Reset States In 2.4.4

strangegopher

Anyone experience issues with reset state in 2.4.4?
It doesn't do anything and just shows connection reset page right away on my browser.

this is the error i get in system logs:

nginx: 2018/09/27 19:02:19 [crit] 13017#100559: *1 SSL_write() failed (SSL:) (13: Permission denied) while processing HTTP/2 connection, client: 10.10.100.8, server: 0.0.0.0:443

Can anyone test and confirm that reset state works in 2.4.4?

chrismacmahon

I was able to test here that states are removed. How are you logging into the firewall, via admin or another user?

strangegopher

Logged in as admin

jimp

That nginx log error is specifically from the state for your browser setting to the GUI being removed, so it must be working or you wouldn't see that.

Perhaps your browser simply displayed the page content without actually refreshing since it lost connection to the firewall at that point. It would need to make a new connection to see any updated content from the page. Easiest way to do that is to close the browser and open it again and go back to the page. Or wait a few moments and try again.

strangegopher

If I restart the browser I get "Confirm Form Resubmission" and when I click continue, the ssl error repeats.
I think you are right about me losing connection to the firewall. But restarting the browser might have fixed the issue since my iptv stopped working when I restarted my browser but I still see lots of states in the state table. So I don't know.

jimp

Well if you resubmit the from you just cleared the states again. Don't do that. Open the page fresh without refreshing :)

beremonavabi

@strangegopher said in Reset States In 2.4.4:

Anyone experience issues with reset state in 2.4.4?
It doesn't do anything and just shows connection reset page right away on my browser.

this is the error i get in system logs:
nginx: 2018/09/27 19:02:19 [crit] 13017#100559: *1 SSL_write() failed (SSL:) (13: Permission denied) while processing HTTP/2 connection, client: 10.10.100.8, server: 0.0.0.0:443
Can anyone test and confirm that reset state works in 2.4.4?

Sorry for the necro, but I'm getting the same error message in my log when I reset my states in 2.4.4 (though the states do appear to clear). Odd that it didn't happen in 2.4.3. Have you found a way for resetting the states and not get that message?

Derelict

Have to ask. What does the message matter?

When you reset states you can expect things that relied on those states to break.

beremonavabi

I'm hoping the message doesn't matter at all. I'm wondering if I've managed to break something since I didn't get the message before (I'm changing a lot of stuff).

Derelict

Is there any adverse effect noted other than that log message?

beremonavabi

I have some odd things happening. I don't know if they're related:

Secure Shell Public Key Settings Not Generating Key & getting an error message: https://forum.netgate.com/topic/138250/2-4-4-secure-shell-public-key-settings-not-generating-key
"Default Deny" Rules Still Being Logged with Setting OFF: https://forum.netgate.com/topic/138278/default-deny-rules-still-being-logged-with-setting-off
"Default Deny" from My Computer to Multicast Log Entries: https://forum.netgate.com/topic/138293/default-deny-from-my-computer-to-multicast-log-entries

I'm pretty sure the first one is a known problem that will be fixed in 2.4.4_1 or 2.4.5. But, I've got no idea what's happening with the other two. All of these are logging related (along with this one). But, unless I'm just seeing things wrong with those last two, I can't understand why they're happening (they ought to be trivial). So, I'm wondering if I've managed to break something.

jimp

@beremonavabi said in Reset States In 2.4.4:

I'm hoping the message doesn't matter at all. I'm wondering if I've managed to break something since I didn't get the message before (I'm changing a lot of stuff).

It doesn't matter. That's nginx failing to write back to your browser, and failing because the state was removed when you reset the state table. Normal and unavoidable.