Replace "ipfw l", which is now deprecated, with "ipfw list".
Approved by: grehan (mentor)
This commit is contained in:
parent
5722d64390
commit
ec1c427a31
@ -42,7 +42,7 @@ rc=0
|
||||
case "$daily_status_security_ipfwdenied_enable" in
|
||||
[Yy][Ee][Ss])
|
||||
TMP=`mktemp -t security`
|
||||
if ipfw -a l 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then
|
||||
if ipfw -a list 2>/dev/null | egrep "deny|reset|unreach" > ${TMP}; then
|
||||
check_diff new_only ipfw ${TMP} "${host} ipfw denied packets:"
|
||||
fi
|
||||
rc=$?
|
||||
|
@ -45,7 +45,7 @@ case "$daily_status_security_ipfwlimit_enable" in
|
||||
TMP=`mktemp -t security`
|
||||
IPFW_LOG_LIMIT=`sysctl -n net.inet.ip.fw.verbose_limit 2> /dev/null`
|
||||
if [ $? -eq 0 ] && [ "${IPFW_LOG_LIMIT}" -ne 0 ]; then
|
||||
ipfw -a l | grep " log " | \
|
||||
ipfw -a list | grep " log " | \
|
||||
grep '^[[:digit:]]\+[[:space:]]\+[[:digit:]]\+' | \
|
||||
awk -v limit="$IPFW_LOG_LIMIT" \
|
||||
'{if ($2 > limit) {print $0}}' > ${TMP}
|
||||
|
Loading…
x
Reference in New Issue
Block a user