Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Activity (RSS)

Tuesday, May 04 2010
13 Problem running Flint was updated
  • Joel Cornelius
    Joel Cornelius commented at 5:47 PM

    You do need to run the update in order to get a copy of dbstats. This file has been pushed onto the releases branch, but has not been packed with the linked fil...

  • rscheuch
    rscheuch commented at 5:39 PM

    I have downloaded and extracted Flint 1.0.8 from the website. Do I still need to perform the update feature step above? When I list the contents of the flint/sc...

Tuesday, April 27 2010
13 Problem running Flint was updated
  • Joel Cornelius
    Joel Cornelius commented at 11:13 PM

    I made a script today that will count the number of objects generated from running your config. To get this script into your flint vm, you will need to update i...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 8:33 PM

    I see you have alot of interfaces on the device. Could you tell us all the interfaces you have in the external, dmz and internal realms?

    Could you give us a tim...

  • rscheuch
    rscheuch commented at 7:32 PM

    Running the reports with External-to-Internal checks disabled took 3 minutes. The report with All checks disabled also ran in 3 minutes.

    Attached are the full r...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 5:27 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    Wow, that is a really long time, more than an order of magnitude than
    we're seeing for other large configuration...

  • rscheuch
    rscheuch commented at 3:26 PM

    The report appears to have completed normally after running approximately 2.5 hours.

    Is there any other information you need regarding the configuration I am ch...

2 earlier changes…
  • rscheuch
    rscheuch commented at 12:55 PM

    It appears to me that Flint is running the External-to_Internal Service checks. The report seems to indicate a different number of errors each time the system i...

  • rscheuch
    rscheuch commented at 12:31 PM

    Attached is a screen capture of the flint.log. I don't think it shows a whole lot.

    Richard

Monday, April 26 2010
13 Problem running Flint was updated
  • Joel Cornelius
    Joel Cornelius commented at 8:24 PM

    Sorry, there is currently a bug with logging. Flint logs are apparently being stored in /var/log under the file flint.log. We'll get this fixed as soon as possi...

  • rscheuch
    rscheuch commented at 7:39 PM

    I get nothing when I go to the URL. There is no logs directory in ~/flint/app. There is a file named app.log in the ~/flint directory

    Richard

  • Craig Bugzefsky
    Craig Bugzefsky commented at 7:28 PM

    Does your 1.0.7 have a logs directory in ~/flint/app?

    or at the url:

    http://<vmaddress>/logview
    

    If so, can you send those along.

  • rscheuch
    rscheuch commented at 4:23 PM

    I've downloaded version 1.0.7 and am running into the same "hang" problem as before. This time the IE screen status in the lower left corner indicated Done but ...

Thursday, April 22 2010
19 feature request: network map of groups and interfaces was created
  • jrk
    jrk created the ticket at 9:19 PM

    feature request: export rule set or object groups to network map

    export rule set (or derivation of) to a network map with weighted and
    colored lines from host/o...

Wednesday, April 21 2010
17 Report failed for policy NAT statements was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 2:37 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    Unfortuantely, I cannot think of a workaround at this time.

    Deleting all ACL lines does make it work, but it's g...

  • securantakra
    securantakra commented at 9:55 AM

    The report failed with the following message:

    application error
    Flint::LineError at /upload
    Error analyzing static <>

    wrong number of arguments (1 for 2)

    * fil...
Monday, April 19 2010
15 Unable to edit admin account from Flint web interface was updated
  • Joel Cornelius
    • State changed from open to resolved
    by Joel Cornelius at 10:29 PM

    Fixed. The POST method in the edit_user form was targeting the admin/user/new method instead of admin/user/edit.

Friday, April 16 2010
17 Report failed for policy NAT statements was updated
  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 7:22 PM

    This is a known issue, Flint does not comprehend ACL based NAT rules at this time.

    How does this fail for you tho, it should just not comprehend the NAT mapping...

  • securantakra
    securantakra created the ticket at 12:11 PM

    If I have a policy NAT statement in the configuration which has to be reported, the report failed.

    This is the statement:
    static (ncc,outside) 10.140.1.0 access...

18 error pasing ssh line where interface name has ":" in the name was created
  • jrk
    jrk created the ticket at 4:43 PM

    git pull'ed to 1.0.7? today and getting this rule syntax error:

    619: Parse error at ":" on line: ssh Sys_FileSrvr 255.255.255.255 Inside:DMZ

    619 ssh CtrlsSys_Fi...

13 Problem running Flint was updated
  • rscheuch
    rscheuch commented at 1:08 PM

    I don't get much of anything when I try to get the documentation requested. Attached is a WORD doc with a some screen shots.

    Let me know if there is anything el...

Thursday, April 15 2010
15 Unable to edit admin account from Flint web interface was updated
  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 8:48 PM

    Investigating, thanks

Wednesday, April 14 2010
13 Problem running Flint was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 8:51 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    What does crashing it with CTRL+ALT+DEL mean? I read that as killing
    the VM guess process, as opposed to doing a...

