EFW Support

Support => General Support => Topic started by: UTM_Novice on Wednesday 31 January 2018, 08:48:07 pm



Title: Linux Mint updates being blocked
Post by: UTM_Novice on Wednesday 31 January 2018, 08:48:07 pm
I run a number of Windows and Linux devices on my internal network (as well as VPNs and so on).

Windows updates work as they should, but running the updates from the Linux box (whether via CLI or GUI) fail.

I "think" that rules within the IPS are blocking the traffic, but have no idea which...

Has anyone else had similar issues? If so, how did you troubleshoot, and what did you do to fix the issues, so the Linux machine could continue to fetch updates? (Note that if I disable all IPS rules, the Linux box WILL update - soon as I turn them on again, it won't...something is blocking that traffic).

Endian version is 3.2.4 Community

Thanks in advance.

Michael


Title: Re: Linux Mint updates being blocked
Post by: mmiat on Friday 02 February 2018, 07:50:12 pm
you have outgoing firewall enabled? if you disable it, updates work?


Title: Re: Linux Mint updates being blocked (SOLVED)
Post by: UTM_Novice on Saturday 03 February 2018, 11:57:54 am
you have outgoing firewall enabled? if you disable it, updates work?

What I was doing, in order to get updates to work, was to effectively disable all the IPS rules. (Then re-enable after the update was run). Still, sometimes it pays to read the IPS logs. The logs were telling me that rule 2013504 was being invoked (which relates to Linux APR pkg management, and was enabled by default).
I found that particular rule and disabled it (leaving all other enabled) and it now works...

For other people using/updating Linux through an Endian appliance, take note of that rule, and the one immediately after it (which relates to YUM pkg management) if you have issues updating. You'll find both of them under "Auto Emerging Policy Rules".


Title: Linux Mint updates being blocked
Post by: Bookerboall on Monday 05 February 2018, 01:56:29 am
Is there a eq client for linux? I used to play eq back in the day on a pc, but i dont have any windows machines anymore...