EFW Support

Support => General Support => Topic started by: csaasc on Monday 17 May 2010, 10:54:05 pm



Title: efw-upgrade EFW 2.4?
Post by: csaasc on Monday 17 May 2010, 10:54:05 pm
hi,

endian. com /en/community/efw-23
here 2.4 is announced...but where to download it?

eaven when i try to run the Upgrade script only this happens:

Code:
Please choose the appropriate channel for your environment and hit [ENTER]:
1) Production (stable releases)
2) Development (bleeding edge)
2
Please enter your username and hit [ENTER]:
my email


Loading cache...
Updating cache...               ######################################## [100%]

Fetching information for 'efw-community'...                                    
-> http ://  my email:*@updates. endian.org/ devel/repodata/repomd.xml
repomd.xml                      ######################################## [ 33%]
-> http ://  my email:*@updates. endian.org/ devel/.../filelists.xml.gz
-> http ://  my email:*@updates. endian.org/ devel/.../primary.xml.gz  
primary.xml.gz                  ######################################## [ 66%]
filelists.xml.gz                ######################################## [100%]

Updating cache...               ######################################## [100%]

Channels have 812 new packages.
Saving cache...

Loading cache...
Updating cache...               ######################################## [100%]

Computing transaction...
No interesting upgrades available.


is this normal?


Title: Re: efw-upgrade EFW 2.4?
Post by: csaasc on Tuesday 18 May 2010, 06:12:40 pm
HELLO? didn't anyone read the Page?

Code:
Hello Community,

Endian Firewall Community version 2.4 is now available! This release introduces new features and lots of bugfixes that make EFW 2.4 a significant improvement in the development of the Endian product family.

    * Switch to Enterprise
      If you are using EFW 2.4 and you wish to switch to Endian UTM 2.4, you can now do so by simply pushing a button. The process is completely managed by EFW, ensuring you a safe and effective upgrade.
    * Updates to 2.4
      Updating your EFW 2.3 does not require to install a new system from scratch anymore. Instead, you can update single packages using our dedicated repository.
    * New Kernel
      With the new version of the kernel the number of supported hardware devices - most of all network interface cards - increases significantly. The new kernel also allowed us to fix some known issues.
    * Improved IPsec
      Thanks to the new kernel, IPsec is now more stable and efficient, avoiding malfunctioning that may happen in specific cases.
    * New GUI for the Destination NAT/Port Forwarding module
      A more intuitive and flexible GUI has been developed in order to offer easy configuration for most part of port forwarding options. If you want to define specific rules, the advanced mode lets you control the module in detail.
    * Bugfixes
      Endian Engineers worked hard on fixing bugs of EFW 2.3. Take a look at the complete list of bugfixes in our our bugtracker.

Thank you for your passion that significantly helped us improve EFW: we hope you enjoy the new release!

Your Endian Team


Title: Re: efw-upgrade EFW 2.4?
Post by: mnicolazzo on Tuesday 18 May 2010, 07:46:07 pm
No, I can't even find it!   ???


Title: Re: efw-upgrade EFW 2.4?
Post by: deadmalc on Wednesday 19 May 2010, 12:05:58 am
If you google for endian firewall 2.4 you will find the page.
So this means its coming really soon?


Title: Re: efw-upgrade EFW 2.4?
Post by: mrkroket on Wednesday 19 May 2010, 01:53:21 am
http://bugs.endian.com/roadmap_page.php (http://bugs.endian.com/roadmap_page.php)

Some time ago it was at 93%, now it's again at 90%. I don't think they will release anything soon.
I hope I'm wrong.....


Title: Re: efw-upgrade EFW 2.4?
Post by: deadmalc on Wednesday 19 May 2010, 03:02:12 am
Think you are wrong, well... according to the official blogs 2.4 will be out some time soon...
 ;D


Title: Re: efw-upgrade EFW 2.4?
Post by: leso on Thursday 20 May 2010, 03:05:40 am
Think you are wrong, well... according to the official blogs 2.4 will be out some time soon...
 ;D

the last time , it was 6 months ....


