After edit firewall systems block outgoing

[Nikolay.]

And post your psa-firewall package version.

 

[Thomas Wilhelmi]

No Problem:

server:/home/user # rpm -qa | grep psa-firewall
psa-firewall-11.5.30-suse12.3.build115130711.12.x86_64
server:/home/user # uname -a
Linux h1431219 3.7.10-1.16-default #1 SMP Fri May 31 20:21:23 UTC 2013 (97c14ba) x86_64 x86_64 x86_64 GNU/Linux

 

[Nikolay.]

Sorry, but apparently firewall was not updated with the latest update. Release notes are now updated to reflect that. I guess you should expect fix in the next update.

 

[Thomas Wilhelmi]

*sigh* Thanks for the info.

 

[Nikolay.]

Looks fixed in recently released update #8.

 

[Thomas Wilhelmi]

Thx, Looks good for now!

 

[IgorG]

Yes.
http://kb.parallels.com/116573 - Parallels Plesk Panel 11.5.30 MU#8

 

[itimod]

Panel version 11.5.30 Update #9, last updated at Aug 1, 2013 11:26 AM
OS Ubuntu 12.04.2 LTS
Hi,
@igorG after updating to 11.5.30 #9 The same failure.
Modifying firewall with some additionl rules and activating them - the whole incoming traffic on all ports is blocked.
After restarting he server I can reach the server over ssh.
But the firwall settings still showing but no rule is aktive.
Any help ?
Kind regards
itimod

 

[adiwan]

PSA Firewall broken in 11.5.xx ... MU #5 ... MU #9

Panel version 11.5.30 Update #9, last updated at Aug 1, 2013 11:26 AM
OS Ubuntu 12.04.2 LTS
Hi,
@igorG after updating to 11.5.30 #9 The same failure.
Modifying firewall with some additionl rules and activating them - the whole incoming traffic on all ports is blocked.
After restarting he server I can reach the server over ssh.
But the firwall settings still showing but no rule is aktive.
Any help ?
Kind regards
itimod

It seems that the firewall is broken even in MU #9 even after several MUs

 

[Nikolay.]

Guys, if you have problems and want them fixed and/or want to help others, you should provide additional details. At least full list of generated rules and your psa-firewall package version. Look through this thread for other additional information you may post.

 

[adiwan]

PSA Firewall works in 11.5.30 MU #10 but some additional rules may have to be added .

Guys, if you have problems and want them fixed and/or want to help others, you should provide additional details. At least full list of generated rules and your psa-firewall package version. Look through this thread for other additional information you may post.

Thanks for responding.

Fixed in Plesk 11.5.30 MU #10 except that I had to add a rule to allow SSH on a non-standard port which was not the case before.

Some other rules may have to be added for non-standard operations.

Looks like this was a feature introduced by security fixes.