Black Screen while Installing

September 16, 2012, 2:57 am

Please Help me!

I am trying to install Untangle 9.3 and during the installation I get the following error.....

Loading /install. 386/vmlinux...........
Loading /install.386/gtk/initrd.gz......................................... ................ready

and then the screen goes black and the cd stops spinning.

I have read the forums and seen that there is that same problem on Asus boards but I am running a Intel board and chipset..

I have tried to install it on different PC and ghost the HDD onto the new Hardware but it just goes into a restart loop.. in presuming this is because they are running completely different chipsets.

I have gone through the bios and changed absolutely every setting disabled everything unneeded peripheral. I have tried different media, screen and cd rom drive. I have not tried a different graphics card as this board only has one PCI-E slot and I am using that for the second NIC. its also a x1 and I don't have a graphics card to fit..

I have bought 4 units for this purpose and am screwed if I cant get them to work!!! I have also tested on all 4 and get the same result.

I have installed a whole bunch of other linux O/S in these boxes and had absolutely no problem, which leads me to think its just an installer issue and if we can get past that we we will have no more issues.

I am using an atom N2800 processor with an intel cg82nm10 chipset.

↧

Running UT v9.3.0 in Hyper-V

September 17, 2012, 6:46 pm

≫ Next: Optiplex 390 and Squeeze

≪ Previous: Black Screen while Installing

Without integration drivers this is only good for testing or in my case standing up a spam filter so I can block the spammers that somehow got my test exchange server email address. Those damn bastards!

What I have:

I am using 2008 R2 Datacenter
I have 2 physical NICs

On my 08 test server I have AD, DNS, DHCP, IIS, RRAS, Exchange, and Hyper-V roles. This is my host box and playground.

In Hyper-V you need to configure your virtual networks. Open Virtual Network Manager and create an "External" network and an "internal only" network. External must be set to the physical NIC not used by the host box DC. There isn't a wrong way to set up the internal NIC at this point so just create it and label it.

Now what will happen is UT will act as a bridge between the internal only network and the external. To do this we must create an untangle VM and install it as a bridge. Create your virtual machine and after it has been created open the settings and remove the Hyper-V NICs, they won't work right. Click Add hardware, 2 legacy NICs, the first to the external network, the second to the internal network. Make sure on these NICs you have "Enable spoofing of MAC addresses" checked for both. Otherwise the bridging won't work. Save

Install untangle using the tab key to work through the prompts. OK its booted and I am logged in but I can't do anything cause the mouse don't work. I tried from the console and all but I found a different way to do this.

http://forums.untangle.com/hacks/263...l-hyper-v.html

Reboot your VM
press a key at grub menu and pick the top option
press e and go to kernel line and press e again
edit the end of the line; remove "quiet splash" and add "init=/bin/bash"
press enter then B to boot

You should have booted in single user mode and be at a root prompt.

Type these commands:

"mount -o remount rw /"
"passwd"
enter the password for root you want to use, twice
"rm /etc/ssh/sshd_not_to_be_run"
"reboot"

You will now have an untangle VM that can listen for SSH. Hopefully you wrote down what IP your box pulled or assigned it one. Use PuTTY or whatever to SSH into your VM. OK so I can SSH in so now how do I get external remote access?

UT moved system configuration files into "/usr/share/untangle/settings/", we need to edit one of these files to enable external access. Then restart the UVM.

Run these commands once connected and logged into SSH:

"cd /usr/share/untangle/settings/untangle-vm"
locate the "system.js" files and edit them; I used pico

Make sure system.js and system.js-version-xxxxxxxxxx are all edited so the below fields are set:

Code:

"outsideHttpsAdministrationEnabled": true,

    "outsideHttpsEnabled": true,

    "outsideHttpsQuarantineEnabled": true,

    "outsideHttpsReportingEnabled": true,

Now run "/etc/init.d/untangle-vm restart"

With a little luck you should be able to access the web page and manage your virtual Untangle box now. Edit the configuration as you please. Make sure your in bridge mode. The NICs due to being legacy work but show no connectivity.