Title: Re: efw-upgrade EFW 2.4?
Post by: mrkroket on Thursday 20 May 2010, 03:55:49 am
(http://www.google.com.mx/images?q=tbn:n6pG4PZ6nPGywM::www.gentew.com/files/BOHEMIAN80%2540YAHOO.ES/I%252520WANT%252520TO%252520BELIEVE.jpg&t=1&h=196&w=156&usg=__9Tdq2Kvw97NaLzm3zJqEsPMKsXU=)


Title: Re: efw-upgrade EFW 2.4?
Post by: deadmalc on Friday 21 May 2010, 01:37:37 am
That page now gives a 404....not sure that means anything


Title: Re: efw-upgrade EFW 2.4?
Post by: ad.aimm on Tuesday 25 May 2010, 06:56:40 pm
hi,

any one has a dead line about this new update ?

regards,

ad


Title: Re: efw-upgrade EFW 2.4?
Post by: mxnerd on Thursday 27 May 2010, 02:35:54 pm
It's available now at  community download!



Title: Re: efw-upgrade EFW 2.4?
Post by: blobbi on Thursday 27 May 2010, 06:16:12 pm
tryed the update script ... but nothing happens :(
some ideas ?


Title: Re: efw-upgrade EFW 2.4?
Post by: maxxer on Thursday 27 May 2010, 07:58:35 pm
interested in this as well...
what's the procedure to upgrade using repos?


Title: Re: efw-upgrade EFW 2.4?
Post by: actaris on Thursday 27 May 2010, 08:40:47 pm
now the script is working: I'm downloading....


Title: Re: efw-upgrade EFW 2.4?
Post by: maxxer on Thursday 27 May 2010, 08:42:42 pm
just by running efw-upgrade?

I tried 1h ago and wasn't working!


Title: Re: efw-upgrade EFW 2.4?
Post by: actaris on Thursday 27 May 2010, 08:45:56 pm
yes, but there is a 403 error on the last file: efw-ipsec-2.4.2-0.endian3.i586.rpm


Title: Re: efw-upgrade EFW 2.4?
Post by: tvriasi on Thursday 27 May 2010, 11:09:09 pm
yep, seems that efw-ipsec-2.4.2-0.endian3.i586.rpm is missing from updates.endian.org/stable/pool/
regards,
 :-\


Title: Re: efw-upgrade EFW 2.4?
Post by: maxxer on Thursday 27 May 2010, 11:22:31 pm
bugs.endian.com/ view.php?id=2916

seems fixed now


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Thursday 27 May 2010, 11:32:10 pm
There was a problem with the permissions for this file. This has now been fixed.


Title: Re: efw-upgrade EFW 2.4?
Post by: tvriasi on Thursday 27 May 2010, 11:43:46 pm
 :-\

regards,


Title: Re: efw-upgrade EFW 2.4?
Post by: phildixon on Friday 28 May 2010, 12:32:46 am
i am running an upgrade from version 2.2 and getting this


Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


any ideas?


Title: Re: efw-upgrade EFW 2.4?
Post by: abacus-micro on Friday 28 May 2010, 12:36:47 am
allready tried to reboot the firewall?


Title: Re: efw-upgrade EFW 2.4?
Post by: itmltd on Friday 28 May 2010, 12:40:24 am
After Christians's fix I upgraded from 2.3 and everything went smoothly. But system does not restart now.
Seems new kernel cannot mount vmware disk.  After 3 trials the system reboots over and over again.
Attached is the screenshot of boot message.


Title: Re: efw-upgrade EFW 2.4?
Post by: phildixon on Friday 28 May 2010, 12:43:03 am
Not tried a reboot yet as its in a production environment. (can do tonight) But it was rebooted less than 10 days ago?

Any other thoughts?


Title: Re: efw-upgrade EFW 2.4?
Post by: actaris on Friday 28 May 2010, 12:45:10 am
the upgrade was succesfoul, I'll try for a  of days on my home firewall ( an Intel D510M0 with 2GB RAM, 16 Gb Compact Flash as SATA Disk, and  an usb to ethernet adapter since the integrated LAN card wasn't recognized from endian ).


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 12:49:42 am
After Christians's fix I upgraded from 2.3 and everything went smoothly. But system does not restart now.
Seems new kernel cannot mount vmware disk.  After 3 trials the system reboots over and over again.
Attached is the screenshot of boot message.

I wish I would have read this post beforehand. I too am running my EFW in a virtual environment and had the same issue, and like a noob, I didn't snapshot my VM before upgrading.

