System Firewall is ver 15.0.6.12 I recently (4 weeks) upgraded from FreePBX 13 to FreePBX 15.0.16.57. Everything was running smooth the first three weeks (no issue) Approx 3 weeks and 5 days from the upgrade, the firewall somehow get disable at night. No issue re-enabling it. All setting are st…

@rsarceno @jlizzotte04 I have one install of FreePBX Firewall 15.0.6.18 where the firewall also keeps turning off for no apparent reason. I have now rolled back to FreePBX Firewall 15.0.6.11

Did you try updating to the latest edge version? I find CLI much easier by running fwconsole ma upgrade firewall --edge and with the firewall, i would upgrade certman using the same fwconsole ma upgrade certman --edge This helps with the LE validation SSL issues as well.

@jlizzotte04 Originally, we had the automatic System/Module/Security updates enable in Module Admin. That broke stuff. Then we switched on only Automatic Security Updates. That broke stuff. We have manually applied Asterisk updates when there had been no reported issues. That broke stuff. Now…

I’ve had the same issue for the last several days - check the channel status and I’m being hammered by hackers. The certificate update process is dying with an error, and it seems to be taking the whole firewall down with it. I’ve temporarily solved the issue by updating the certificate update cron…

you need to see what the underlying problem is, from a shell, su asterisk -c 'usr/sbin/fwconsole certificates --updateall ' should return within a minute or less, running the same command ‘fwconsole’ as the user ‘asterisk’ leaving out the -q (quiet) and the output redirection of stderr into stdou…

Open a ticket even if resolved. It’s too important an issue to hope the thread is noticed. Make sure both the firewall and certman modules are current. I don’t really understand the approach FreePBX uses to open up for LetsEncrypt. It’s a full firewall restart, which means all rules are wiped, r…

There’s already a ticket, and they have put it on the low priority “we’ll talk about it on Monday” pile.

[image] dicko: usr/sbin/fwconsole certificates --updateall I did that, didn’t include the info because it’s only helpful to the maintainers. But basically it’s “REMOTE_ADDR didn’t parse” when updating the certs

Also, I hope to heck everyone is using the VOIPBL blacklist in conjunction with the adaptive firewall. It cuts down malicious connections by more than 99% for me. Even after restarting the firewall I’m getting dozens of attempts in just a minute, until I reload the blacklist which drops them to 0.

Seeing several reports of this issue now. I’ve closed a few duplicates and will track with this one: https://issues.freepbx.org/browse/FREEPBX-21683

FreePBX Community Forums

Firewall keep getting disable

FreePBX Security

show post in topic

Home
Categories
Guidelines
Terms of Service
Privacy Policy

Powered by Discourse, best viewed with JavaScript enabled