0001271: IPTables rules not enough strong in registration/isolation VLAN - PacketFence

(0002210)
obilodeau (reporter)
2011-09-19 10:48

Not sure about internal and monitor on the same interface plus inline enforcement...

(0002211)
chockrl (reporter)
2011-09-19 11:38

I believe I have found a work around for the issue. I have changed the pf.conf slightly from the one attached. The parameter that seems to correct the issue is general.dnsservers by entering only one ip address everything is functioning correctly. I also turned on registration, but had the same issue if two dns servers were entered and separated by a comma. I made the same change in network.conf for my DHCP server config.

(0002212)
obilodeau (reporter)
2011-09-19 11:41

Reminder sent to: chockrl

Can you attach your new pf.conf and networks.conf? We are not quite sure at this point if this is a duplicate of 0001269 or not.

(0002213)
chockrl (reporter)
2011-09-19 11:47

I may have read that issue when trying to get this work. Files attached.

(0002216)
obilodeau (reporter)
2011-09-19 13:55

I fixed 0001269. I'll try to reproduce the 'p2p still works' portion of the issue in our lab and if I can't I'll mark this as a duplicate of 0001269 which is now fixed.

Thanks for your help!

(0002217)
obilodeau (reporter)
2011-09-19 14:24

confirmed as a dupe of 0001269 which is fixed

Issue History
Date Modified	Username	Field	Change
2011-09-19 08:46	fgaudreault	New Issue
2011-09-19 10:47	obilodeau	Additional Information Updated
2011-09-19 10:48	obilodeau	Note Added: 0002210
2011-09-19 11:38	chockrl	Note Added: 0002211
2011-09-19 11:41	obilodeau	Note Added: 0002212
2011-09-19 11:46	chockrl	File Added: pf.conf
2011-09-19 11:47	chockrl	File Added: networks.conf
2011-09-19 11:47	chockrl	Note Added: 0002213
2011-09-19 13:55	obilodeau	Note Added: 0002216
2011-09-19 14:23	obilodeau	Relationship added	duplicate of 0001269
2011-09-19 14:24	obilodeau	Note Added: 0002217
2011-09-19 14:24	obilodeau	Status	new => resolved
2011-09-19 14:24	obilodeau	Resolution	open => duplicate
2011-09-19 14:24	obilodeau	Assigned To	=> obilodeau
2011-10-26 14:27	obilodeau	Status	resolved => closed
2011-10-26 14:27	obilodeau	Fixed in Version	=> 3.0.0

Notes
(0002210) obilodeau (reporter) 2011-09-19 10:48	Not sure about internal and monitor on the same interface plus inline enforcement...

(0002211) chockrl (reporter) 2011-09-19 11:38	I believe I have found a work around for the issue. I have changed the pf.conf slightly from the one attached. The parameter that seems to correct the issue is general.dnsservers by entering only one ip address everything is functioning correctly. I also turned on registration, but had the same issue if two dns servers were entered and separated by a comma. I made the same change in network.conf for my DHCP server config.

(0002212) obilodeau (reporter) 2011-09-19 11:41	Reminder sent to: chockrl Can you attach your new pf.conf and networks.conf? We are not quite sure at this point if this is a duplicate of 0001269 or not.

(0002213) chockrl (reporter) 2011-09-19 11:47	I may have read that issue when trying to get this work. Files attached.

(0002216) obilodeau (reporter) 2011-09-19 13:55	I fixed 0001269. I'll try to reproduce the 'p2p still works' portion of the issue in our lab and if I can't I'll mark this as a duplicate of 0001269 which is now fixed. Thanks for your help!

(0002217) obilodeau (reporter) 2011-09-19 14:24	confirmed as a dupe of 0001269 which is fixed