I tried to install the new 2.4 ISO in a new test VM and it would not recognize the LSI Logic Parallel controller.  I had to switch to the BusLogic controller to get the disk to recognize the virtual HD to install. Unfortunately, switching the 2.3 VM to the BusLogic Controller did not help.

Now trying to use the Ubuntu Live CD just to see if I can pull an old backup.


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 12:50:27 am
After Christians's fix I upgraded from 2.3 and everything went smoothly. But system does not restart now.
Seems new kernel cannot mount vmware disk.  After 3 trials the system reboots over and over again.
Attached is the screenshot of boot message.

I guess this is a VMware screenshot?
In this case there seems to be a problem right now if the LSI Logic SCSI Controller is used. Instead try using the BusLogic SCSI Controller.

You can change this by replacing one line in the .vmx file.

Code:
scsi0.virtualDev = "vmxlsilogic"
should be replaced with:
Code:
scsi0.virtualDev = "vmxbuslogic"

Sorry for the inconvenience. We are already working on it.

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 12:55:42 am
After Christians's fix I upgraded from 2.3 and everything went smoothly. But system does not restart now.
Seems new kernel cannot mount vmware disk.  After 3 trials the system reboots over and over again.
Attached is the screenshot of boot message.

I wish I would have read this post beforehand. I too am running my EFW in a virtual environment and had the same issue, and like a noob, I didn't snapshot my VM before upgrading.

I tried to install the new 2.4 ISO in a new test VM and it would not recognize the LSI Logic Parallel controller.  I had to switch to the BusLogic controller to get the disk to recognize the virtual HD to install. Unfortunately, switching the 2.3 VM to the BusLogic Controller did not help.

Now trying to use the Ubuntu Live CD just to see if I can pull an old backup.

Hi,
I could reproduce this problem as you may have seen in my previous post. However, switching to BusLogic worked flawlessly for me. Did you have another problem or did the old problem persist?

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: phildixon on Friday 28 May 2010, 12:57:46 am
just tried an upgrade on our backup system and got the same error even with a reboot?


Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Title: Re: efw-upgrade EFW 2.4?
Post by: abacus-micro on Friday 28 May 2010, 01:00:32 am
I noticed we received the same error when updating from 2.2 to 2.4 :-\


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 01:08:43 am
Same problem persists.  When I switch to BusLogic, I am still getting the same result.  "Kernel Panic - Not Syncing" and then reboots after 10 seconds.

I am running ESXi 4.0.0.

When I open the vmx file, I see:

scsi0.virtualDev = "buslogic" and not scsi0.virtualDev = "vmxbuslogic", but changed it just to test and it didnt make any difference.


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 01:11:27 am
just tried an upgrade on our backup system and got the same error even with a reboot?


Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9

Hello,

Are you trying to upgrade from version 2.2 to 2.4?

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 01:20:44 am
Same problem persists.  When I switch to BusLogic, I am still getting the same result.  "Kernel Panic - Not Syncing" and then reboots after 10 seconds.

I am running ESXi 4.0.0.

When I open the vmx file, I see:

scsi0.virtualDev = "buslogic" and not scsi0.virtualDev = "vmxbuslogic", but changed it just to test and it didnt make any difference.

Ok, this might be a bit trickier then...
Can you download the 2.4 ISO from Sourceforge?
Add the ISO as a CD-ROM drive to the VM and boot from it - when the installer asks you to choose your language you just switch to the 3rd terminal by hitting ALT+F3. You should see a shell now.

In this shell do the following:
Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit

By doing this you will create a new initrd to make sure the buslogic driver is loaded during the boot process. Then remove the CD-ROM from the VM and reboot the system. Please tell me if this helped you.

Christian


Edit: mkinitrd probably will complain about the existing initrd-file. If this is the case just remove /boot/initrd-2.6.27.19-72.e22.img ...


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 01:46:28 am
Same problem persists.  When I switch to BusLogic, I am still getting the same result.  "Kernel Panic - Not Syncing" and then reboots after 10 seconds.

I am running ESXi 4.0.0.

When I open the vmx file, I see:

scsi0.virtualDev = "buslogic" and not scsi0.virtualDev = "vmxbuslogic", but changed it just to test and it didnt make any difference.

