mrash/psad

IPv6 support for firewalld

kees-closed opened this issue · 0 comments

Hi,

Thank you for this great piece of software, I really appreciate your work on this. It seems like that (according to the hints in the psad.conf) only IPv4 is supported when firewalld is used (FW_CMD_ARGS --direct --passthrough ipv4;). It would be great to have dual stack support such that both IPv4 and IPv6 port scans can be detected and blocked.

Debian 11 is probably going for firewalld as well. It would be really great to keep using PSAD on Fedora/Debian.

Using Fedora 32 at the moment:

  • psad-2.4.6-6.fc32.noarch
  • firewalld-0.8.2-3.fc32.noarch