Firewall blocks me after every rule change or service stop
-
@johnpoz Once it stops working, i am not able to ping it via fqdn also. Totally blocked.
-
@nikpony well if your rules are failing to load, then yeah that could cause no access.. What is in the log when you change the some rule.
How exactly do you get it back to working, you just stop the firewall and then restart it via console?
-
@johnpoz As stopping the firewall it give me access again.
These are a part of log messages appearing when firewall blocks me.It says that dealing with snort, but i tried also to disable it, with no luck.
Jan 21 16:34:11 snort 49003 [122:23:1] (portscan) UDP Filtered Portsweep [Classification: Attempted Information Leak] [Priority: 2] {PROTO:255} 10.168.10.198 -> 10.168.10.115
Jan 21 16:34:12 snort 49003 [122:7:1] (portscan) TCP Filtered Portsweep [Classification: Attempted Information Leak] [Priority: 2] {PROTO:255} 10.168.10.198 -> 35.157.246.167
Jan 21 16:34:19 snort 49003 [122:22:1] (portscan) UDP Filtered Decoy Portscan [Classification: Attempted Information Leak] [Priority: 2] {PROTO:255} 10.168.10.198 -> 10.168.10.115 -
@nikpony but your not seeing any issues with loading firewall rules or anyhing of the sort, but snort is blocking you.. Yeah disable it for testing, uninstall if need be..
-
@johnpoz It keeps hanging, despite the uninstallation of Snort, what else should i do?
What type of error log it's more helpful to check? -
@nikpony, what is the rule you are trying to load, can you post please.
-
@silence It does not have to do with the rule, it keeps doing it, in every rule or randomly.
-
@nikpony said in Firewall blocks me after every rule change or service stop:
It does not have to do with the rule, it keeps doing it, in every rule or randomly.
@nikpony, Without information I could not help you! sorry.
-
@silence I wish i could provide more info, but as looking in General Error Logs, there is no something specific.
-
@nikpony said in Firewall blocks me after every rule change or service stop:
I wish i could provide more info, but as looking in General Error Logs, there is no something specific.
shows the rule starts with something friend.