Ok, this might be a bit trickier then...
Can you download the 2.4 ISO from Sourceforge?
Add the ISO as a CD-ROM drive to the VM and boot from it - when the installer asks you to choose your language you just switch to the 3rd terminal by hitting ALT+F3. You should see a shell now.

In this shell do the following:
Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkinitrd
exit

By doing this you will create a new initrd to make sure the buslogic driver is loaded during the boot process. Then remove the CD-ROM from the VM and reboot the system. Please tell me if this helped you.

Christian


Edit: mkinitrd probably will complain about the existing initrd-file. If this is the case just remove /boot/initrd-2.6.27.19-72.e22.img ...


Ok, Im a little confused when I get to the mkinitrd command.  When I enter that alone, I get "usage" details and nothing happens.  When I follow the example given, ( mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22 ), I get the error message that the file already exists.

I followed your updated note and deleted the "/boot/initrd-2.6.27.19-72.e22.img" file and reran the command "mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22" and received another error message:

"can't create lock file /var/lock/mtab!1140: No such file or directory (use -n tag to override)"  I dont see where to add the "-n" flag.

sorry for noobness in linux commands.

Also noticed at the bottom of the last error message that is states "/proc filesystem must be available"


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 01:53:27 am
ok... try using mount -n then...

mount -n -t ext3 /dev/sda1 /mnt

also running mkinitrd does not require another parameter

posting the code again:

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 02:02:19 am
ok... try using mount -n then...

mount -n -t ext3 /dev/sda1 /mnt

also running mkinitrd does not require another parameter

posting the code again:

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
mkinitrd
exit

Still getting same message.  Attached is my screenshot from my VM.


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 02:13:24 am
Following those instructions exactly and when I run the mkinitrd command by itself, it doesn't run anything...  just returns usage details.

Below are screen shots of the results when I run those commands


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 02:26:12 am
Ouch..... sorry - my fault....

try using mkinitrd just like described in the screenshot instead...

Code:
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 02:31:21 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Title: Re: efw-upgrade EFW 2.4?
Post by: dsoko on Friday 28 May 2010, 02:34:07 am
I tried the upgrade from 2.2 and also got the following error:

Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Has anyone had any luck resolving this yet?


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 02:44:11 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Seems like a neverending story :-/
One more try...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu -ps --kernel=2.6.27.19-72.e22
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 02:45:40 am
I tried the upgrade from 2.2 and also got the following error:

Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Has anyone had any luck resolving this yet?



Can you try the following?
Code:
smart install efw-base
efw-ugprade -s

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: dsoko on Friday 28 May 2010, 02:52:44 am
Thanks...got the following errors:

root@pomgate:~ # smart install efw-base
Loading cache...
Updating cache...               ######################################## [100%]

Computing transaction...                                                        error: Can't install efw-base-2:2.3.20-1.endian15@noarch: all packages providing efw-mainsite failed to install:
error: Can't install python-2.4.6-18.endian7@i586: no package provides libbz2.so.1
error: Can't install python-2.4.6-18.endian7@i586: no package provides libbz2.so.1



Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 02:55:21 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Seems like a neverending story :-/
One more try...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu -ps --kernel=2.6.27.19-72.e22
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit

Still getting "No module mptspi found for kernel 2.6.27.19-72.e22, aborting"


Title: Re: efw-upgrade EFW 2.4?
Post by: dsoko on Friday 28 May 2010, 02:57:40 am
And then executing "efw-upgrade -s", I answer the questions and immediately get same error as before:
80.6MB of package files are needed. 71.6MB will be used.

Committing transaction...
Preparing...                    ######################################## [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Thanks
Darryl


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 03:13:14 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Seems like a neverending story :-/
One more try...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu -ps --kernel=2.6.27.19-72.e22
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit

Still getting "No module mptspi found for kernel 2.6.27.19-72.e22, aborting"


Hmm... there is one more command that comes to my mind...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
cp /bin/modprobe.conf.sh /mnt/etc/modprobe.conf
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 03:22:48 am
Thanks...got the following errors:

root@pomgate:~ # smart install efw-base
Loading cache...
Updating cache...               ######################################## [100%]

