@jrey said
When I checked the status of the service, the firewall returned, "does not exist".
as in on the Status -> Services page? or where specifically ?
and yet it shows on the dashboard services widget..
Please see below. I can see .sh files but not executables (suricata & syslog-ng have both).
[25.07.1-RELEASE][suser@...]/root: ls /usr/local/etc/rc.d/
choparp dnsmasq isc-dhcrelay6 nginx php_fpm sshguard unbound
dbus expiretable kea openvpn radvd strongswan uuidd
dhcp6c igmpproxy lighttpd pcscd rrdcached suricata waagent
dhcp6relay isc-dhcpd microcode_update pfb_dnsbl.sh rsyncd suricata.sh waagent.sh
dhcp6s isc-dhcpd6 miniupnpd pfb_filter.sh scponlyc syslog-ng wireguardd
dhcpcd isc-dhcrelay mpd5 pfnet-controller smartd syslog-ng.sh xinetd
are there any errors in pfblockerNG 's error.log, dnsbl_parsed_error or py_error
(Firewall -> pfBlockerNG -> Logs
error.log contains a few lines on feeds failed to fetch entires
py_error is empty
dnsbl_parsed_error (see below) did not have any errors that prevent service execution
... 19:00:44,StevenBlack_ADs,ip6-loopback,::1 ip6-loopback
... 19:14:40,StevenBlack_ADs,ip6-loopback,::1 ip6-loopback
... 19:14:46,EasyList,admi2fib4exit,||admi2fib4exit^
... 00:01:20,EasyList,admi2fib4exit,||admi2fib4exit^
... 00:01:09,EasyList,admi2fib4exit,||admi2fib4exit^
... 16:50:29,UT1_adult,xxx,xxx
Keep settings is enabled, package uninstalled and reinstalled, code changed, feed updated and finally system rebooted. No change in the service status in dashboard's service widget.
I found that except log (e.g., block, permit), the other functions are working. So, I will stop digging further on this regard and hope that future firewall upgrade will solve it. I need to identify, segregate and transfer logs to SIEM, which won't be a hassle.
Thank you very much for your assistance.
With appreciation
Nanda, D.Sc. (Tech.)
