Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 19 replies
  • Subscribers 2 subscribers
  • Views 2621 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Problem after 7.008 Up2Date

fr76
Hi,

We upgraded from version 7.007 to version 7.008 today. After starting of the up2date it eventually froze the firewall and crashed out. 

After some time we restarted the firewall via the power switch.

Since the restart one of the ports on the firewall does not seem to passing any traffic at all.

We cannot get out to the internet either and can only ping certain parts of the network.

I have restarted the hardware several times to no effect.

Looks like we will need to reinstall a previous version and then restore a backup.

Currently we have an ASG 220 appliance which was running 7.007 and now isnt running 7.008.

Does anyone have any other ideas apart from a total rebuild?


This thread was automatically locked due to age.
Parents
  • 0
    Apparently some 220's have been having issues with 7.008.  Those issues range from services dying (like mine), to crashing issues, to configs being wiped during the update.
     
    What I know is that this morning they put out a new version of 7.008 to solve some issue and that 7.009 should be out by tomorrow morning to fix some other problems with the original 7.008.
     
    Since rebooting doesn't help, I would suggest starting a support incident with Astaro for your problem so they can look at the logs.  Be aware that due to the huge volume of support requests that 7.008 caused, they are quite far behind.  It may take much longer than the usual 4 hours or less for gold support.  I got off the phone with one of their engineers about 45 minutes ago and he told me that they still had over 60 tickets in the queue.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Thanks Scott,

    The unit is tottally dead at the moment. I cant get it any response from the web admin and therefore I am not sure how to get either the log files or perform an up2date without webadmin.

    I'm pretty new to the Astaro setup so this is a bit of a nightmare to be honest.

    I will take your advice and raise a support ticket though.
  • 0 in reply to fr76
    Your license info should be available from your my.astaro.com portal.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    after updating from 7.007 to 7.008 i have problems with my web proxy av and content filter.

    dont know where to look.
  • 0 in reply to karabela
    These are known bugs with 7.008.  7.009 is being released today to fix these issues and a couple of others.  Details avaiable at up2date.astaro.com.  7.009 is currently being uploaded to the up2date servers as I type this, so should be ready for download to our Astaro machines soon.
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Don't know if anyone's noticed this yet... I downloaded the 7.009 update from the ftp.astaro.de server, and attempted to manually upload the file... now webadmin doesn't allow one to upload a .tgz.gpg file ... it says the filename should be .tar.gz?  So, for fun, I tried renaming the file.. of course, that didn't work... It appears some developer left a debugging change in the webadmin code turned on, or something to that effect.  So now, I have to wait for an excruciating amount of time for the system to automatically download the up2date, which hopefully will install without issues.

    I started a case on this, in case Astaro is not aware of this new issue.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    Up2Date 7.009
    Remarks:
    Middleware will be restarted
    Active IP and VPN connections will be restarted
    Existing configuration will not be changed
    News:
    This is a bugfix release
    Bugfixes:
    Fix [6859]: Downloads via HTTP Proxy do not work with Internet Explorer
    Fix [6862]: New HTTP exceptions not matching substrings
    Fix [6867]: HTTP Proxy profiles not assigning correctly
    Fix [6869]: Up2date package upload via WebAdmin not possible

     
    Notice fix 6869.  ;P
    __________________
    ACE v8/SCA v9.3

    ...still have a v5 install disk in a box somewhere.

    http://xkcd.com
    http://www.tedgoff.com/mb
    http://www.projectcartoon.com/cartoon/1
  • 0 in reply to Scott_Klassen
    Yeah... I just saw that.  It's ridiculous...

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

  • 0 in reply to BrucekConvergent
    And, did it fix the problems on the ASG's?
  • 0 in reply to BrucekConvergent
    You can use a trick.
    Import that 7.009 stuff as tar.gz and rename it in the /var/up2date/sys  directory back in tgz.gpg. after this i had to upload again the update as tar.gz and then the installation works. 
    but be carefull to do this way, cause i don't know if astaro supports it. for me it is easy to go back, cause i use it in vmware and i can use a copy i've made before if there is a crash [8-)]
    perhaps it is better to wait for an update that works in a correct way
  • 0 in reply to BrucekConvergent
    Hi BrucekConvergent,

    just as hint, you can simple upload 7.009 via SSH.

    "scp u2d-sys-7.009.tgz.gpg loginuser@FW-IP:/tmp/"

    login as root

    "cp /tmp/u2d-sys-7.009.tgz.gpg  /var/up2date/sys/; auisys --showdesc"
  • 0 in reply to lop
    THanks, support just emailed me, telling me to SCP it up to the ASG ... it figures as I started to do just that, the system started downloading the update automatically.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • 0 in reply to lop
    THanks, support just emailed me, telling me to SCP it up to the ASG ... it figures as I started to do just that, the system started downloading the update automatically.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
  • 0 in reply to BrucekConvergent
    Not that the update to 7.008 deleted my config (I was prepared for that thanks to your experiences...), it also removed one NIC!
    I literally have one NIC less than before the update and cannot choose it for configuration purposes. Lucky me I had one spare in my box.
  • 0 in reply to Snova
    can you see it if you do a ifconfig from the shell.  please post what NIC you lost and the make, model, ip range installed etc..
  • 0 in reply to Mike_H
    can you see it if you do a ifconfig from the shell.  please post what NIC you lost and the make, model, ip range installed etc..


    ifconfig shows eth0 to eth2, eth3 is gone. (Well eth3 is now eth2, eth2 is gone)

    Model is 3Com 3C905C-TX-M Chip says 920-BR06, another 3C905B-TX (Chip Parallel Tasking II) is working. IP range was 192.168.4.0/24 on that card, since the 3C905B was unused I put that one in use with the same net.
Cookie Information Banner