Last part is to set an IP address on your 2008 server in the network share center to an IP you wish to use behind UT. I confirmed I could ping this IP from a workstation to verify my traffic went from PC -> router -> virtual switch -> UT -> internal NIC -> server. I then also did a telnet on 25 to see if my SMTP server responded, it did. Set router port forwards and send a test email from a remote system and watch the SMTP counter go up. YAY. Maybe I can actually use activesync on my phone again without getting emails about how people liked my profile and want a descrete meeting.

I really would discourage using untangle in a production environment with Hyper-V. VMWare or hardware would be best for that. Also probably the process above may violate UT support agreement. Though I don't think I did anything extreme here, I still did manually edit some configuration files in the OS which is usually a instant killer for any support. But hey I been wondering how I could do this for a little while now and finally figured it out. So I thought I would share.

↧

Optiplex 390 and Squeeze

September 18, 2012, 8:55 am

≫ Next: DNS Updater and Zoneedit

≪ Previous: Running UT v9.3.0 in Hyper-V

I happened upon someone else earlier in the year having a similar issue as im having now with the drivers for the older base system for untangle. And also that untangle was in the process of moving over to the more recent Squeeze kernel of linux. Any update when this change will be done or if it is all ready taken place?

↧

DNS Updater and Zoneedit

September 18, 2012, 11:01 pm

≫ Next: openvpn assign static ip to client

≪ Previous: Optiplex 390 and Squeeze

I seem to only get updates on zoneedit when I reboot the Untangle. Does Untangle check its current external IP from time to time and compare to Zoneedit-DynDNS and others or is it just on boot only.
My ISP rarely changes my IP anyway, but luck have it I was out today and could not connect to VPN on my Tablet because I lost DNS. I used to use inadyn on an internal Linux box, is the UT version configurable?

Thanks

:worship:

↧

openvpn assign static ip to client

September 19, 2012, 3:51 am

≫ Next: Test setup can, PCs can not join domain.

≪ Previous: DNS Updater and Zoneedit

Hi,

I have successfully configured UT OpenVPN Site-to-Site but would like to assign a static ip lease to the remote office server (as openvpn client) connecting to the OpenVPN Server. Say I want to assign 172.16.16.10/24 to the remote server.

I searched and found that I should include in the server.conf:

client-config-dir /etc/openvpn/ccd

#ifconfig-push clientIP Netmask
ifconfig-push 172.16.16.10 255.255.255.0

Just wanna know if this is also the way to do in Untangle?

Thanks in advance.

↧

Test setup can, PCs can not join domain.

September 19, 2012, 1:00 pm

≫ Next: Akamai and streaming video

≪ Previous: openvpn assign static ip to client

We have part of our network setup behind Untangle right now before moving it to the full network. Here is a quick diagram

_______________ISP
________________|
______________Router
____________|________|
_________VLAN1______VLAN2
______________\______/
_____________UNTANGLE
______________/______\
_________VLAN1________VLAN2
__________|_____________|
_______My PC____________PCs

All of our onsite servers sit on VLAN1 before Untangle. My PC is the only computer on VLAN1 after untangle with a small network setup on VLAN2 after untangle. On my computer I am not able to use some programs, but the real issue is that on VLAN2 we are not able to join a computer to the domain. I was thinking it may be because something is being blocked, but all the apps are turned off and the issue still is present. We have to move the cables from Untangle to a switch temporarily to get the computers on the domain then we move the cables back to untangle.

JD

↧

Akamai and streaming video

September 21, 2012, 3:40 am

≫ Next: Upgrade to 9.3

≪ Previous: Test setup can, PCs can not join domain.

I have been trying to get streaming video served by Akamai and using the platform player working for some time now. As this is increasingly a popular medium for flash content delivery I am guessing its going to be a topic for others in future.

