Yeat another Firewall Issue ( Vicibox 10)

[covarrubiasgg]

Hey Kumba!

Is great that the VB-firewall.pl script is already fixed.

After a new Vicibox Installation. I run

Code: Select all

zypper ref && zypper up

and enable the cron setting

Code: Select all

* * * * * /usr/bin/VB-firewall --voipbl --noblack --white --dynamic  --flush --quiet

The Dynamic Firewall was not working. Once I logged into the dynamic firewall, my IP was successfully loaded into the dynamic-list. But despite that, the firewall is not letting me in.

It looks like the firewall rules that allows the ip sets are missing.

My workaround was to copy /etc/firewalld/zones/public.xml from a Vicibox 9.0.3


Here is the file in case it helps someone : https://pastebin.com/5f4fcma8


I'm not sure if this is indeed a missing configuration on Vicibox or if there is any additional step that I'm missing

P.S. The "Yet another" in Spanish sounds like a complain, but as far as I understand is not the same in English. I used the Yet Another not as a complain, but to let you know this is a different issue.

[carpenox]

you can not use --noblack settings with --white or dynamic, you need to remove that trigger and --voipbl

[covarrubiasgg]

Got the same result if I remove those options. I need to add the public.xml from Vicibox 9.0.3 in order to get Vicibox 10 working.

[Kumba]

Just updated vicibox-firewall to include the dynaliclist ipset in the 'external' zone. You should be able to pull in this update by doing a 'zypper up' in vicibox.