IPFW IPFW - TABLE Deprecated

[wisdown]

I am updating some firewall rules to work with fail2ban, and when I set to create the table on boot process I got this message:

DEPRECATED: inserting data into non-existent table 1. (auto-created)

My /etc/ipfw.rules of this part:

...
ipfw -q add 01500 check-state

# fail2ban IPs
ipfw table 1 flush
ipfw table 1 add 127.0.0.2
ipfw add 1 deny ip from "table(1)" to me

...

Theres an way to fix the warning?

Something like:

If ipfw "table(1)" does not exist
Create
Else
flush

Then

ipfw table 1 add 127.0.0.2
ipfw add 1 deny ip from "table(1)" to me

 

[driesm]

From the manpage ipfw()...: "Tables require explicit creation via create before use."

DEPRECATED: inserting data into non-existent table 1. (auto-created)

This indicates that the table does not exist when adding rules to it and it has been auto-created when you added your first entry in the table (that did not exist before).
You should add an explicit create command to create the table before flushing or adding entries to it.

# fail2ban IPs
ipfw table 1 create
ipfw table 1 flush
ipfw table 1 add 127.0.0.2

 

[wisdown]

# fail2ban IPs
ipfw table 1 create
ipfw table 1 flush
ipfw table 1 add 127.0.0.2

This works perfectly at boottime, by the way, restarting the service:

service ipfw restart

Says the table already exists instead restart without messages.

Looking the ipfw()... I have no found how to check if the table already exists using an IF for example.

 

[obsigna]

ipfw(8) tables since FreeBSD 11 come with extra facilities, for example arbitrary table-names. The legacy table numbering is still supported for backward compatibility.