Hello,

I can see that over time RAM usage is increasing.
There are many TCP connections in state ESTABLISHED with IP Addresses from already closed VPN Connection.
Is ther a way to force the closing of these TCP Connections ?


Command Show openvpn lists 11 active OpenVPN connections.
But there tcp connections with another 20 ip addresses from already closed VPN Connections, which seems to expire after several days.

Best regards

Juergen

2022, Endian Community 3.3.18 and the warnings still pop up.

Buongiorno, ci sono compatibilià hardware da dover rispettare? non riesco ad installare Endian su un nuovo PC, mi rimane una schermata nera durante installazione
possibile che la scheda madre non sia compatibile? consigli?

grazie.

Hello, I use EFW Community on a board without a video card.
Up to version 3.3.0 I managed everything through the serial port with hyperterminal
I started efw-upgrade up to version 3.3.18.
after reboot the boot process stops on the attached screen

so I can no longer manage it via serial but can only access via web-gui
i checked on the grub parameters but nothing seems to have changed.
where can i check?

Had resolved the issue temporarily by defining local IPs with domains in their respectful hosts files. But how to set NAT loopback in Endian for good?

Hi all.

I have newly installed Endian Community Firewall 3.3.18 and set our VPSs behind it; two of which are a Centos 7 server and a Windows server. Both serve some websites and APIs. After installing and configuring the firewall; both servers can not reach each other through HTTP. Web sites work very well on the browser; there is no port problem.

I open an RDP to the Windows VPS, I open the browser and browse the API URL successfully. But the very same server times out when I try to reach that URL with PHP (cURL or PHP Socket (file_get_contents()). THe same case applies from Centos to Windows too. I open Centos terminal, ping the API URL in Windows server, it is successful. On the very same terminal I try to connect with cURL, but it times out too.

This has become a very immediate problem to us.

What are we missing in configuration of Endian?

What i did was add a rule to allow access on the red zone. Actually it was all zones. i allowed all the ports on any zone. It was simply so i could access using the red zone. I'm going to remove it after i've finished connecting through red zone.

i was wondering if there was an add on or some additional software i can install to make the traffic logs readable to the average person? I'm trying to monitor the traffic that is going through the firewall and I need to send it to someone who doesn't know much about computers. The details need to at least have the webpage visited ,  extras would be nice like time on the website, ip address, etc

Hola, es sensillo: vas a PROXY/DNS/Antis-spyware, lo habilitas y alli tienes 2 ventanas, la de la derecha bloquea dominios, todo lo que figura alli no  a menos que algun usuario tenga cambiados los DNS ejemplo (use los de google 8.8.8..
Tambien tenes otra posibilidad, en la solapa [Network] / Edith Host, alli en el 1er renglon que dice (iP address) pones 127.0.0.1, 2do renglon que dice (Hostname) pones https, y en el 3er renglon que dice (Remark) pones un nombre figurativo que te dirva de referencia, en el renglon de la derecha que esta apartado que dice (Domain name) pones el dominio que no queres que accedan....

Ejemplo:
 
(IP address) 127.0.0.1
(Hostname) https
(Remark) Youtube                  (Domain name) youtube.com

eso hara que nadie ni si quiera con bypass acceda, pues cuando intente navegar a youtube, el mismo redirije al loopback.

espero te sirva

I am able to access GUI locally using GREEN interface IP nut Not able to Access the same over internet using WAN IP ( RED INTERFACE) please help.