Page 1 of 1

Yeat another Firewall Issue ( Vicibox 10)

PostPosted: Mon Apr 25, 2022 3:52 pm
by covarrubiasgg
Hey Kumba!

Is great that the VB-firewall.pl script is already fixed.

After a new Vicibox Installation. I run

Code: Select all
zypper ref && zypper up


and enable the cron setting

Code: Select all
* * * * * /usr/bin/VB-firewall --voipbl --noblack --white --dynamic  --flush --quiet



The Dynamic Firewall was not working. Once I logged into the dynamic firewall, my IP was successfully loaded into the dynamic-list. But despite that, the firewall is not letting me in.

It looks like the firewall rules that allows the ip sets are missing.

My workaround was to copy /etc/firewalld/zones/public.xml from a Vicibox 9.0.3


Here is the file in case it helps someone : https://pastebin.com/5f4fcma8


I'm not sure if this is indeed a missing configuration on Vicibox or if there is any additional step that I'm missing

P.S. The "Yet another" in Spanish sounds like a complain, but as far as I understand is not the same in English. I used the Yet Another not as a complain, but to let you know this is a different issue.

Re: Yeat another Firewall Issue ( Vicibox 10)

PostPosted: Tue Apr 26, 2022 12:25 pm
by carpenox
you can not use --noblack settings with --white or dynamic, you need to remove that trigger and --voipbl

Re: Yeat another Firewall Issue ( Vicibox 10)

PostPosted: Thu Apr 28, 2022 1:49 am
by covarrubiasgg
Got the same result if I remove those options. I need to add the public.xml from Vicibox 9.0.3 in order to get Vicibox 10 working.

Re: Yeat another Firewall Issue ( Vicibox 10)

PostPosted: Mon May 02, 2022 9:12 pm
by Kumba
Just updated vicibox-firewall to include the dynaliclist ipset in the 'external' zone. You should be able to pull in this update by doing a 'zypper up' in vicibox.