[SOLVED] Update to 16.7.9 broke Plex remote access

[StyxX045]

The Firewall is running as a VM on ESXI
Did not take ANY snapshot, what could possible go wrong 

Universal Plug and Play is enabled on the firewall and
using "DNS resolver" with "Custom options"
--------------
server:
private-domain: "plex.direct"
--------------

IDS is running with IPS and virtually all the rulesets enabled and set to "drop"
Tried disabling IDS, rebooting, reinstalling IDS, restarting DNS and Plug and Play without any luck.

Reinstalling 16.7 and importing settings, solved the problem.
Direct upgrade from 16.7 to 16.7.9 brought the problem back.
Now running 16.7 and not upgrading....yet

Is it possible to upgrade to a specific version, say 16.7.8?,
i am pretty sure it happened updating from 16.7.8 to 16.7.9

Overall very happy with OPNsense, keep up the good work

[franco]

Hi there,

You can upgrade to 16.7.8 like this from the console:

# opnsense-update -sn "MINT\/16.7.8\/OpenSSL"

Then run console menu option 12.

As far as breaking changes: we modified the UPnP service integration and added a fix for Unbound resolver binding in case the interfaces are set to "all".

Let's find out which it is.

Resolver instant patch apply:

# opnsense-patch a98f163a

(running the command again will undo the patch)

Restart resolver (reconfigure or reboot) to see if it still works.


Cheers,
Franco

[franco]

I just remembered UPnP was done mostly in 16.7.8, not 16.7.9.

We only keep a small number of older packages around. At the moment that is 16.7.6 to 16.7.8.

[StyxX045]

Hi franco,

You are right, 16.7.8 is where it happens, i Updated from 16.7 to 16.7.7 without any ill effects.

1. I then updated to 16.7.8
2. Installed patch and rebooted
3. Uninstalled patch and rebooted
4. Updated to 16.7.9
5. Installed patch and rebooted

None of the above steps, changed anything as far as i can see.

Any next steps, i could try?

Screenshots, logfile, etc?

Regards StyxX045

[franco]

Hi StyxX045,

Ok, I need a /tmp/rules.debug from 16.7.7 and 16.7.8 to compare. It is an issue with the rules order, but must see to be sure.

Send them to franco AT opnsense DOT org


Thanks,
Franco

[StyxX045]

Running the latest and greatest

Fix from franco
-----------------------------------------------------------------
https://github.com/opnsense/core/commit/8e01375

You can try this one on 16.7.8 or 16.7.9 with:

# opnsense-patch 8e01375

It needs a "save" from the UPnP service page to apply.

Cheers,
Franco
--------------------------------------------------------------

[franco]

Thanks for all the help. This will be included in 16.7.10.