Computing transaction...                                                        error: Can't install efw-base-2:2.3.20-1.endian15@noarch: all packages providing efw-mainsite failed to install:
error: Can't install python-2.4.6-18.endian7@i586: no package provides libbz2.so.1
error: Can't install python-2.4.6-18.endian7@i586: no package provides libbz2.so.1


Ok, seems like there are some dependency issues...
I will try to find out as soon as I can in which order the packages have to be installed... but I cannot give you an exact date on that yet :-/

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: nopyobe on Friday 28 May 2010, 04:35:55 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Seems like a neverending story :-/
One more try...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu -ps --kernel=2.6.27.19-72.e22
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit

Still getting "No module mptspi found for kernel 2.6.27.19-72.e22, aborting"


Hmm... there is one more command that comes to my mind...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
cp /bin/modprobe.conf.sh /mnt/etc/modprobe.conf
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Success! Thank you for all of your help!

If this going to somehow be fixed for future upgrades from 2.3 to 2.4?  I have a few 2.3 firewalls running in VM's.


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 05:51:13 am
Ok, I did that, and it complains that the file exists.  So, I tried to force with the -f flag, and it complained that there was no mptspi module found.  Removed the /boot initrd-2.6.27.19-72.e22.img file and reran without the -f flag and received same error.



Seems like a neverending story :-/
One more try...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu -ps --kernel=2.6.27.19-72.e22
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit

Still getting "No module mptspi found for kernel 2.6.27.19-72.e22, aborting"


Hmm... there is one more command that comes to my mind...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
cp /bin/modprobe.conf.sh /mnt/etc/modprobe.conf
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Success! Thank you for all of your help!

If this going to somehow be fixed for future upgrades from 2.3 to 2.4?  I have a few 2.3 firewalls running in VM's.

Finally! Great to hear... Thank you for all your patience!
We are working on the fixes (actually waiting for them since the system is still compiling) and will release updates soon.

Could somebody make the code sticky somewhere in the forum in the meantime? I don't know how to do that :-/
I think this will help some other people as well...

Code:
mkdir /mnt
mount -t ext3 /dev/sda1 /mnt
cp /bin/modprobe.conf.sh /mnt/etc/modprobe.conf
chroot /mnt
mkdir -p /var/lock
rm /etc/sysconfig/hwinfo
kudzu --kernel=2.6.27.19-72.e22
mkinitrd /boot/initrd-2.6.27.19-72.e22.img 2.6.27.19-72.e22
exit


Title: Re: efw-upgrade EFW 2.4?
Post by: tgra on Friday 28 May 2010, 06:29:14 am
Thanks you for an new version.

I got also some errors when upgrading:


error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9

Any ideas?

Best regards,
Thomas


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 06:30:59 am
Thanks you for an new version.

I got also some errors when upgrading:


error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9

Any ideas?

Best regards,
Thomas

Looks like you were trying to upgrade from version 2.2 - unfortunately this is not yet supported but we are working on it.

Regards,
Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: tgra on Friday 28 May 2010, 06:35:17 am
Dear Christian,

Thank you for your very quick reply! Yes, it is correct that I am using version 2.2. It is option to do a clean installation and then import the backup or is this not supported? I will just wait then for for 2.2 -> 2.4 repos.

Thank you!

Best regards,
Thomas


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 06:59:35 am
You can create a backup with your settings, install version 2.4 and import the backup there.
However, unless you are using an IDE harddisk you might get into trouble during the installation since there are some driver issues I am currently sorting out. If you can wait for a day I'd recommend you do that.

Regards,
Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: tgra on Friday 28 May 2010, 09:23:38 am
Thank! I will wait..

Best regards
Thomas


Title: Re: efw-upgrade EFW 2.4?
Post by: kwolf on Friday 28 May 2010, 10:45:08 pm
Thanks you for an new version.

I got also some errors when upgrading:


error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9

Any ideas?

Best regards,
Thomas

Looks like you were trying to upgrade from version 2.2 - unfortunately this is not yet supported but we are working on it.

Regards,
Christian

Hello!  I too am getting this file conflict errors, however I am trying to upgrade from 2.3 > 2.4.  Any current issues with going from 2.3 to 2.4?

Preparing...                         ################################################ [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Friday 28 May 2010, 11:43:55 pm
Hello!  I too am getting this file conflict errors, however I am trying to upgrade from 2.3 > 2.4.  Any current issues with going from 2.3 to 2.4?

