Lighthouse has a new layout. Prefer the old one? Return to the old layout, and switch back any time from the link at the top of each page.

Activity (RSS)

Wednesday, April 07 2010
11 Error running report in VM was updated
  • WillyPete
    WillyPete commented at 8:49 AM

    Cool.

    I realise it's a work in progress and might have been the case.
    The "remark" lines in the ACL rules process just fine.

Tuesday, April 06 2010
11 Error running report in VM was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 9:07 PM

    Don't try and track it down.

    It's a parser error for handling of the name command. We barf on ALL descriptions, not just your weird ones, if they are weird.

    Wor...

  • WillyPete
    WillyPete commented at 11:01 AM

    Craig, having successfully run the report after removing all "name " entries from the running-config, I think this is less a bug with Flint than it not able to ...

  • WillyPete
    WillyPete commented at 10:01 AM

    While waiting for the latest vm app to download, I tried your update procedure.
    I've attached the backtrace results.

    I'll carry on with the app download and try...

  • WillyPete
    WillyPete commented at 9:42 AM

    Thanks Craig.
    I'm back after the long weekend and will give it a whirl.

  • Craig Bugzefsky
    Craig Bugzefsky commented at 2:40 AM

    Ok, I got a lead on this from another user who triggered it while running our devel version of Flint.

    I think his bag had to do with the handling of a "static" ...

Thursday, April 01 2010
11 Error running report in VM was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 4:23 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    That is what we run here and test with our config frequently.

    When you start the VM, leave the wmare console win...

  • WillyPete
    WillyPete commented at 4:05 PM

    When I strip out all the names and access rules, the config processes properly.
    I'll go through it now and remove sections one by one to find the error and repo...

  • WillyPete
    WillyPete commented at 1:02 PM

    The device is a pix 525.
    Is flint suitable for this?

  • WillyPete
    WillyPete commented at 1:01 PM

    Never mind, got it sorted.
    DHCP now working properly - vmware server issue with not having the right netwrk interface setting used. Now on bridged mode and work...

  • WillyPete
    WillyPete commented at 11:54 AM

    Within vmwareserver v2, I'm having trouble resetting the eth0 interface.
    It's getting its IP from somewhere other than our dhcp.

    when trying to change it via su...

Tuesday, March 30 2010
11 Error running report in VM was updated
  • WillyPete
    WillyPete commented at 3:16 PM

    The page displays the processing bar on the bottom of the submission window and then throws the error.
    About 20 seconds.

  • Craig Bugzefsky
    Craig Bugzefsky commented at 3:10 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    Well, the one I test with is 254K

    It takes awhile, but it runs.

    Does the error happen quickly, or does it chug a...

  • WillyPete
    WillyPete commented at 2:55 PM

    My config backup is 185kb (yeah, I know)

    I haven't yet tried it in VMserver but will be doing so tomorrow.
    Thanks for all your assistance so far.
    I'll keep repo...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 2:51 PM

    Lighthouse <no-reply@lighthouseapp.com> writes:

    There is a README file in the zip archive. It has the logins for the VM
    and the app.

    I have been testing with a ...

  • WillyPete
    WillyPete commented at 8:56 AM

    Thanks Craig, I'll try that.

    The file is pretty large, I'll try a default cfg.
    1 CPU is set.
    RAM is currently 512, will try at 768mb.

    If it still fails I'll try...

Monday, March 29 2010
10 Not ignoring rules marked inactive was updated
  • Craig Bugzefsky
    • State changed from open to resolved
    by Craig Bugzefsky at 10:36 PM

    Fixed, will be in next release, or pull from git repo

    commit 14c6cf07e700fa13ad08f52fca99a2e816ea3706
    Author: Craig Brozefsky craig@matasano.com
    Date: Mon Mar 2...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 10:26 PM

    Picking this up to work on now, should be in our next release.

12 'Protocol' tab does not match 'overview' tab was updated
  • Craig Bugzefsky
    • State changed from new to invalid
    by Craig Bugzefsky at 10:15 PM

    We figured out it was a problem in our sample config

  • Joel Cornelius
    Joel Cornelius created the ticket at 9:02 PM

    ProtocolMap is empty while ServicePath is not

11 Error running report in VM was updated
  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 6:03 PM

    No, the redis install on the VM is the latest redis release (well, since I built it).

    Can you get us a full stack trace? That should be in your console.

    If not ...

  • WillyPete
    WillyPete created the ticket at 5:35 PM

    The VM installs correctly on VMPlayer and runs well.
    Ver 1.0.4

    When I try run a new report, using either the copy and paste or browse to the runing-config.cfg f...

Friday, March 26 2010
10 Not ignoring rules marked inactive was created
  • Craig Bugzefsky
    Craig Bugzefsky created the ticket at 5:14 PM

    jverburg @tqbf Love the Flint VM. It looks like it's interpreting ACEs with "inactive", is that intentional?

Tuesday, March 23 2010
Home was edited by Craig Bugzefsky in Matasano Flint at 7:36 PM
9 Typo in rubygems update instructions from rake install was updated
  • Craig Bugzefsky
    • State changed from new to resolved
    • Tag cleared.
    by Craig Bugzefsky at 7:17 PM

    Fixed this on head, and is also be in the current tarball.

    Thanx much for the report and the blogpost.

    commit 36577f28f0183036d2bd3e7798b5cc77d993633c
    Author: C...

Thursday, March 18 2010
9 Typo in rubygems update instructions from rake install was created
  • Coty Rosenblath
    Coty Rosenblath created the ticket at 2:19 PM

    The bundler:gem task gives instructions for upgrading to rubygems 1.3.6 or greater. There is a minor typo.

