Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.


Topics - thorstenk

Pages: [1]
1
Other modules / Local DNS server not local resolver
« on: May 23, 2017, 04:36:09 pm »
Zentyal 5.0.8

Hi,

the tab Network > DNS says "The Zentyal DNS module is installed and enabled, so only the local DNS server will be used to resolve the queries. [...]". That used to work until Zentyal 5.

Unfortunately with Zentyal 5 the local DNS server is NOT the local resolver - as I can see in resolv.conf - but the DNS servers received via DHCP (DHCP is enabled for the external interface).

In short: Zentyal doesn't overwrite the DNS servers received via DHCP with 127.0.0.1 when the DNS module is enabled.

2
Contributions / Tips&Tricks / Features Requests / Firewall rules deployment
« on: February 02, 2017, 03:35:49 pm »
Hi,

is it possible to deploy (push) firewall rules and network objects so I don't have to enter them manually through the Webadmin GUI?

3
Installation and Upgrades / Error adding static host route
« on: August 19, 2015, 04:39:13 pm »
Trying to add a static host route I receive the following error:
Gateway 1.2.3.4 is already defined in the gateway table. Use a multi gateway rule instead

The command is equivalent to...
Code: [Select]
route add -host 1.2.3.5 gw 1.2.3.4 dev eth01.2.3.4 is the default gateway and 1.2.3.5 is in the same subnet as eth0 (so you normally wouldn't need a route at all as the (MAC) address is resolved via broadcast).

What is a "multi gateway rule" and how can I enter a "multi gateway rule"? Is there another way to enter the non-standard routing entry through Zentyal's admin interface?

This is Zentyal 4.1 development edition.

Thorsten

4
Hi,

I noticed that the iptables output from our firewall shows rules which don't correspond to any Packet Filter rule set in our webadmin interface. The rules in question are

root@gateway ~# iptables --table filter --list
faccept    udp  --  anywhere             192.168.201.1        state NEW udp dpt:domain
faccept    tcp  --  anywhere             192.168.201.1        state NEW tcp dpt:domain
oaccept    udp  --  anywhere             192.168.201.1        state NEW udp dpt:domain
oaccept    tcp  --  anywhere             192.168.201.1        state NEW tcp dpt:domain


The IP address `192.168.201.1` does not match any interface configured on the host. How can I delete those rules?

5
Hi,

since upgrading our Zentyal machine (don't know if it was from 3.2 to 3.5 or from 3.5 to 4.0) we have two "Zentyal Webadmin" services. Both are "system services" - which means that they cannot be edited, renamed or deleted.

One points to our default Webadmin port 444  (we changed it from the default port 443) and the other points to the new default port with nginx (8443). What can we do to delete the "rogue" webadmin service?

For people administering the firewall, this is obviously confusing, because in the firewall rule set, you have to choose a service - and there is no way to distinguish between the correct and the incorrect webadmin service.

6
Installation and Upgrades / no default gateway in `route` output
« on: January 02, 2015, 11:04:16 am »
Hello,

I have configured a default gateway on my Zentyal machine through the web admin interface. This works fine and I can connect to the internet. Nevertheless `route -n` doesn't show any configured default route:

root@gateway ~# route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.191.0   0.0.0.0         255.255.255.0   U     0      0        0 tap0
192.168.200.0   0.0.0.0         255.255.255.0   U     0      0        0 eth1


It's been this way since Zentyal 2.3 on all our boxes so this looks to me as if it "works as designed". Other people noticed it, too: https://forum.zentyal.org/index.php/topic,22344.msg85995.html#msg85995

Does anyone why I can connect to the internet without a - visible - default gateway and the design behind that?

7
Is there a way to update Zentyal and keep the existing configuration? I tried to update from vanilla 2.3.4 (the one that comes with Ubuntu 12.04) to 2.3.24 and via...

add-apt-repository ppa:zentyal/2.3
aptitude update
aptitude safe-upgrade

..and lost (all?) of my configuration. Restore via web interface was not successful and on reboot all network interfaces were "gone" (unconfigured)...

8
Installing or upgrading 2.3 or 3.0 from Zentyal PPA results in lots of "status: Unable to connect to system bus: Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory" errors.

Steps to reproduce:

- install 12.04 server (choose "install a minimal virtual machine" on the start screen with F4)

- install Zentyal via "aptitude install zentyal-core" (no errors)

- try to update your 2.3 install or upgrade to 3.0 via "add-apt-repository ppa:zentyal/2.3" (respectively ppa:zentyal/3.0)

- run "aptitude update" and "aptitude safe-upgrade"

result: lots of "status: Unable to connect to system bus: Failed to connect to socket /var/run/dbus/system_bus_socket: No such file or directory" errors.

9
[Zentyal 2.3.4]

Hello,

when I try to access the Zentyal admin web site with Internet Explorer, I get the message "Warning: Unfortunately Internet Explorer is not yet supported on Zentyal. Please use Firefox instead." and I cannot continue because the user name and password field are greyed out.

When I try to access the admin web site with another browser (say Opera), I get "Warning: You are using a browser which is not Firefox, the only one officially supported. Please, take into consideration that you might face some issues while navigating on Zentyal UI." and I can continue.

I don't think that Internet Explorer will perform worse than Opera in Zentyal so there is no reason to explicitly block Internet Explorer. Please "unblock" Internet Explorer...!

Pages: [1]