Remote upgrade

View: New views
12 Messages — Rating Filter:   Alert me  

Remote upgrade

by Paul McWhinnie :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi

Has anyone tried doing a remote upgrade from 2.1.2 to 2.2 final?

I assume you need to reboot, but other than that do you lose the network
connection at any point during the upgrade?

Thanks


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Remote upgrade

by compdoc :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

You won't lose connection if you ssh directly to the efw
from outside. Doesn't seem as though you have to reboot, but
I always do.

And 2.1.2 to 2.2 works fine, except for a problem I had with
openvpn, which has a fix and is probably now fixed in the
upgrade...



-----Original Message-----
From: Paul McWhinnie [mailto:efw@...]
Sent: Monday, June 01, 2009 5:51 PM
To: efw-user@...
Subject: [Efw-user] Remote upgrade

Hi

Has anyone tried doing a remote upgrade from 2.1.2 to 2.2
final?

I assume you need to reboot, but other than that do you lose
the network
connection at any point during the upgrade?

Thanks


------------------------------------------------------------
------------------
OpenSolaris 2009.06 is a cutting edge operating system for
enterprises
looking to deploy the next generation of Solaris that
includes the latest
innovations from Sun and the OpenSource community. Download
a copy and
enjoy capabilities such as Networking, Storage and
Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user
 

__________ Information from ESET NOD32 Antivirus, version of
virus signature database 4121 (20090601) __________

The message was checked by ESET NOD32 Antivirus.

http://www.eset.com
 


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Remote upgrade

by Paul McWhinnie :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Thanks for that compdoc.

I must say, I'm very impressed with the upgrade ability.

I performed the upgrade remotely over an RDP session tunnelled through
SSH to a PC in green, then an SSH putty session back to the firewall
from there.

Followed the instructions (after doing a backup) to upgrade 2.1.2 to
2.2.  Everything worked fine, no network drop during the process.

Noticed that the firewall website was unavailable after the upgrade, did
a restart of the server.  Cue: 3 minutes of biting fingernails, but all
came back up fine, including http access to admin gui.

There was a few minutes of sluggish network response after the reboot,
but everything is now working fine.

Well done Endian!

compdoc wrote:

> You won't lose connection if you ssh directly to the efw
> from outside. Doesn't seem as though you have to reboot, but
> I always do.
>
> And 2.1.2 to 2.2 works fine, except for a problem I had with
> openvpn, which has a fix and is probably now fixed in the
> upgrade...
>
>
>
> -----Original Message-----
> From: Paul McWhinnie [mailto:efw@...]
> Sent: Monday, June 01, 2009 5:51 PM
> To: efw-user@...
> Subject: [Efw-user] Remote upgrade
>
> Hi
>
> Has anyone tried doing a remote upgrade from 2.1.2 to 2.2
> final?
>
> I assume you need to reboot, but other than that do you lose
> the network
> connection at any point during the upgrade?
>
> Thanks
>
>
> ------------------------------------------------------------
> ------------------
> OpenSolaris 2009.06 is a cutting edge operating system for
> enterprises
> looking to deploy the next generation of Solaris that
> includes the latest
> innovations from Sun and the OpenSource community. Download
> a copy and
> enjoy capabilities such as Networking, Storage and
> Virtualization.
> Go to: http://p.sf.net/sfu/opensolaris-get
> _______________________________________________
> Efw-user mailing list
> Efw-user@...
> https://lists.sourceforge.net/lists/listinfo/efw-user
>  
>
> __________ Information from ESET NOD32 Antivirus, version of
> virus signature database 4121 (20090601) __________
>
> The message was checked by ESET NOD32 Antivirus.
>
> http://www.eset.com
>  
>
>

--
Acceptable use of my email address:
http://www.mcwhinnie.com/acceptable_use.txt

------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: Remote upgrade

by Bugzilla from as@aschiller.de :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

> You won't lose connection if you ssh directly to the efw
> from outside. Doesn't seem as though you have to reboot, but
> I always do.
>
> And 2.1.2 to 2.2 works fine, except for a problem I had with
> openvpn, which has a fix and is probably now fixed in the
> upgrade...
>From what I found, the kernel is updated when you're upgrading from 2.1.x - so
you will have to reboot. Coming from 2.2rc3 there ist no kernel update so in
this case you should not need to reboot.

Greetz,
Andy


------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises
looking to deploy the next generation of Solaris that includes the latest
innovations from Sun and the OpenSource community. Download a copy and
enjoy capabilities such as Networking, Storage and Virtualization.
Go to: http://p.sf.net/sfu/opensolaris-get
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

openvpn issue since upgrade to most recent Endian version?

by Lightningbit @ GMAIL.COM :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi,

Since I've upgraded Endian to the latest version a few weeks ago, today I
was trying to connect through openvpn (from Windows XP client externally)
No changes were made to firewall or openvpn connections

However, from the client, it seems to time out

When I check with tcpdump  on endian : I can see the requests/attempts
coming in

When I check the firewall log on the server, I can see that the incoming
requests from the client are being dropped??

I checked the firewall system access rules, and I can see that ANY source is
allowed to ANY destination on port 1194 (UDP and TCP)

So, I'm out of ideas right now.... it did work flawlessly before the upgrade


Olivier


------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by Lightningbit @ GMAIL.COM :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

The frustration grows :

Did some more testing, it looks like pretty much anything from remote trying
to access the firewall gets dropped
- access to the admin web gui
- ping

Even when all rules are in place to allow the above


-----Original Message-----
From: Lightningbit @ gmail.com [mailto:lightningbit@...]
Sent: vrijdag 19 juni 2009 18:57
To: 'efw-user@...'
Subject: [Efw-user] openvpn issue since upgrade to most recent Endian
version?

Hi,

Since I've upgraded Endian to the latest version a few weeks ago, today I
was trying to connect through openvpn (from Windows XP client externally)
No changes were made to firewall or openvpn connections

However, from the client, it seems to time out

When I check with tcpdump  on endian : I can see the requests/attempts
coming in

When I check the firewall log on the server, I can see that the incoming
requests from the client are being dropped??

I checked the firewall system access rules, and I can see that ANY source is
allowed to ANY destination on port 1194 (UDP and TCP)

So, I'm out of ideas right now.... it did work flawlessly before the upgrade




------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by compdoc :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

What version did you upgrade from? Could you post the *.opvn
file that you use to connect from outside?

Make sure you do not post any passwords or ip addresses, of
course.






------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Open issues in new version?

by sskillin :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hey, does anyone have a list of things that need to be tweaked in the
newest version?  Usually there's things like HAVP that someone will post
a new version for.  Any outstanding issues, like when you do X you get
100% CPU for instance?

Thanks!

Shaun




------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by Lightningbit @ GMAIL.COM :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Hi

It is not just openvpn, I also have the same issue to access the webgui from
the outside (even when that access is turned on)


-----Original Message-----
From: compdoc [mailto:compdoc@...]
Sent: vrijdag 19 juni 2009 20:59
To: efw-user@...
Subject: Re: [Efw-user] openvpn issue since upgrade to most recent Endian
version? --> connection issue

What version did you upgrade from? Could you post the *.opvn
file that you use to connect from outside?

Make sure you do not post any passwords or ip addresses, of
course.






----------------------------------------------------------------------------
--
Are you an open source citizen? Join us for the Open Source Bridge
conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference:
$250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.o
rg
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user


------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by compdoc :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

These don't sound like efw problems. You must have a modem
of some kind: dsl, cable, etc?

Can you configure the modem to place the efw into a DMZ
zone? Usually this is done with an ip address.

Ports are being blocked somewhere...




------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by Lightningbit @ GMAIL.COM :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Efw is connected to the internet directly over cable modem (no DMZ, not
other router or firewall in between, the cablemodem gets a public ip to the
red interface of the efw)

No moves or changes have been done on the efw in the last 4 months except
the upgrade

Openvpn, remote access to the webgui,... all worked without issues before
the upgrade

Again, when I check the firewall log and tcpdump, I see the requests coming
in from the remote IP, they are dropped by efw itself for some reason (I see
the drops in the firewall log



-----Original Message-----
From: compdoc [mailto:compdoc@...]
Sent: zondag 21 juni 2009 18:58
To: efw-user@...
Subject: Re: [Efw-user] openvpn issue since upgrade to most recent Endian
version? --> connection issue

These don't sound like efw problems. You must have a modem
of some kind: dsl, cable, etc?

Can you configure the modem to place the efw into a DMZ
zone? Usually this is done with an ip address.

Ports are being blocked somewhere...




----------------------------------------------------------------------------
--
Are you an open source citizen? Join us for the Open Source Bridge
conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference:
$250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.o
rg
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user


------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user

Re: openvpn issue since upgrade to most recent Endian version? --> connection issue

by compdoc :: Rate this Message:

Reply to Author | View Threaded | Show Only this Message

Your cable company gives you a static ip? Mine doesn't...
 


------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Efw-user mailing list
Efw-user@...
https://lists.sourceforge.net/lists/listinfo/efw-user