Hallo, wir betreiben eine Endian mit 2 Uplinks.
auf dem Main-Uplink haben wir eingestellt dass wenn dieser ausfällt dann sollte auf den 2ten Uplink umschalten - leider funktioniert das nicht so wie gewünscht... sobald wir den ersten Uplink ausstecken wird nicht auf den zweiten umgeschaltet - bzw. es dauert lange bis das "umschaltet"
muss man noch irgendwo anderes eine Einstellung vornehmen dass das funktioniert?
danke für evtl. Hilfe

klaun

Hello,

Im seeing this in the system logs after starting snort, how would you go about resolving this issue? Here is the list of flowbits not checked.

   2021-08-29 13:51:31   snort (12132) +++++++++++++++++++++++++++++++++++++++++++++++++++
System   2021-08-29 13:51:31   snort (12132) Initializing rule chains...
System   2021-08-29 13:51:31   snort (12132) /var/signatures/snort/processed/auto/3coresec.rules(7) threshold (in rule) is deprecated; use detection_filter instead.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.Tesch" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.koobfacecheck" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.HTA.Download" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.applephish" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.DROPIP" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "et.GENOME.AV" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.zipfile" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.IRC.BOT.CntSOCPU" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "http.dottedquadhost.gz" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.Multimedia.Download" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET..in.http" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.Anunanak.HTTP.1" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ETPRO.Microsoft.Excel" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.MP4.Download" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "http.dottedquadhost.docx" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ETPRO.njratgeneric" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.genericphish_Tesco" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.Cryptocurrency_Phish" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.SecondaryFlash.Req" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "http.dottedquadhost.rar" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "ET.TorIP" is set but not ever checked.
System   2021-08-29 13:51:34   snort (12132) flowbits key "http.dottedquadhost.vbs" is set but not ever checked.

Hi,
I can not setup a 2. connection. If try to add a new connection. the new entry is not showing up under connections.

Hi,
I have a running tunnel between 2 endian community editions. everything works.
Now I tried to use IKE2 function to use multiple subnets. but the endian gui is not storing the second subnet.

Does Anybody knows the process to manually upgrade Clamav?  

Hello,

I've recently installed the newest version of the EFW community edition, after install when trying to boot I'm prompted with a grub cli declaring that no such device exists. I've installed to an NVM drive, is this possibly a UEFI/Legacy mode issue?

Thanks

I am sadden, 590 views and no taker. I really wanted to try this out but could not figure out the proper IOT VLAN setup with firewall rules.

Hello, I'm using version 3.2 and cannot access the Web GUI. And I get a notification:

The following error was encountered:

 Connection Failed

The system returned:  (110) Connection timed out

Any help? Thanks!

New to Endian. I have been using ClearOS and Mikrotik.
I'm setting up Endian Community in my x86 PC which has 2 NICs. So, one eth0 is setup for WAN/external and other eth1 is my LAN port. I went thru the default installation and I have a working router with just LAN.

I want to set up a VLAN for my IOT and isolate it from LAN access. Doesn't matter if LAN has access to VLAN or not.

When I tried to create the VLAN I lost access.
Any help with a quick and simple steps to accomplish this is appreciated.

LAN:192.168.4.0/24
VLAN:10.0.20.0/24
Unifi 8-port switch: Tagged and untagged traffic ( it's already setup and working).

Solved:

(from endian site)

For versions 3.2.1 and above:
1 – Enter the email address you used to register in the final step of the setup wizard. If you accidentally skipped this step you can still go to System->Updates in the menu and enter your email address there.
2 – Connect to your firewall via SSH (on Windows you may use putty).
3 – Run efw-upgrade.
There is no GUI implementation in previous versions. Therefore you will need to connect to your firewall via SSH already at the beginning.

Bye

Marco!