NGFW v14.0.0 available!

[jcoffin]

Select the 3.16 kernel at boot as that is the same kernel as 13.2.1. I would start by diagnosing the DNS on the WAN. Can you ping the DNS server used in the WAN settings?

Is this custom hardware? If so can you describe it?

[Bollar]

Select the 3.16 kernel at boot as that is the same kernel as 13.2.1. I would start by diagnosing the DNS on the WAN. Can you ping the DNS server used in the WAN settings?

Is this custom hardware? If so can you describe it?

Thx.

If I boot into 3.16, I get this line "Linux untangle.xx.com 3.16.0-4-untangle-amd64 #1 SMP Debian 3.16.7-2untangle7 and eventually the Untangle admin screen. Network devices don't work (as described above).

From recovery tools, I can ping the DNS server 208.67.220.220 and IPs on the LAN.

From the GUI, I get errors that say the DNS server (208.67.220.220) fails to resolve

The hardware is:

 QOTOM Q190G4-S02

Intel Celeron Processor J1900 (Quad-Core 2M Cache ,2 GHz, up to 2.41 GHz)
4 Intel Gigabit LAN, VGA, 3x USB 2.0 ports, 1x USB 3.0 port
Samsung 850 EVO - 250GB - mSATA Internal SSD (MZ-M5E250BW)
Crucial 8GB Single DDR3L 1600 MT/s (PC3L-12800) SODIMM 204-Pin Laptop Memory (CT102464BF160B)

Since I can ping WAN & LAN from recovery tools, but GUI can't access, it feels like something's up with the bridge in 14?

I rebooted to the newer kernel and let it sit for several minutes and the untangle screen eventually came up. I configured a client to connect manually and it was able to connect to https://10.0.0.1 it is also able to ping 8.8.8.8, 1.1.1.1 and 208.67.220.220 so perhaps it's as simple as DNS/DHCP services not being available on the NGFW server?

[Bollar]

SOLUTION:

I have the following dnsmasq code

# NTP Server
dhcp-option=42,10.30,0,10

Removing it allows NGFW to function properly, but I'm unsure why this entry causes a problem in 14 and not 13.2.1. Any ideas?

[jcoffin]

Probably changes in Debian 9 and systemd. I'll look into it. Thanks for the update.

[jcoffin]

dhcp-option=42,10.30,0,10 does not look valid since an IP address is expected after the 42 option.. Do you mean dhcp-option=42,10.30.0.10 ?

[Bollar]

dhcp-option=42,10.30,0,10 does not look valid since an IP address is expected after the 42 option.. Do you mean dhcp-option=42,10.30.0.10 ?

That was a cut and paste from what was in the box. Either it's been wrong all along and didn't matter in 13.2.1, or it got corrupted at the upgrade. I suppose an older backup would answer the question?

[jcoffin]

It could be that older dnsmasq ignores invalid syntax. Either way, it's not valid.

Main reason for the warning in that window.
Warning: Invalid syntax will halt all DHCP & DNS services

[jcoffin]

Looks like it was invalid before the upgrade. The reboot during the upgrade re-validated the DNSMasq options. If your original format was used, the same issue happens if 13.2 reboots.

[yotefn]

The 32-bit ISO doesn't fit on a CD (it's 729MB) but the 64-bit one does.

Is it deliberate that the 32-bit version isn't offered on the home page anymore?

[dmorris]

Is it deliberate that the 32-bit version isn't offered on the home page anymore?

Yes, i386 support will be dropped upstream in the future.