    The command:

    sudo gem install rubygems_update

    should ...

Monday, March 15 2010
7 Unsupported service names from PIX/ASA was updated
  • Craig Bugzefsky
    • State changed from open to resolved
    by Craig Bugzefsky at 9:19 PM

    commit 848b0997a12b1fc4bd06fcab047543330afbd7cf
    Author: Craig Brozefsky craig@dhcp77.chi.matasano.com
    Date: Mon Mar 15 16:14:12 2010 -0500

    Import John Hoffoss'...
8 Blank 'Risk' in Protocol View was updated
  • Joel Cornelius
    • State changed from open to resolved
    by Joel Cornelius at 8:47 PM

    finished fixing all blank risk issues. Will be effective in the next tar ball

  • Joel Cornelius
    • State changed from new to open
    • Assigned user changed from Craig Bugzefsky to Joel Cornelius
    by Joel Cornelius at 8:18 PM

    Working on cleaning up this problem

Joel Cornelius Joel Cornelius was invited to Matasano Flint at 8:03 PM
Wednesday, March 10 2010
8 Blank 'Risk' in Protocol View was created
  • jrk
    jrk created the ticket at 10:11 PM

    In the Risk column, there are sometimes entries consisting of just 'Risk' as opposed to 'High Risk', 'Medium Risk', or 'Low Risk'

Tuesday, March 09 2010
7 Unsupported service names from PIX/ASA was created
  • Craig Bugzefsky
    Craig Bugzefsky created the ticket at 9:22 PM

    Ok, so we found one today, rsh. There are bound to be more.

    This is a bug for recording them and getting them added to lib/flint/services.txt

3 Error: undefined method `overlap?' for nil:NilClass was updated
  • Craig Bugzefsky
    • State changed from open to resolved
    by Craig Bugzefsky at 9:21 PM

    We fixed it, after flushing redis of all the cached data.

Monday, March 08 2010
3 Error: undefined method `overlap?' for nil:NilClass was updated
  • Craig Bugzefsky
    Craig Bugzefsky commented at 6:30 PM

    I took your sample rules and created a firewall config to exercise them. I was not able to reproduce these errors. I think either I failed to previously push th...

  • Craig Bugzefsky
    Craig Bugzefsky commented at 4:45 PM

    Hmm, this error parsing network spec looks like something that should have been fixed by my push. That should have been coming in as [:object-group-ref "DC-DMZP...

6 rake init YAML name error (fix) was updated
  • Craig Bugzefsky
    • State changed from new to resolved
    by Craig Bugzefsky at 6:17 PM

    Fixed and pushed to the public repo.

    It is not in the tarball yet. I'll be building one later this week.

  • Craig Bugzefsky
    Craig Bugzefsky commented at 4:46 PM

    Thanx, adding.

    Which OS and ruby were you using BTW?

  • Craiggers
    Craiggers created the ticket at 10:34 AM

    I had to 'require yaml' in script/init for this to work. Error message was:

    ./script/init Loading Protocol blurbs
    ./script/init:21: uninitialized constant YAML ...

Saturday, March 06 2010
3 Error: undefined method `overlap?' for nil:NilClass was updated
  • jth
    jth commented at 5:16 AM

    Still getting wide variety of errors, different from overlap? error though.

    Error parsing network spec: ["DC-DMZPUB-NTP_Hosts", [:lineno, 621]]

    object-group net...

  • jth
    jth commented at 4:59 AM

    Whoops, this one wasn't affected by remarks. Still checking new version now.

  • jth
    jth commented at 4:58 AM

    This goes away after stripping out remarks. Checking out new version now.

  • Craig Bugzefsky
    Craig Bugzefsky commented at 4:28 AM

    Does this go away once you strip out remarks, or run the 1.0.1 build with the improved punctuation handling?

5 Parse errors on ampersand in remarks was updated
Friday, March 05 2010
2 BCrypt::Errors:Invalidhash at /login was updated
  • Craig Bugzefsky
    • State changed from open to resolved
    by Craig Bugzefsky at 11:32 PM

    Ok, it is an incompatability between Ohm and the rather old redis-server package in ubuntu

    If you download the latest redis source from:

    http://redis.googlecode...

  • Craig Bugzefsky
    • Tag cleared.
    • State changed from new to open
    by Craig Bugzefsky at 11:16 PM

    Ok, reproduced it on my home server, which runs Ubuntu.

    Should have a fix shortly.

  • Craig Bugzefsky
    Craig Bugzefsky commented at 11:09 PM

    I'll get a Ubuntu VM running and track this down ASAP. Sorry about the trouble.

    Thanks for confirming.

  • Mike Johnson
    Mike Johnson commented at 10:39 PM

    I'm having this same problem.

    Ubuntu 9.10
    ruby 1.8.7
    bcrypt-ruby 2.1.2

    I've attached the html error page.

4 Error: Error parsing network spec: ["Central_VPN_Nets", [:lineno, 634]] was updated
  • Craig Bugzefsky
    • State changed from open to resolved
    by Craig Bugzefsky at 10:37 PM

    I fixed this and updated the cisco_firewall_spec to prevent regressions.

    I pushed this to the public repo.

    commit 13589d6188cf6eb15a466acc6a6bb11c9abffd25
    Autho...

  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 9:42 PM
3 Error: undefined method `overlap?' for nil:NilClass was updated
  • Craig Bugzefsky
    • State changed from new to open
    by Craig Bugzefsky at 9:41 PM

    This is likely a result of us mishandling remarks.

    I'll confirm that once I have remark handling fixed.