Page 1 of 2 12 LastLast
Results 1 to 10 of 19
  1. #1
    Untangler
    Join Date
    Feb 2017
    Posts
    56

    Default IPS wiping my checkboxes, randomly?

    I spend a LOT of time checking off IPS signatures I want - manually - since we can't seem to bulk control the rules.

    A few weeks later I notice everything is unchecked again. Why is this happening? I wonder if my database is corrupted or something? Any tips on a way to possibly investigate this further or something I can do on my end?

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,100

    Default

    Settings are reset on update. It's fixed in v14.
    https://jira.untangle.com/browse/NGFW-11470
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangler
    Join Date
    Feb 2017
    Posts
    56

    Default

    Thanks.

    Updates to what? Untangle itself or the IPS signatures?

    In the short term I would like to know what I could disable to prevent this.

  4. #4
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,100

    Default

    Any IPS update will reset the settings to default. Unfortunately there is no workaround for this bug until v14 is released.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  5. #5
    Untangler
    Join Date
    Feb 2017
    Posts
    56

    Default

    Quote Originally Posted by jcoffin View Post
    Any IPS update will reset the settings to default. Unfortunately there is no workaround for this bug until v14 is released.
    Ok, what's the ETA on v14?

  6. #6
    Master Untangler
    Join Date
    May 2008
    Posts
    740

    Default

    They have a show coming up so maybe they will try to get it done by then. https://forums.untangle.com/announce...l-16-19-a.html

  7. #7
    Newbie
    Join Date
    Jan 2014
    Posts
    9

    Default

    I export and edit in WordPad. I can search for "log": false, and replace with "log": true, and import.
    It's kind of a kludge fix but at least I know if someone is messing with my firewall.

  8. #8
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,100

    Default

    Quote Originally Posted by chasattahoe View Post
    I export and edit in WordPad.
    Don't use WordPad as it can add hidden characters, use Notepad. Frankly logging so many rules will just slow the box and have the majority as false positives. It's best to be selective and only use rules involving your open traffic.
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  9. #9
    Newbie
    Join Date
    Jan 2014
    Posts
    9

    Default

    So, I wrote a macro in excel and import my rules. Fix what I want to fix. Another macro exports to a correctly formatted json file for import. I'm running v13.2 on an amd fx4300 with 4G ram and with over 22k log rules and 8k block rules I'm barely moving the cpu meter, so I think I'm ok.
    Small home network.
    And I did a non edited export from excel and a file compare to make sure my export from excel was correctly formatted json.

  10. #10
    Newbie
    Join Date
    Jan 2014
    Posts
    9

    Default

    The problem with notepad is it doesn't recognize a line feed as needing a carriage return too. It opens a file with no line breaks and is impossible to read. winvi is a good editor for a file with only line feed and is a plain text editor. It will also switch between a hex editor and a plain text editor. I use it to see what's going on with non-printable characters.

Page 1 of 2 12 LastLast

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2