Rebooting... a good practice?

jimp

@pierrelyon said in Rebooting... a good practice?:

Sound like I started the : Who got the longest uptime chalenge

The winner is the one with the worst security practices :-)

Uptime should only be at most as long as it has been since the last update + time to schedule a maintenance window to upgrade.

JKnott

@jimp said in Rebooting... a good practice?:

Uptime should only be at most as long as it has been since the last update + time to schedule a maintenance window to upgrade.

That depends on the OS. With Linux, everything can be updated without rebooting, other than the kernel.

jimp

Well we're talking specifically about pfSense, not Linux, so that doesn't matter.

Gertjan

@SipriusPT said in Rebooting... a good practice?:

Netgate SG-4860: Uptime 130 Days 19 Hours 17 Minutes 59 Seconds
Netgate SG-3100: Uptime 272 Days 01 Hour 31 Minutes 25 Seconds

Could you please indicate the addresses of these devices ?
Got some pen tests ready - knowing that you kept them up, I guess, to have them "tested".

SipriusPT

@Gertjan Ofcourse I will

P.S. those are not running any unsupported/old versions =)

chpalmer

@SipriusPT said in Rebooting... a good practice?:

@Gertjan Ofcourse I will

P.S. those are not running any unsupported/old versions =)

Well hmmm..

2.4.5-RELEASE-p1 (amd64)
built on Tue Jun 02 17:51:54 EDT 2020 only 15 days old..

2.4.5-RELEASE (amd64)
built on Tue Mar 24 15:25:50 EDT 2020 less than 90 days ago..

so..

SipriusPT

@chpalmer said in Rebooting... a good practice?:

@SipriusPT said in Rebooting... a good practice?:

@Gertjan Ofcourse I will

P.S. those are not running any unsupported/old versions =)

Well hmmm..

2.4.5-RELEASE-p1 (amd64)
built on Tue Jun 02 17:51:54 EDT 2020 only 15 days old..

2.4.5-RELEASE (amd64)
built on Tue Mar 24 15:25:50 EDT 2020 less than 90 days ago..

so..

LMGFY

Current/Upcoming Supported Releases
2.5.0 New Features and Changes
2.4.5-p1 New Features and Changes
2.4.5 New Features and Changes
2.4.4-p3 New Features and Changes

https://docs.netgate.com/pfsense/en/latest/releases/index.html

johnpoz

2.4.4p3 is still supported and came out may 2019, so yeah he could be running that with such long uptimes.

edit: I have some sg3100 still on 2.4.4p3 because they are remote and nobody in the offices - don't want to upgrade them at this time because if something does go wonky, nobody on site to fix it.

chpalmer

Well- I have a customer that is guilty.. 2.3.5 still and wont upgrade. But I still consider anything south of the versions I posted as outdated.. But I guess its just personal.

johnpoz

No I am with you, to me if your not on 2.4.5p1 your outdated.. Which I am currently guilty of as well - but only reason is covid, or would of been updated already ;)

SipriusPT

@johnpoz same thing here with covid and other platforms more critical right now for us to be upgraded / migrated.

Covid was a big problem for IT teams to keep network devices updated, mostly while working from home.

Harvy66

Update/reboot when there's a remote vuln that can affect my box. All ports blocked by default, so pretty much has to be a FreeBSD kernel issue. Had 400+ days at some point the past year. Been hanging out on 2.4.4-p3 for a bit now.