and for a single port this works fine.
But if I use -A tcp/22,udp/60000 or similar the open command is only run for the first port i.e. tcp/22.
I was expecting CMD_CYCLE_OPEN to be executed once for every port in the protocol/port list.
Using -T it looks like it sends the list correctly
Message String: <redacted ip>,tcp/22,udp/60000
I am using CMD_CYCLE_OPEN to make fwknopd play nice with nftables, like so:
and for a single port this works fine. But if I use -A tcp/22,udp/60000 or similar the open command is only run for the first port i.e. tcp/22. I was expecting CMD_CYCLE_OPEN to be executed once for every port in the protocol/port list.
Using -T it looks like it sends the list correctly
Message String: <redacted ip>,tcp/22,udp/60000
The server is running fwknopd 2.6.10