Preparing...                         ################################################ [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9

Hello,

This looks strange to me, as efw-base-2.6.127 .2-1.endian9 is definitely an EFW 2.2 package. How did you install your EFW 2.3?

Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: cpresco on Friday 28 May 2010, 11:50:34 pm
I have also had upgrade from 2.3 -> 2.4 and 2.4 clean install problems.

I am installing/upgrading on a Compaq EVO 800 laptop, 2.4GHz Mobile P4, 1GB RAM, 60GB IDE Drive, onboard Intel 100Mb NIC, PCCard 3com 100Mb NIC.

The 2.3 install finds both the Intel and the 3com NICs without any problems.

The clean 2.4 install does not find the 3com NIC but does find the Intel.

The 2.3 -> 2.4 upgrade does not find the 3com NIC but does find the Intel.

The 2.3 -> 2.4 upgrade has also been performed after a clean 2.3 install.


Title: Re: efw-upgrade EFW 2.4?
Post by: kwolf on Saturday 29 May 2010, 12:15:27 am
Hello!  I too am getting this file conflict errors, however I am trying to upgrade from 2.3 > 2.4.  Any current issues with going from 2.3 to 2.4?

Preparing...                         ################################################ [  0%]
error: file /home/httpd/html/include/jquery.flot.js from install of python-toscawidgets-jquery-0.9.5-7.endian5 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/html/include/serviceswitch.js from install of efw-guilib-2.3.63-0.endian3 conflicts with file from package efw-base-2.6.127.2-1.endian9
error: file /home/httpd/cgi-bin/hosts.cgi from install of efw-dnsmasq-2.3.15-0.endian8 conflicts with file from package efw-base-2.6.127.2-1.endian9


Hello,

This looks strange to me, as efw-base-2.6.127 .2-1.endian9 is definitely an EFW 2.2 package. How did you install your EFW 2.3?

Christian

I upgraded to 2.2 using the instructions that were emailed to me:

#3   If your Endian Firewall Community is older than version 2.2 please run
        root@efw-2:~ # rpm -ivh ttp://updates.endian.org/upgrade.rpm

Run the efw-upgrade script

root@efw-2:~ # efw-upgrade
Please choose the appropriate channel for your environment and hit [ENTER]:
1) Production (stable releases)
2) Development (bleeding edge)
1
Please enter your username and hit [ENTER]:

I of course chose the Production release.  The upgrade went fine with no errors and according to Help the version I am using is 2.3 at least the documentation
included in Help is 2.3.  The web interface changed after the upgrade as well as the addition of routing via the web gui, etc. all seem to be 2.3 version.

EDIT:  Looking at the homepage for my Endian I do see:

Status: Connected: main (0d 1h 52m 5s)  Uptime: 10:12:19 up 1:52, 0 users, load average: 0.36, 0.10, 0.02
Endian Firewall Community release 2.2 (c) 2004-2009 Endian



Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Saturday 29 May 2010, 01:58:39 am
ok, so basically something already went wrong while performing the upgrade from 2.2 to 2.3... :-/
efw-base is definitely from the 2.2 release which is why you see the 2.2 at the bottom of the page...


Title: Re: efw-upgrade EFW 2.4?
Post by: kwolf on Saturday 29 May 2010, 03:35:43 am
ok, so basically something already went wrong while performing the upgrade from 2.2 to 2.3... :-/
efw-base is definitely from the 2.2 release which is why you see the 2.2 at the bottom of the page...

Until I double checked the version, I thought the upgrade went fine.  However, as you say some went wrong.  I would guess at this point a clean install of 2.3 should be done after doing a backup.  Once 2.3 is installed, restore backup and all should be well?
Then perhaps do an upgrade to 2.4.


Title: Re: efw-upgrade EFW 2.4?
Post by: endian-christian on Saturday 29 May 2010, 09:19:18 am
ok, so basically something already went wrong while performing the upgrade from 2.2 to 2.3... :-/
efw-base is definitely from the 2.2 release which is why you see the 2.2 at the bottom of the page...

Until I double checked the version, I thought the upgrade went fine.  However, as you say some went wrong.  I would guess at this point a clean install of 2.3 should be done after doing a backup.  Once 2.3 is installed, restore backup and all should be well?
Then perhaps do an upgrade to 2.4.

