Fw_upgrade version 8.3 release

Hi All

Just sorted some syntax errors on the web filter selection page which now works, thanks to Dave for going through fw_upgrade script and  sorting some typos.

I have included all files needed to help stop any confusion with version 8, 8.1, 8.2 and which files to copy

Instructions

Copy all files over to the Shield into the tmp folder  and make sure they are name correctly

dnsmasq
e2guardian.lua
fw_upgrade
index.htm
update_fw_upgrade_8.3_files.sh
write-categories.sh
.version

once the files are copied across to the Shield  and renamed if needed
type
cd /tmp
sh  ./update_fw_upgrade_8.3_files.sh

This will copy the files to the correct places.

dnsmasq.dnsmasq
e2guardian.lua
fw_upgrade.fw_upgrade
index.htm
update_fw_upgrade_8.sh
write-categories.sh


Not sure why when i upload the files, two get named twice dnsmasq.dnsmasq and fw_upgrade.fw_upgrade  just rename as i said above, and also update_fw_upgrade_8.sh should be
update_fw_upgrade_8.3_files.sh

Enjoy

roadrunnere42

Thaks Roadrunnere42 will the update fix this  problem


Thu May 12 11:39:52 2016 daemon.notice snort[12833]: Initializing rule chains...
Thu May 12 11:39:52 2016 daemon.notice snort[12833]: WARNING: /etc/snort/rules/snort.rules(1) threshold (in rule) is deprecated; use detection_filter instead.

Thu May 12 11:39:55 2016 daemon.notice snort[12833]: WARNING: /etc/snort/rules/snort.rules(4660) GID 1 SID 2405000 in rule duplicates previous rule. Ignoring old rule.

Thu May 12 11:39:55 2016 daemon.err snort[12833]: FATAL ERROR: /etc/snort/rules/snort.rules(4660) threshold (in rule): could not create threshold - only one per sig_id=2405000.
Thu May 12 11:39:55 2016 daemon.info procd: Instance snort::instance1 s in a crash loop 6 crashes, 4 seconds since last crash
Thu May 12 11:51:20 2016 daemon.err uhttpd[4853]: cat: can't open '/mnt/ramdisk/illegal': No such file or directory
Thu May 12 11:51:20 2016 daemon.crit dnsmasq[13878]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:20 2016 daemon.crit dnsmasq[13878]: FAILED to start up
Thu May 12 11:51:25 2016 daemon.crit dnsmasq[13881]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:25 2016 daemon.crit dnsmasq[13881]: FAILED to start up
Thu May 12 11:51:30 2016 daemon.crit dnsmasq[13882]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:30 2016 daemon.crit dnsmasq[13882]: FAILED to start up
Thu May 12 11:51:35 2016 daemon.crit dnsmasq[13883]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:35 2016 daemon.crit dnsmasq[13883]: FAILED to start up
Thu May 12 11:51:40 2016 daemon.crit dnsmasq[13887]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:40 2016 daemon.crit dnsmasq[13887]: FAILED to start up
Thu May 12 11:51:45 2016 daemon.crit dnsmasq[13888]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:45 2016 daemon.crit dnsmasq[13888]: FAILED to start up
Thu May 12 11:51:45 2016 daemon.info procd: Instance dnsmasq::instance1 s in a crash loop 6 crashes, 0 seconds since last crash

Hi breda

right the first one
Thu May 12 11:39:52 2016 daemon.notice snort[12833]: WARNING: /etc/snort/rules/snort.rules(1) threshold (in rule) is deprecated; use detection_filter instead.
I get this all the time it does not seem to have any affect on the shield, but i'm no snort expert.

Thu May 12 11:39:55 2016 daemon.notice snort[12833]: WARNING: /etc/snort/rules/snort.rules(4660) GID 1 SID 2405000 in rule duplicates previous rule. Ignoring old rule.
Again i have seem this message and i believe can be ignored.

Thu May 12 11:39:55 2016 daemon.err snort[12833]: FATAL ERROR: /etc/snort/rules/snort.rules(4660) threshold (in rule): could not create threshold - only one per sig_id=2405000.
Any FATEL ERROR will stop you getting onto the internet, fw_upgrade should now stop duplicate snort rules.

Right I  have two shield devices  one in router mode and the other in bridge mode . On The router device i do not see these errors below, but on the bridge device i see the same errors but the shield still seems to run ok. The bridge shield is sort of leave to it's own thing as it's one my sons network.
The illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf is created i believe by another program on the fly, maybe someone who is more knowledgeable in networking could investigate.
 