What I discovered is this, Akamai use multiple servers to deliver your content so at any time you might have multiple connections (ip addresses) for one flash file.
Its dynamic.
Its likely being blocked by the intrusion prevention even though there are no logs to confirm this.
Unable to capture any logs at all anywhere showing a problem.
Bypassing an individual user by source IP solves the problem (but is not the correct answer).
Bypassing the whole dest address range does not work suggesting the inbound communication is broken supporting the intrusion prevention hypothesis.

So my question is this, how to create a rule to permit Akamai/The Platform without bypassing users entirely?

Anyone who wishes to have a crack at this can test using video at http://www.sbs.com.au/cyclingcentral/

Appreciate if anyone who can point me in the right direction, its driving me mad.

↧

Upgrade to 9.3

September 21, 2012, 9:27 am

≫ Next: server restart every 01:00

≪ Previous: Akamai and streaming video

Upgraded to 9.3 this morning and am having some issues. I cannot get the uvm to come back up. Pinging out works and we are routing between our main facility and our 2 satellite facilities that connect via open-vpn site to site tunnels in untangle. But certain traffic is being blocked (ie all web browsing traffic both internal and external) and I am unable to access the web interface via https. Accessing the main untangle server via http gives me the forbidden splash screen as I have http disabled on the untangle server.

The other two facilities were able to upgrade to 9.3 without a hitch but having our main facility down is causing me a little trouble. I did notice the following repeating message in the uvm.log file:

localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)

Any ideas?

*****
/var/log/uvm/uvm.log:

Sep 21 09:08:46 localhost [TomcatManagerImpl] INFO Adding web app /usr/share/untangle/web/quarantine
Sep 21 09:08:46 localhost [NodeManagerImpl] INFO Restarted : untangle-casing-mail (5)
Sep 21 09:08:47 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/shield-start) = 0 took 1120 ms.
Sep 21 09:08:47 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/openvpn/start-openvpn)
Sep 21 09:08:47 localhost [NodeManagerImpl] INFO Restarted : untangle-node-shield (21)
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/openvpn/start-openvpn) = 0 took 1348 ms.
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/license-numdevices.sh)
Sep 21 09:08:48 localhost [NodeManagerImpl] INFO Restarted : untangle-node-openvpn (33)
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/license-numdevices.sh) = 0 took 6 ms.
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/etc/init.d/rsyslog restart)
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/etc/init.d/rsyslog restart) = 0 took 262 ms.
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(createuser -U postgres -dSR untangle >/dev/null 2>&1)
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(createuser -U postgres -dSR untangle >/dev/null 2>&1) = 1 took 37 ms.
Sep 21 09:08:48 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/cpd/stop)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/cpd/stop) = 0 took 1157 ms.
Sep 21 09:08:50 localhost [TomcatManagerImpl] INFO Adding web app /usr/share/untangle/web/users
Sep 21 09:08:50 localhost [NodeManagerImpl] INFO Restarted : untangle-node-cpd (25)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/ut-format-json /usr/share/untangle/conf/licenses/licenses.js-version-2012-09-21-0908.js)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/ut-format-json /usr/share/untangle/conf/licenses/licenses.js-version-2012-09-21-0908.js) = 0 took 90 ms.
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(createdb -O postgres -U postgres uvm >/dev/null 2>&1)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(createdb -O postgres -U postgres uvm >/dev/null 2>&1) = 1 took 36 ms.
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(ln -sf ./licenses.js-version-2012-09-21-0908.js /usr/share/untangle/conf/licenses/licenses.js)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(ln -sf ./licenses.js-version-2012-09-21-0908.js /usr/share/untangle/conf/licenses/licenses.js) = 0 took 4 ms.
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(createlang -U postgres plpgsql uvm >/dev/null 2>&1)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(createlang -U postgres plpgsql uvm >/dev/null 2>&1) = 2 took 35 ms.
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/license-numdevices.sh)
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/license-numdevices.sh) = 0 took 6 ms.
Sep 21 09:08:50 localhost [ExecManagerImpl] INFO ExecManager.exec(/usr/share/untangle/bin/reporting-generate-reports.py -c)
Sep 21 09:08:50 localhost [NodeManagerImpl] INFO Restarted : untangle-node-license (10)
Sep 21 09:08:54 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:09:09 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:09:21 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:09:33 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:09:45 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:09:56 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)
Sep 21 09:10:09 localhost [UvmContextImpl] WARN Reporting node not found, discarding event(s)

↧

server restart every 01:00

September 25, 2012, 10:03 am

≫ Next: Monitoring with SNMP or Syslog

≪ Previous: Upgrade to 9.3

Recently i found out that my untangle server will suspend for some 30seconds - 1min during 0100 at mid night.
Internet connection will pause for a while, both web filter lite and ad blocker scan counter will reset to zero.

