Page 1 of 1

Dynamic IPs from Dynamic Agent Portal not working

PostPosted: Mon Jan 03, 2022 7:36 pm
by webudo
I'm running ViciBox 10 (VERSION: 2.14-838a BUILD: 211217-0732)

I followed the Dynamic Agent Portal setup guide included on ViciBox installation manual, but after signing a user on the valid8.php page, the IP address doesn't access HTTPS GUI.
When running the VB-firewall.pl script manually it seems to make the necessary changes, as it confirms the IPs to add to the dynamic list:

Processing DynamicList...
DynamicList found 2 entries in ViciDial
Found 2 IPs for DynamicList
Getting firewall DynamicList entries...
Total 2 IPs in firewall

But when running
#
Code: Select all
firewall-cmd --ipset=dynamiclist --get-entries

I get nothing

Nevertheless if I manually add IPs to the Whitelist, and run
Code: Select all
firewall-cmd --ipset=whiteips --get-entries
I do get the list of IPs, and those IPs are able to access the HTTPS GUI.

I checked that the public interface on my server is assigned to "public" zone on the firewall, so I don't know what else to do.

Please advise.

Re: Dynamic IPs from Dynamic Agent Portal not working

PostPosted: Tue Jan 04, 2022 6:05 pm
by webudo
By checking each ipset's lists I found that the IPs were being added to the wrong ipset (blackips).
I got it working by changing the following lines on VB-firewall.pl:

Code: Select all
$IPBLACK='dynamiclist';
$DYNAMIC=1;
$BLACK=0;


For reference, the original values were:
Code: Select all
$IPBLACK='blackips';
$DYNAMIC=0;
$BLACK=1;

Re: Dynamic IPs from Dynamic Agent Portal not working

PostPosted: Fri Jan 07, 2022 3:45 am
by carpenox
Great postback. This had been a major pain in the ass. You rock