Thu May 12 11:39:55 2016 daemon.info procd: Instance snort::instance1 s in a crash loop 6 crashes, 4 seconds since last crash
Thu May 12 11:51:20 2016 daemon.err uhttpd[4853]: cat: can't open '/mnt/ramdisk/illegal': No such file or directory
Thu May 12 11:51:20 2016 daemon.crit dnsmasq[13878]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:20 2016 daemon.crit dnsmasq[13878]: FAILED to start up
Thu May 12 11:51:25 2016 daemon.crit dnsmasq[13881]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:25 2016 daemon.crit dnsmasq[13881]: FAILED to start up
Thu May 12 11:51:30 2016 daemon.crit dnsmasq[13882]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:30 2016 daemon.crit dnsmasq[13882]: FAILED to start up
Thu May 12 11:51:35 2016 daemon.crit dnsmasq[13883]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:35 2016 daemon.crit dnsmasq[13883]: FAILED to start up
Thu May 12 11:51:40 2016 daemon.crit dnsmasq[13887]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:40 2016 daemon.crit dnsmasq[13887]: FAILED to start up
Thu May 12 11:51:45 2016 daemon.crit dnsmasq[13888]: illegal repeated keyword at line 13 of /var/etc/dnsmasq.conf
Thu May 12 11:51:45 2016 daemon.crit dnsmasq[13888]: FAILED to start up
Thu May 12 11:51:45 2016 daemon.info procd: Instance dnsmasq::instance1 s in a crash loop 6 crashes, 0 seconds since last crash



roadrunnere42

Thanks Roadrunnere42  I will install v8.3 and see that mite help  I only  have hotfix 160210 and 160309 installed I don't have any Fw_upgrade  installed yet

Hi, Roadrunnere42 I can't get V8.3 to install here is my SSH output  and WinSCP


root@Shield:~# cd /tmp
root@Shield:/tmp# sh  ./update_fw_upgrade_8.3_files.sh
sh: can't open './update_fw_upgrade_8.3_files.sh'
root@Shield:/tmp# sh  ./update_fw_upgrade_8.sh
mv: can't rename '.version': No such file or directory
finished copying
root@Shield:/tmp# update_fw_upgrade_8.3_files.sh
-ash: update_fw_upgrade_8.3_files.sh: not found
root@Shield:/tmp#





Thanks

Hi breda

when you copied over the files to the shield you needed to rename update_fw_upgrade_8.sh to update_fw_upgrade_8.3_files.sh, but it does not matter running update_fw_upgrade_8.sh will work.
The error where .version file is not found, is i think you  did not copy it over  to the shield.

roadrunnere42

Hi, Roadrunnere42 thanks just to confirm  these are all the files? I don't see any   .version  file    and just to confirm I only need to rename  update_fw_upgrade_8.sh should be   update_fw_upgrade_8.3_files.sh  ?

dnsmasq.dnsmasq
e2guardian.lua
fw_upgrade.fw_upgrade
index.htm
update_fw_upgrade_8.sh
write-categories.sh


Take care

Hi breda

for some reason the file .version did not upload or i forgot to upload, copy this file

.version

and then do the following again

Copy all files over to the Shield into the tmp folder  and make sure they are name correctly

dnsmasq
e2guardian.lua
fw_upgrade
index.htm
update_fw_upgrade_8.3_files.sh
write-categories.sh
.version

once the files are copied across to the Shield  and renamed if needed
type
cd /tmp
sh  ./update_fw_upgrade_8.3_files.sh

This will copy the files to the correct places.


roadrunnere42

CONTENTS DELETED

Hi, CWS Yes I  get the same Problem I'm going to update to V 8.3 I will let you know if I  lose Memory, Network, or DHCP information.

Hi, Roadrunnere42 just wanted to confirm the right away install v 8.3  when I installed V8.0 before I no longer shows any Memory, Network, or DHCP  information. CWS had the same problem

and then do the following again

Copy all files over to the Shield into the tmp folder  and make sure they are name correctly

dnsmasq
e2guardian.lua
fw_upgrade
index.htm
update_fw_upgrade_8.3_files.sh
write-categories.sh
.version

once the files are copied across to the Shield  and renamed if needed
type
cd /tmp
sh  ./update_fw_upgrade_8.3_files.sh

Thanks

Shon

Hi roadrunnere42 :)

Updated fine for me, thank you :)

rah

After bricking my shield because of a bug and not because of this update, I managed to install this successfully.

Also, run sh /sbin/fw_upgrade 3 times to make sure the snort rules are set up correctly. The first time round generates a whole bunch of messages about files not existing, running it a 2nd and 3rd time sorts it all out.

