packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0

firefox

I did an update from pfsense 2.5.2 to pfsense 2.6.0
The update has passed
But some of the packages do not work for some reason

These packages do not work

avahi 	Avahi mDNS/DNS-SD daemon
c-icap 	ICAP Interface for Squid and ClamAV integration
clamd 	ClamAV Antivirus
snort 	Snort IDS/IPS Daemon
squid 	Squid Proxy Server Service
squidGuard 	Proxy server filter Service

How can I know what the problem is?

Robert_Knabe

@firefox
Hi,
i also use the Snort package and it seems to work. At least the service runs and there are entries in the Alerts and Blocked lists.
But i have trouble with the Backup package (s. https://forum.netgate.com/topic/169938/backup-package-causes-crash-report-in-pfsense-2-6-0). The backup file seems to be generated, but then the download fails.
Kind regards
Robert

bmeeks

@firefox said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

I did an update from pfsense 2.5.2 to pfsense 2.6.0
The update has passed
But some of the packages do not work for some reason

These packages do not work
avahi 	Avahi mDNS/DNS-SD daemon
c-icap 	ICAP Interface for Squid and ClamAV integration
clamd 	ClamAV Antivirus
snort 	Snort IDS/IPS Daemon
squid 	Squid Proxy Server Service
squidGuard 	Proxy server filter Service
How can I know what the problem is?

You can check the system log for any messages that may have been logged about those packages. ALWAYS check the logs when something is not right on the firewall. Those will be your first clue!

As for Snort, try removing the package and then reinstalling it under SYSTEM > PACKAGE MANAGER. You will not lose any settings by removing it. They are maintained unless you explicitly uncheck a box to remove them.

You can also try the remove and reinstall trick for the other packages you have an issue with.

firefox

@bmeeks
Which tab to check?

bmeeks

@firefox said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

@bmeeks
Which tab to check?

Why are you saying Snort is not working? I see nothing but Snort alerts in that system log output. It sure seems to be working to me.

You are on the correct tab, but I did not realize you had configured Snort to send all alerts to your system log. Is there a particular reason you are doing this, like maybe sending the logs to a remote syslog server? If not, then you should turn off Snort logging to syslog so other messages don't get lost in the Snort log noise.

firefox

@bmeeks
I see it
But in Snort's tab you see something else

I tried to reinstall the packages
But it keeps getting stuck

It stays that way for 12 hours
And did not reinstall

bmeeks

I think you have stuck zombie processes running on your box. That certainly seems to be the case for Snort. It is actively showing alerts in syslog (and probably on the ALERTS tab if you look there), but the process that is running does not have a matching PID file in /var/run/, thus the GUI status shows as "not running".

Reboot the firewall. Then when it comes back up, go to SYSTEM > PACKAGE MANAGER and delete the Snort package. When that finishes, reinstall it. That should fix Snort.

Your second screenshot is from Squid. I don't maintain that package, so I can't help you there. But doing the same thing (removing it and then reinstalling it) should work there. The first thing to do is reboot the firewall to be sure any extran pkg or snort processes are stopped.

firefox

@bmeeks
I did a removal and it got stuck in this situation

bmeeks

@firefox said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

@bmeeks
I did a removal and it got stuck in this situation

That messsage indicates it is trying to download the Snort rules. That can take a few minutes depending on your connection speed and where you are in the world. Also, those rules are hosted on AWS infrastructure. The Snort rules download URL will redirect to an AWS server. There have been cases in the past where other packages users are running like squid, squidguard, or pfBlockerNG have blocked the access to the AWS server or otherwise interfered with the download.

At the very least, if it can't find the AWS host to get the rules, it should evenutally timeout and continue with the install.

firefox

@bmeeks
I did reinstall the package again
And I left the computer for two hours
And it's done and everything's working now

parry

I have a perfectly good version of pfsense 2.5.2 working but decided to try 2.6 on another box,
After a fresh install, I tried to install any number of packages, but all responded with the same "Current pkg repository has a new PHP major version. pfSense should be upgraded before installing any new package." Does this mean 2.6 is no longer supported ? I suspect that this is a php version issue, but would appreciate any support that can help resolve this issue. Thanks,

parry

@parry said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

Current pkg repository has a new PHP major version. pfSense should be upgraded before installing any new package."

Whoops - found this https://forum.netgate.com/topic/172356/can-i-rebuild-the-pkg-database-without-installing-updated-packages. And it worked

Or i seem to remember a tip from the 2.4.x days.
Switch your System --> Update Branch , to the "Beta" , and switch it back ....
Dont do the update , just the switching.
Should supposedly download the "new" package DB , for each switch.

bmeeks

@parry said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

I have a perfectly good version of pfsense 2.5.2 working but decided to try 2.6 on another box,
After a fresh install, I tried to install any number of packages, but all responded with the same "Current pkg repository has a new PHP major version. pfSense should be upgraded before installing any new package." Does this mean 2.6 is no longer supported ? I suspect that this is a php version issue, but would appreciate any support that can help resolve this issue. Thanks,

You have to reset the package repo under SYSTEM > UPDATE, but I'm not sure that a version older than 2.7.1 will be showing there. Typically it allows selection of the current RELEASE, the upcoming DEVELOPMENT version, or the PREVIOUS STABLE version. PREVIOUS STABLE in the case of 2.7.2 would be 2.7.1.

Why not install the current 2.7.2 version of pfSense?

johnpoz

@parry said in packages do not work after update from pfsense 2.5.2 to pfsense 2.6.0:

Does this mean 2.6 is no longer supported

2.6 is no longer supported

https://docs.netgate.com/pfsense/en/latest/releases/versions.html