On Mo, 2016-09-26 at 07:56 -0500, Lonnie Abelbeck wrote:
> Armin,
Lonnie,

thanks for your quick turnaround!

> The only thing I can think of that would effect external interface
> routing is if the Network tab -> Failover Interface: was enabled.  I
> presume yours is [ none ] ?
Yes, it is!

> Do you have the "adaptive-ban" plugin enabled ?  Possibly a SIP
> misconfiguration is causing an upstream IP to be quickly banned ?
Yes, I'll have that plugin enabled.  No, as I'm having an issue coming
from IFLAN - I'm afraid.

> I can't imagine the AIF function setup_kernel_settings() is causing a
> problem, I have four different flavors of AstLinux boxes on my lab
> bench with the configuration you are describing working great.
Yes it does :)  I've commented out this call from main_start and
main_restart and everything is working - ping, ssh, etc. :)

> Any more clues on your configuration beyond the defaults would be
> useful at this point, like and any user.conf entries, firewall
> plugins enabled, etc. .
user.conf does have the "normal" stuff from AstLinux.org!  No
additional FW rule!
ssh-brute-force, sip-user-agent, ids-protection and adaptive-ban
plugins are enabled!

BTW - do I need to change the firewall.conf?  Or are the settings being
pulled in from 'rc.conf'?

> What is your hardware, if not listed here: Generic x86 Boards and
> Appliances, what is your hardware and NIC's ?
I'm using APU1C from PCengines in x64 mode!

Regards,
Armin.

------------------------------------------------------------------------------
_______________________________________________
Astlinux-users mailing list
Astlinux-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/astlinux-users

Donations to support AstLinux are graciously accepted via PayPal to 
pay...@krisk.org.

Reply via email to