I'd recommend you create a backup of your settings, install version 2.4 and then import your backup.
You can download a new ISO I created here (second link contains the MD5 checksum):
http://public.endian.com/christian/EFW-COMMUNITY-2.4-201005280528.iso (http://public.endian.com/christian/EFW-COMMUNITY-2.4-201005280528.iso)
http://public.endian.com/christian/EFW-COMMUNITY-2.4-201005280528.iso-md5sum.txt (http://public.endian.com/christian/EFW-COMMUNITY-2.4-201005280528.iso-md5sum.txt)

The image will be  until tomorrow some time in the afternoon (CET).

Regards,
Christian


Title: Re: efw-upgrade EFW 2.4?
Post by: arminf on Saturday 29 May 2010, 08:24:43 pm
Downloaded installed
- imported backup

Result:
NIC Ports where mixed up after import
CPU 100% most of the time
InterZone FW traffic is still scanned with SNORT if option set to "allow" instead of "allow with IPS"

Lanner FW 7530
Atom N270 1.6 Ghz ht
2 GB RAM
8 GB CF card
4* Intel GigaPorts
2*Intel GigaPorts

--Update
reconfig SNORT
reconfig Network settings (red, blue, green)
go through most of settings and save them.
- reboot

Mine looks good now!


Title: Re: efw-upgrade EFW 2.4?
Post by: thanit on Saturday 29 May 2010, 09:34:45 pm
Hi Christian.
I  cannot enable IPSec VPN because there is no Save button present.
Please help me too.

Regards.
Thanit


Title: Re: efw-upgrade EFW 2.4?
Post by: thanit on Saturday 29 May 2010, 09:42:42 pm
ok, so basically something already went wrong while performing the upgrade from 2.2 to 2.3... :-/
efw-base is definitely from the 2.2 release which is why you see the 2.2 at the bottom of the page...

Until I double checked the version, I thought the upgrade went fine.  However, as you say some went wrong.  I would guess at this point a clean install of 2.3 should be done after doing a backup.  Once 2.3 is installed, restore backup and all should be well?
Then perhaps do an upgrade to 2.4.

I'd recommend you create a backup of your settings, install version 2.4 and then import your backup.
You can download a new ISO I created here (second link contains the MD5 checksum):

The image will be  until tomorrow some time in the afternoon (CET).

Regards,
Christian

The "EFW-COMMUNITY-2.4-201005280528.iso", Is it working for enable IPSec VPN Save button problem or not ?

Regards.
Thanit.


Title: Re: efw-upgrade EFW 2.4?
Post by: ad.aimm on Saturday 29 May 2010, 10:46:47 pm
thanit

i haven't check ipsec but there are severals bugs with other translation than english and FF. so use, english language as default and IE.

regards,

ad.


Title: Re: efw-upgrade EFW 2.4?
Post by: thanit on Sunday 30 May 2010, 12:23:37 am
ad.aimm

The "EFW-COMMUNITY-2.4-201005280528.iso". It works for IPsec VPN  :D

Regards
Thanit


Title: Re: efw-upgrade EFW 2.4?
Post by: maguilera72 on Sunday 30 May 2010, 07:32:54 pm
Hi all,

To it simple, here is a small procedure to upgrade from a 2.3 install and obtain a 2.4.

it worked for me, when i has the USB issues.

Thanks again Endian, your solutions rocks !


Title: Re: efw-upgrade EFW 2.4?
Post by: itmltd on Monday 31 May 2010, 11:50:38 pm
Hello,

Any news on Vmware SCSI controller support ?

Thanks,
Serdar


Title: Re: efw-upgrade EFW 2.4?
Post by: ENatter on Tuesday 01 June 2010, 12:42:34 am
Any news on Vmware SCSI controller support ?

Hello!

Looks like. It install's now also on VM with SCSI-Harddisk.



Title: Re: efw-upgrade EFW 2.4?
Post by: itmltd on Tuesday 01 June 2010, 04:20:36 am
Thanks ENatter,

Upgrade from 2.3 to 2.4 was smooth on vmware. Looks like SCSI controller issues are fixed. Everything is OK now.

Thanks Endian for a great product.