to read the following ipf.conf lines with ipfilter 4.1.1:

block in log quick proto tcp from any to any port = auth

block return-icmp-as-dest(port-unr) in log quick proto udp from any to any port 33433 >< 33524
>Fix:

>Release-Note:
>Audit-Trail:
>Unformatted: