Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 03-17-2007, 10:50 AM
Suppentrulli's Avatar
Senior Member
 
Join Date: Feb 2002
Location: Munich, Germany
Posts: 273
Default [7.002] DHCP-Bug

Once again... i already mentioned this bug some time ago, but i still can't find in in the V7-KIL.

It is not possible to change the "DHCP-Server" for an existing static mapping. After saving, the dhcp-interface is still the same as before.
__________________
ASG 7.504: Via Esther 1GHz, 1GB RAM, 40GB SATA, 3x RTL-8139 (daughter-board) + Via VT6102 (onboard)
Reply With Quote
  #2 (permalink)  
Old 03-20-2007, 08:05 PM
Member
 
Join Date: Mar 2006
Posts: 98
Default what have you done

is the other interface a different segment? have you released and renewed? more details would be good. i have changed static mappings to different subnets many times on 7.002
Reply With Quote
  #3 (permalink)  
Old 04-01-2007, 08:47 PM
Suppentrulli's Avatar
Senior Member
 
Join Date: Feb 2002
Location: Munich, Germany
Posts: 273
Default

sometimes it works, sometimes not.

I have two internal networks (internal, dmz), each one is connected to my asg and for my clients there are five static mappings defined, four internal clients and one dmz client. Now moving a client-mapping from one network to the other is in nearly all cases not possible. I use "edit", change the "DHCP Server" and enter an unused IP-Address (from the new network) - but asg saves only the new ip-address, the "DHCP Server" stays the same.

It's reproducable...
__________________
ASG 7.504: Via Esther 1GHz, 1GB RAM, 40GB SATA, 3x RTL-8139 (daughter-board) + Via VT6102 (onboard)
Reply With Quote
  #4 (permalink)  
Old 04-06-2007, 08:49 AM
Suppentrulli's Avatar
Senior Member
 
Join Date: Feb 2002
Location: Munich, Germany
Posts: 273
Default

After trying it again, my dhcp-log is full with this text:

Code:
2007:04:06-10:47:30 (none) dhcpd: Internet Systems Consortium DHCP Server V3.0.3 
2007:04:06-10:47:30 (none) dhcpd: Copyright 2004-2005 Internet Systems Consortium. 
2007:04:06-10:47:30 (none) dhcpd: All rights reserved. 
2007:04:06-10:47:30 (none) dhcpd: For info, please visit http://www.isc.org/sw/dhcp/ 
2007:04:06-10:47:30 (none) dhcpd: /etc/dhcpd.conf line 84: host REF_KOkqrXfKwu: already exists 
2007:04:06-10:47:30 (none) dhcpd: } 
2007:04:06-10:47:30 (none) dhcpd: ^ 
2007:04:06-10:47:30 (none) dhcpd: Configuration file errors encountered -- exiting 
2007:04:06-10:47:30 (none) dhcpd: 
2007:04:06-10:47:30 (none) dhcpd: If you did not get this software from ftp.isc.org, please 
2007:04:06-10:47:30 (none) dhcpd: get the latest from ftp.isc.org and install that before 
2007:04:06-10:47:30 (none) dhcpd: requesting help. 
2007:04:06-10:47:30 (none) dhcpd: 
2007:04:06-10:47:30 (none) dhcpd: If you did get this software from ftp.isc.org and have not 
2007:04:06-10:47:30 (none) dhcpd: yet read the README, please read it before requesting help. 
2007:04:06-10:47:30 (none) dhcpd: If you intend to request help from the dhcp-server@isc.org 
2007:04:06-10:47:30 (none) dhcpd: mailing list, please read the section on the README about 
2007:04:06-10:47:30 (none) dhcpd: submitting bug reports and requests for help. 
2007:04:06-10:47:30 (none) dhcpd: 
2007:04:06-10:47:30 (none) dhcpd: Please do not under any circumstances send requests for 
2007:04:06-10:47:30 (none) dhcpd: help directly to the authors of this software - please 
2007:04:06-10:47:30 (none) dhcpd: send them to the appropriate mailing list as described in 
2007:04:06-10:47:30 (none) dhcpd: the README file. 
2007:04:06-10:47:30 (none) dhcpd: 
2007:04:06-10:47:30 (none) dhcpd: exiting.
__________________
ASG 7.504: Via Esther 1GHz, 1GB RAM, 40GB SATA, 3x RTL-8139 (daughter-board) + Via VT6102 (onboard)
Reply With Quote
  #5 (permalink)  
Old 04-08-2007, 06:13 PM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,359
Default

Can you open a support ticket?

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #6 (permalink)  
Old 04-09-2007, 11:56 AM
Suppentrulli's Avatar
Senior Member
 
Join Date: Feb 2002
Location: Munich, Germany
Posts: 273
Default

I don't think so, i'm a homeuser 'only'
__________________
ASG 7.504: Via Esther 1GHz, 1GB RAM, 40GB SATA, 3x RTL-8139 (daughter-board) + Via VT6102 (onboard)
Reply With Quote
  #7 (permalink)  
Old 04-10-2007, 04:35 AM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,359
Default

Well, you could try I guess, via the my.astaro.com portal.

Also, you can try emailing support@astaro.com iirc.

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #8 (permalink)  
Old 04-11-2007, 06:17 PM
Member
 
Join Date: Mar 2006
Posts: 98
Default more info

there would be more to it than just changing the pointers. I am assuming that your 2 networks are served by 2 different NICs, correct? If so, I would also assume that you have 2 independant switches tied to those nics. You need to reassign the hardware connections before you change the settings in your router... i would assume. I cant imagine what kinds of errors you would get if you were trying to get serviced from a segment you arent even attached to. Is this possibly your problem?
Reply With Quote
  #9 (permalink)  
Old 05-30-2007, 11:53 AM
Junior Member
 
Join Date: Aug 2005
Location: Pakistan
Posts: 20
Default DHCP issue via bridge

Hi there,
I've got a similar problem. My "DMZ" and internal network is on a bridge on the same network. I am using 7.004. I can't use dhcp relay as it requires 2 interfaces and it doesn't except a bridge interface twice. At the moment i have a backend rule to allow all traffic between the interface. We are in testing phase so DMZ is not completely protected by packet filter yet. I need to resolve this issue. If anyone has any idea how to resolve this issue, kindly let me know.
Regards,
Bilal.
Reply With Quote
  #10 (permalink)  
Old 05-31-2007, 09:35 PM
Suppentrulli's Avatar
Senior Member
 
Join Date: Feb 2002
Location: Munich, Germany
Posts: 273
Default

@Bilal: that is not similar to my first mentioned problem, sorry...

@coscraze: no, that is not my problem. My problem is/was, that i just moved a client to another segment that is connected to the firewall too. for this reason i had to change the dhcp-mapping, but asg did not save the records new interface. i had to delete and add it again. => just a small bug.

but nobody from astaro seems to be interested in bugs (that is my impression during the last months), so i stopped describing them in this forum, although there are A LOT OF bugs in 7.004:

=> POP3-proxy with prefetch: did never work...
=> End-user-portal: i get a lot of server-500 errors...
=> HTTP-proxy: sometimes just don't work! or it blocks uncategorized website although "Block uncategorized websites" is switched off...
=> Site2site-VPNs: i got 3 tunnels, from time to time (after a week or more) they stop working. only reboot helps, logs are empty

in general 7.004 is NOT a stable release, it is beta-software. and if astaro would participate more in this forum, i would test a lot more but at the moment i am just a bit frustrated
__________________
ASG 7.504: Via Esther 1GHz, 1GB RAM, 40GB SATA, 3x RTL-8139 (daughter-board) + Via VT6102 (onboard)
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 03:08 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.