0002667: IDS is not starting if after disable an enable it again

Please see now our new Bugtracker system: JIRA

View Issue Details [ Jump to Notes ]

[ Issue History ] [ Print ]

Project

Category

View Status

Date Submitted

Last Update

0002667

Endian Firewall

GUI

public

2010-02-11 12:36

2011-02-22 09:53

Reporter

aender

Assigned To

peter-endian

Priority

normal

Severity

major

Reproducibility

always

Status

confirmed

Resolution

open

Platform

OS Version

Product Version

2.3

Target Version

future

Fixed in Version

Summary

0002667: IDS is not starting if after disable an enable it again

Description

First time we start IPS/Snort it would be started and shows correct at the dashboard with status ON.

Now we disable Snort and it would be stop and shows a correct status OFF at dashboard.

Now we enable Snort once again. We doesn´t see if it starts or not. Also the status at dashboard still shows OFF. Pressing save and restart button doesn´t change anything.

Also after reenabling Snort the "Automatically fetch SNORT rules" is disabled.

If we enable "Automatically fetch SNORT rules" and do a "save and restart" the gui shows a message that snort would be starting.

Now the status at dashboard is ON.

So i think there would be something wrong within the scripts for starting snort.

Tags

purple

Attached Files

Relationships

Notes
(0003935) peter-endian (administrator) 2010-03-04 23:00	well seems to have multiple issues :/ 1) if snort will be enabled for the first time and there are no rules installed, it will not start and say nothing 2) "update rules now", does not cause snort to start, it must be started manually after download is completed. 3) after some restarts, something unckecks "download rules automatically". If there are no manually uploaded rules, this causes snort not to start due to no rules 4) after some restarts snort remains unmonitored, which causes the dashboard to show that IPS is off 5) when snort was running and it will be disabled restartsnort will be called automatically, which is fine. re-enabling it afterwards does not start restartsnort automatically, but save only the configuration. The user then needs to "save and restart". We need an apply-message here. 6) When that save-and-restart will be done after disabling and re-enabling, restartsnort will not be called nevertheless, because in that case no configuration has been changed (was already saved by re-enabling it). A change (for example changing the update interval) followed by save-and-restart restarts really.

(0004628) lightningbit (reporter) 2010-07-18 13:19	more or less the same issues here (even just after the efw-update today) only when efw is rebooted, the IDS shows started again L.

(0005737) lorenzo-endian (manager) 2011-02-22 09:53	Hello everybody, today, this is the state of the art: 1) solved 2) solved 3) this happen when snort is running, then it is disabled, then one moves to another page and then come back to the snort page; in this case, the checkbox is not flagged anymore 4) cannot be tested now; i will do it asap 5) not solved 6) not solved Cheers Lo

Issue History
Date Modified	Username	Field	Change
2010-02-11 12:36	aender	New Issue
2010-02-16 11:30	luca-endian	Tag Attached: purple
2010-03-04 23:00	peter-endian	Note Added: 0003935
2010-03-04 23:00	peter-endian	Status	new => confirmed
2010-03-04 23:00	peter-endian	Target Version	=> future
2010-03-26 11:41	ra-endian	Target Version	future => 2.3.1
2010-06-07 13:46	peter-endian	Target Version	2.3.1 => future
2010-07-18 13:19	lightningbit	Note Added: 0004628
2011-02-02 09:12	lorenzo-endian	Customer Occurencies	=> 0
2011-02-02 09:12	lorenzo-endian	Assigned To	=> peter-endian
2011-02-18 16:31	ra-endian	Assigned To	peter-endian => lorenzo-endian
2011-02-18 16:31	ra-endian	Status	confirmed => new
2011-02-22 09:53	lorenzo-endian	Note Added: 0005737
2011-02-22 09:53	lorenzo-endian	Assigned To	lorenzo-endian => peter-endian
2011-02-22 09:53	lorenzo-endian	Status	new => confirmed