Thanks



Also, I recommend installing the two hotfixes on this forum before anyone installs this because the older hotfixes replace the fw_upgrade file.

CONTENTS DELETED

CONTENTS DELETED

I am running 8.3 with no problem but I just noticed that up-time is no longer being reported on the status screen.  I have just the up-time label with a "-" in time.

If you compare the stock index.htm and 8.3 index.htm you might be able to see whats changed

Thanks Roadrunnere42,
update worked, although I noticed that admin_status/index.htm was logging:

daemon.err uhttpd[4517]: cat: can't open '.version': No such file or directory

I think .version was incorrectly included on the "Shield Update Last Run" line:

luci.sys.exec("cat /.do_date .version  | cut -c5-10")

So I've just added a tweak into GitHub that avoids the need for a separate .version file to be manually updated. Now, fw_upgrade parses the header comments to look for the version number, and pushes that straight into the .do_date file.  There are also corresponding admin_status changes to match.  Nothing urgent, but a change that'd be useful to push out with the next 8.4 version published.

Saw your github changes. Those are good changes:

I've put up the raw link to them here if anyone's interested:

https://raw.githubusercontent.com/ItusShield/Shield-Master/4a39bc4c823a3c4427fa901307ba2ffd6b24a96a/sbin/fw_upgrade
(replace the existing fw_upgrade in /sbin/fw_upgrade)

https://raw.githubusercontent.com/ItusShield/Shield-Master/4a39bc4c823a3c4427fa901307ba2ffd6b24a96a/usr/lib/lua/luci/view/admin_status/index.htm
(replace the index.htm in /usr/lib/lua/luci/view/admin_status/index.htm)

https://raw.githubusercontent.com/ItusShield/Shield-Master/4a39bc4c823a3c4427fa901307ba2ffd6b24a96a/usr/lib64/lua/luci/view/admin_status/index.htm
(replace the index.htm in /usr/lib64/lua/luci/view/admin_status/index.htm)


From: Gnomad [via Itus Networks Owners Forum]
Sent: Sunday 22 May 13:51
Subject: Re: Fw_upgrade version 8.3 release
To: Harpinder Sanghera

Thanks Roadrunnere42,
update worked, although I noticed that admin_status/index.htm was logging:
daemon.err uhttpd[4517]: cat: can't open '.version': No such file or directoryI think .version was incorrectly included on the "Shield Update Last Run" line:
luci.sys.exec("cat /.do_date .version | cut -c5-10")So I've just added a tweak into GitHub<https://github.com/ItusShield/Shield-Master/commit/4a39bc4c823a3c4427fa901307ba2ffd6b24a96a> that avoids the need for a separate .version file to be manually updated. Now, fw_upgrade parses the header comments to look for the version number, and pushes that straight into the .do_date file.  There are also corresponding admin_status changes to match.  Nothing urgent, but a change that'd be useful to push out with the next 8.4 version published.

Shield in Router mode 1.51 SP1 + Hotfix Mar 9



If you reply to this email, your message will be added to the discussion below:

http://itus.accessinnov.com/Fw-upgrade-version-8-3-release-tp896p959.html

To unsubscribe from Fw_upgrade version 8.3 release, click here<http://itus.accessinnov.com/template/NamlServlet.jtp?macro=unsubscribe_by_code&node=896&code=aGFycGluZGVyQHNhbmdoZXJhLm1lLnVrfDg5NnwxMzQ3MTQxNzI4>.
NAML<http://itus.accessinnov.com/template/NamlServlet.jtp?macro=macro_viewer&id=instant_html%21nabble%3Aemail.naml&base=nabble.naml.namespaces.BasicNamespace-nabble.view.web.template.NabbleNamespace-nabble.view.web.template.NodeNamespace&breadcrumbs=notify_subscribers%21nabble%3Aemail.naml-instant_emails%21nabble%3Aemail.naml-send_instant_email%21nabble%3Aemail.naml>

Hi, harpss1ngh Thanks is the updated GitHub files in the links?


wget http://itus.accessinnov.com/file/n896/dnsmasq.dnsmasq
wget http://itus.accessinnov.com/file/n896/e2guardian.lua
wget http://itus.accessinnov.com/file/n896/fw_upgrade.fw_upgrade
wget http://itus.accessinnov.com/file/n896/index.htm
wget http://itus.accessinnov.com/file/n896/update_fw_upgrade_8.sh
wget http://itus.accessinnov.com/file/n896/write-categories.sh


Wget http://itus.accessinnov.com/file/n814/.version