Build 9.2.1-amd64

is that ture? does any other admin experience the same? :worship:

*I apologize if i place this thread (question) in the wrong area.

↧

Monitoring with SNMP or Syslog

September 27, 2012, 6:18 am

≫ Next: Upgrade Issues

≪ Previous: server restart every 01:00

I'm new using Untangle. We have been using SW in the past and are now standardizing on Untangle. We are on version 9.3.

We use Labtech. In the past we would monitor our SW firewalls with SNMP or Syslog. We would alert on these items ..

IP Spoof
Land Attack
PING of Death
SYN Flood Attack
Probable FIN SCAN
Probable NUL Scan
Probable XMAS Scan
Login Failed
Access Rules Modified

I understand that Syslog is a hog on Untangle and should not be used on a full time bases. True?

If so, that leaves SNMP. Are there any ODI's for Untangle for the above items?

Any advise or insight?

Thanks, Philip

↧

Upgrade Issues

September 27, 2012, 10:41 am

≫ Next: Checking in before upgrading 9.2 -> 9.3

≪ Previous: Monitoring with SNMP or Syslog

I installed the trial of the premium version last week. Today we purchased the premium package. I applied our license to the box and all was well until the GUI just died. I can no longer hit the GUI, but untangle is working as it should still.

Does anyone have any ideas what the issue could be? On a side note the box hasn't been rebooted in 130+ days.

Im also still having issues with attack blocker not reporting a reputation score.

↧

Checking in before upgrading 9.2 -> 9.3

October 1, 2012, 8:38 am

≫ Next: What IP Addresses Should I Be Using?

≪ Previous: Upgrade Issues

Hey, all.

I purchased a wan balancing subscription today and it looks like I need to let the server upgrade itself before it can install the new software.

I had turned off the auto-upgrades due to the server becoming temporarily out-of-whack after an automatic upgrade when 9.2 went live. (The issue was a filtering one, not a bug in Untangle, but it came to light because, as I recall, an existing "bug" or at least incorrect behavior was corrected to what it was specified to do, and my setup was relying on the old behavior. Simple to fix when understood, but the understanding took some time, heh.)

Anyway - We are at version 9.2.0~svn20120216r31181release9.2-1lenny at the moment. Before I upgrade the server, I wanted to poll the users here and make sure that there weren't any specific issues in the update that I should be watching out for in order to insure a smooth upgrade.

Do I actually want to upgrade to 9.3? I'm not looking to be bleeding edge, just get upgraded to where my wan balancer can be installed and setup. It sort of looks like the "official" upgrade is 9.2.1.

Thanks for any input.

↧

What IP Addresses Should I Be Using?

October 1, 2012, 8:18 pm

≫ Next: Replacement Box

≪ Previous: Checking in before upgrading 9.2 -> 9.3

I just got the following from my ISP but am really lost and have not been able to successfully configure my Untangle.

Quote:

From the switch:

switch#show ip route | include 199.191.59.32 S 199.191.59.32/29 [1/0] via 199.191.59.10

Your avaliable IPs at the time the e-mail was sent were:
199.191.58.33 Free IPs
--------to-------
199.191.58.38 Free IPs

199.191.59.10 is the IP address of the server I own which hosts multiple VMs (Untangle being one of them).

Does that mean I need to configure the IPs of my VMs using 199.191.58.33-38 /29 with a 199.191.59.10 as my gateway?

Thanks in advance!