  • rscheuch
    rscheuch commented at 7:36 PM

    My machine is running Vista with 2GB of memory. When running FlintVM the task manager shows the CPU running at 54% using 1.29GB. FlintVM is still hung.

    Richard

  • rscheuch
    rscheuch commented at 6:45 PM

    Tired using Google Chrome - same results. Crashed VM machine with CTRL+Alt+DEL. Reentered Flint via Chrome. Got the following on screen. Not sure if this is wha...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 6:38 PM

    The FlintVM wants 512M to run, so if there is not 512M of real ram available to the VM then it will start swapping and that could lead to this hang. Since Redis...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 6:13 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    How much memory does the host running the VM have?

3 earlier changes…
  • rscheuch
    rscheuch commented at 6:09 PM

    I tried using Mozilla Firefox but after 30 minutes Flint was still hung. I powered off the VM and rebooted. I tried to access the log file via the settings butt...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 5:23 PM

    Try using a different browser please. I was able to reproduce this with IE8 when using a large rule set, but I do not get the same hang when using Mozilla and t...

  • rscheuch
    rscheuch commented at 1:16 PM

    After downloading version 1.0.6 I tried running the same firewall check as before. The program is still hanging up. After waiting 20 minutes the VM was powered ...

16 potential parsing bug on snmp-server was created
  • jrk
    jrk created the ticket at 6:28 PM

    potential parsing bug on snmp-server

    Rule syntax errors output:
    Checks for syntax errors in rules.

    342: Parse error at "community" on line: snmp-server host ins...

15 Unable to edit admin account from Flint web interface was created
  • Bryan VanDivier
    Bryan VanDivier created the ticket at 3:10 PM

    Clicking on edit within the settings page for user administrator does not allow you to change that user's password. Instead it creates a new user.

14 "rake app" needs to print the URL to reach Flint at was updated
  • Craig Bugzefsky
    • State changed from new to resolved
    by Craig Bugzefsky at 1:14 AM
  • Craig Bugzefsky
    Craig Bugzefsky commented at 1:14 AM

    Resolved. We now default to RACK_ENV=development.

    We also print out the URL in all cases.

  • tqbf
    tqbf created the ticket at 12:09 AM

    This apparently goes to the logfile now, which is great, but if you've just grabbed the source for the first time it's not apparent where to go once Flint is ru...

11 Error running report in VM was updated
Tuesday, April 13 2010
13 Problem running Flint was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 7:36 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    > Is there a command missing or is it best to wait for the 1.06 VM? I > don't want to be a pain in the rear but ...

  • rscheuch
    rscheuch commented at 6:14 PM

    Tried to upgrade via the VM. When rake install command was entered a series of messages such as "ruby-debug (0.10.3) is cached, but not installed" were displaye...

  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 4:02 PM

    rscheusch -- In the 1.0.5 and earlier releases, remarks generated errors because our parser was not comprehending remarks fully, especially ones with punctuatio...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 3:47 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    > The IE version is 8.0.6001.18904.

    Ok, I'll fire this up under IE8 and see if I can reproduce this problem.

    > I...

  • rscheuch
    rscheuch commented at 12:31 PM

    I've gone back to look at the configuration file to see if the parse error made any sense. Each of the lines in error is a remark. For example, one line reads "...

1 earlier change…
  • rscheuch
    rscheuch commented at 11:58 AM

    The IE version is 8.0.6001.18904.

    The firewall config file has 2630 lines.

    When I left last night Flint was still in the preprocessor mode. When I came in this ...

11 Error running report in VM was updated
  • WillyPete
    WillyPete commented at 1:06 PM

    Can you please update the bug when 1.0.6 is released.

    Just downloaded the current from your site and it's still 1.0.5
    git pull also shows I have the latest vers...

Monday, April 12 2010
11 Error running report in VM was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 9:40 PM

    Ok, so I made some changed to the lexer and parser which should allow it to handle the description and remark options properly. You can get it by upgrading to t...

13 Problem running Flint was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 8:11 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    Which verison of IE is this?

    Unless your rule set is like 20k lines or something, it should not be taking that l...

  • rscheuch
    rscheuch commented at 8:02 PM

    I have restarted the same reoprt from the beginning. The parser phase ran and completed almost immediately. The "Tell us .." screen came up and I clicked the "R...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 6:52 PM

    There is limited feedback while parsing and processing tests, a UI issue we hope to address soon, so it is likely that it was actually doing those task when you...

  • rscheuch
    rscheuch commented at 5:24 PM

    After forcing a Power off and Exit and rebooting, access to the Flint VM machine via IE yielded the report. I do not understand why the VM Machine hangs up. Is ...

  • rscheuch
    rscheuch created the ticket at 2:38 PM

    I just downloaded and started Flint 1.0.5 running on VMPlayer 3.0.1. I've uploaded the firewall config file and am attempting to run a report with the default(a...