www.zeroshell.org Forum Index www.zeroshell.org
Linux Distribution for server and embedded devices
 
 SearchSearch  RegisterRegister  UsergroupsUsergroups 
 ProfileProfile  Log inLog in  Log in to check your private messagesPrivate Message 

3.8.1 upgrade broke nDPI

 
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell
View previous topic :: View next topic  
Author Message
starling_bird



Joined: 08 Nov 2017
Posts: 3

PostPosted: Thu Nov 09, 2017 12:07 am    Post subject: 3.8.1 upgrade broke nDPI Reply with quote

I was running 3.7.6 (I think) and clicked the upgrade button from package manager. When Zeroshell rebooted, most of the firewall rules were broken.

Firewall was heavily utilising nDPI. On closer inspection, some of the nDPI protocols had broken references. They show in the rule table, but opening nDPI picker, the lines are blank in the selected protocols. eg FTP Control and Data.

Even after fixing all these, and reapplying every rule that includes nDPI, it still isn't working for most protocols. I've had to add rules by port number to get any traffic through the firewall.

What gives? Kernel is 4.4.95-ZS, The only other package I have installed is NTOP 40e00 v2.4.
Back to top
View user's profile Send private message
starling_bird



Joined: 08 Nov 2017
Posts: 3

PostPosted: Mon Nov 13, 2017 1:08 am    Post subject: Reply with quote

nobody?
Back to top
View user's profile Send private message
easpem



Joined: 11 Jun 2014
Posts: 9

PostPosted: Tue Nov 21, 2017 6:13 pm    Post subject: Reply with quote

Same thing here, i was using ndpi in version 3.6.0 for some firewall rules that were working as they should, are not working any more in 3.8.1 version.

I tried deleting existing rules and made them again but still doesn't work.

Any one else experiences this?
Back to top
View user's profile Send private message
starling_bird



Joined: 08 Nov 2017
Posts: 3

PostPosted: Tue Nov 21, 2017 11:12 pm    Post subject: Reply with quote

Hi easpem,
Do you have the ntop package installed? since nDPI is from ntop, maybe there is a inter-version compatibility problem. That's all I can think of, and explains why this is apparently not a widespread issue.
Back to top
View user's profile Send private message
fulvio
Site Admin


Joined: 01 Nov 2006
Posts: 1077

PostPosted: Thu Nov 23, 2017 5:50 am    Post subject: Reply with quote

Could you try with a fresh installation?
Regards
Fulvio
Back to top
View user's profile Send private message Send e-mail
easpem



Joined: 11 Jun 2014
Posts: 9

PostPosted: Thu Nov 23, 2017 7:13 pm    Post subject: Reply with quote

No additional packages installed. Ill try in a fresh installation, since a facebook ndpi rule is working fine. bittorrent is the one failing.

Thanks for your help, ill report back ASAP
Back to top
View user's profile Send private message
easpem



Joined: 11 Jun 2014
Posts: 9

PostPosted: Wed Nov 29, 2017 7:15 pm    Post subject: Reply with quote

I did try the same ndpi firewall rules on a fresh installation and they work fine.

So i deleted all my firewall rules on the production router, then restarted and made every rule again and now seems to be working again.

Is there a way to export firewall rules to a file in order to restore them o share them amongst other zeroshell routers? the same thing would be awesome fot the dchp static leasings.

Thanks for the support, and this great software!
Back to top
View user's profile Send private message
Display posts from previous:   
Post new topic   Reply to topic    www.zeroshell.org Forum Index -> ZeroShell All times are GMT
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group