OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Latest 18.7.6 selective states kill seems broken
« previous next »
  • Print
Pages: [1]

Author Topic: Latest 18.7.6 selective states kill seems broken  (Read 2416 times)

bb-mitch

  • Newbie
  • *
  • Posts: 21
  • Karma: 2
    • View Profile
Latest 18.7.6 selective states kill seems broken
« on: November 05, 2018, 07:09:51 am »

In my configuration, I have two hosts using HA/CARP.

On primary / carp master, go to Firewall -> Diagnostics -> States Dump

Filter on an IP. Press Kill.

Refilter on the same IP, the states do not seem to be cleared.

Pressed X on each state, and then filter on the same IP.

The states do not seem to be cleared.

I took the host in question offline. Repeated the process. I did this to ensure the host was not re-establishing the states before I could see them deleted.

So then I complete reset the states with Firewall -> Diagnostics -> States Reset

Now the states are gone. I haven't had to do this often, but I'm pretty sure this worked properly in 18.1.x - is there something wrong with my procedure?

Thanks!

M
Logged

bb-mitch

  • Newbie
  • *
  • Posts: 21
  • Karma: 2
    • View Profile
Re: Latest 18.7.6 selective states kill seems broken
« Reply #1 on: November 07, 2018, 01:38:50 am »
Can anyone confirm / deny?
If I kill off a state, it doesn't seem to be removed, but killing all states does work.
Will upgrade another router currently not in an HA set and see if I can duplicate the findings there.
Thanks!
Logged

The_Sage

  • Newbie
  • *
  • Posts: 48
  • Karma: 6
    • View Profile
Re: Latest 18.7.6 selective states kill seems broken
« Reply #2 on: January 08, 2019, 06:39:44 am »
Same Here.
Filter -> KILL (click on X) then re filter, still there.
Any suggestions ?
Logged

franco

  • Administrator
  • Hero Member
  • *****
  • Posts: 13988
  • Karma: 1211
    • View Profile
Re: Latest 18.7.6 selective states kill seems broken
« Reply #3 on: January 08, 2019, 08:06:08 am »
This should do the trick for 19.1, but it doesn't patch on 18.7 at the moment:

https://github.com/opnsense/core/commit/5a95ccfef3

The issue seems to be that some states have direction "in" where srcip and dstip needto be reversed for the removal on the command line. It's more of a GUI convenience trick that causes the tool underneath to break. Everything else on that page works including removing "out" states.


Cheers,
Franco
Logged

  • Print
Pages: [1]
« previous next »
  • OPNsense Forum »
  • Archive »
  • 18.7 Legacy Series »
  • Latest 18.7.6 selective states kill seems broken
 

OPNsense is an OSS project © Deciso B.V. 2015 - 2023 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2