↧

Replacement Box

October 2, 2012, 10:11 am

≫ Next: Reimage from Top port

≪ Previous: What IP Addresses Should I Be Using?

Hello all,

I am looking for some advice as to what to expect when I upgrade my existing hardware to the new box.

Existing has been in place for about a yr and half, hardware was older when installed. We have settled in and found Untangle to work for our needs so being preemptive I have built a new box and am doing burn in now.I will keep old one for redundancy, just a straight swap.

Should I install the newest version of Untangle?
Will the backed up settings migrate directly?
Will my VPN users need to install new updated clients?

Any and all advice would be appreciated.

Thanks
Rob

↧

Reimage from Top port

October 4, 2012, 10:16 am

≫ Next: How to include application control

≪ Previous: Replacement Box

I was installing my new u50 appliance today and during the applying of the updates power got cut to the device.
It rebooted to a Grub error 17
I decided to use the flash drive they shipped with the device to re-image it.
Holding F11 during boot did not work, I had to tap it repeatedly. Could be my keyboard.
I had the USB flash drive in the bottom port. A screen or two into it and it failed to find a file related to the GUI and started looping.

I turned it off and moved the flash drive to the top USB port and it seems to have worked.

I would recommend a postcard with the directions on how to do this in a baggy with the flash drive. Or just add them to the sticker on the Flash drive.

When I got back to the updates screen there are a lot less of them needed. That would indicate to me that the software on the flash drive was newer than on the device. I don't see this as a problem.

So my question is: Is all of this normal? Or do I have other things to worry about.

Brian

↧

How to include application control

October 5, 2012, 1:10 am

≫ Next: Qos

≪ Previous: Reimage from Top port

Hi,

I see that application control is now included in the education standard package. Yet our server can't install it as it still has More Info written next to the app.

If I go to Config/System Info/Licenses it says we have a valid license for Application Control.

My question is this: How do I get the server to include Application Control?

↧

Qos

October 5, 2012, 4:25 am

≫ Next: Show Sessions failing after minor upgrade

≪ Previous: How to include application control

Quick question guys. Does QOS come enabled by default when using the WAN Balancer and WAN Failover. I just did a fresh reinstall and noticed QOS was enabled right off the bat.

↧

Show Sessions failing after minor upgrade

October 7, 2012, 5:06 pm

≫ Next: Can i use untangle as bass by - web filtering

≪ Previous: Qos

After a second (minor) upgrade for 9.3.1 (9.3.1~svn20121003r33144release9.3-1lenny) "Show Sessions" from the Default Rack pull-down displays Session Viewer and "Loading..." -- and progresses no further.

If I "Close" this, the GUI returns to the default rack (all greyed out) with the overlay "Please wait" and "Loading..." -- with the animated crawler bar.

The only way out of this is to close the browser (Firefox 15.01) and restart the browser and UT Rack.

This only occurs on my UT boxes running on HP Dual Core DC7800 PC with Intel Video chipsets. Others platforms appear to be all goodly.

↧

Can i use untangle as bass by - web filtering

October 8, 2012, 2:26 am

≫ Next: Mouse & Keyboard freezes at choose language

≪ Previous: Show Sessions failing after minor upgrade

HI,
my scenario is that i have a firewall with 4 Eth interfaces as below :

Eth0: connected to the Internet or ISP
Eth1: programmed for (VLAN 11) VoIP, Connected to manageable switch.
Eth2: programmed for (VLAN 10 and 18) Servers and DMZ, Connected to manageable same switch.
Eth3: programmed for (VLAN 12) Clients, Connected to manageable same switch.

see the attached diagram for the network scenario.

could you please suggest where i need to fix Untangle ?

Attached Images

network.jpg (88.5 KB)

↧

Mouse & Keyboard freezes at choose language

October 8, 2012, 2:47 pm

≫ Next: pfSense and UT on same VMWare ESX 5 Host

≪ Previous: Can i use untangle as bass by - web filtering

Can someone please help me. I am trying to install Untangle on Dell Optiplex 580 but when it reaches to choose language the mouse and keyboard are not working

↧