Community discussions

MikroTik App
  4. RouterOS
  5. General

/ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Post Reply
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

/ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Nov 15, 2007 11:30 pm

I just upgraded from 2.9.45 to 3.0 rc10 this past weekend, totally cleared out my ruleset, so i could start fresh.

I'm noting a problem trying to remove established (or any listed) connection from the connection tracking, both thru the GUI and thru the CLI:
...
51 SA tcp 192.168.200.8:1754 x.x.x.x:1863 none 23h26m13s
52 SA tcp 192.168.200.8:3794 x.x.x.x:22 56 23h26m13s
53 SA tcp 192.168.200.8:2851 x.x.x.x:993 none 23h21m44s

[dsdee@sentry] /ip firewall connection> remove 49
action timed out - try again, if error continues contact MikroTik support and se
nd a supout file (13)
[dsdee@sentry] /ip firewall connection>
Has anyone else noted this problem??

Thanks,
David
Last edited by dsdee on Tue Jan 29, 2008 5:20 pm, edited 2 times in total.
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Fri Nov 16, 2007 2:34 pm

[bump]

Can someone else try to remove a connection from the active connection table and verify that the router does indeed not respond/time out for the command?? I can't be the only one experiencing this problem...
Top
 
changeip
Forum Guru
Forum Guru
Posts: 3833
Joined: Fri May 28, 2004 5:22 pm

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Fri Nov 16, 2007 7:03 pm

3.0rc10

It didn't time out for me, but took up to 1 minute to come back to the terminal. I also don't know for sure that it even removed it.

remove [find assured=no]

Sam
Top
 
User avatar
che
Member Candidate
Member Candidate
Posts: 111
Joined: Fri Oct 07, 2005 1:04 pm

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Mon Nov 19, 2007 1:23 am

I tried that on my home router RB532A RouterOS v3.0rc10, ~500 connections in list.

Terminal hanged for ~30secs and connection was not removed.
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Mon Nov 19, 2007 3:44 am

Good deal, then it isn't just me.

Just to verify that it's not a "quantity of connections in the list" issue, I only have 75 or so, and it is still behaving as described above.
Top
 
User avatar
GWISA
Member
Member
Posts: 389
Joined: Tue Jan 31, 2006 2:37 pm
Location: Johannesburg, South Africa

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Mon Nov 19, 2007 10:48 am

We're experiencing policy routing problems on 3rc10 which I am suspecting may be related...
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Fri Jan 11, 2008 5:31 am

Hello;

I've now upgraded to rc14 and am still having this problem.
[dsdee@sentry] > /ip firewall connection remove [ find connection-mark = "web_conn" ]
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
[dsdee@sentry] >
I don't think it got fixed...

Additionally, within Winbox, clicking on a line in the Firewall/Connections list and then clicking "-" to remove it, doesn't seem to remove it, either.
Top
 
User avatar
che
Member Candidate
Member Candidate
Posts: 111
Joined: Fri Oct 07, 2005 1:04 pm

Re: /ip firewall connection remove broken in 3.0 rc10 - rc14?

Tue Jan 29, 2008 4:33 pm

Hi,

Same router as in my previous post - 532A, this time with latest RouterOS v3.1: same problem.
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.1 (still)

Tue Jan 29, 2008 5:16 pm

Same here. I've upgraded to 3.1 on my RB532, and the
/ip firewall connection remove ###
on the console hangs til I hit ^C, or until it times out.

Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.
Top
 
User avatar
Flavioweb
newbie
Posts: 35
Joined: Tue Jan 22, 2008 8:52 pm

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Tue Jan 29, 2008 6:15 pm

Same here. I've upgraded to 3.1 on my RB532, and the
/ip firewall connection remove ###
on the console hangs til I hit ^C, or until it times out.

Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.
Same thing happens to me with RB133C and ROS 3.1...

And if i try to delete many connections the router freeze and stop work until reboot via -power supply unplug-...
Top
 
leequince
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Sat May 27, 2006 1:10 pm

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Wed Jan 30, 2008 12:43 am

Has anybody else logged this with support @ mikrotik?
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Wed Jan 30, 2008 7:44 pm

I have not.

I had only logged it here, since I was under the impression this was the place to raise issues with beta versions, and this issue has been present since I first migrated over to the 3.0 Release Candidates.
Top
 
User avatar
che
Member Candidate
Member Candidate
Posts: 111
Joined: Fri Oct 07, 2005 1:04 pm

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Sun Feb 03, 2008 4:47 pm

v3.2

Seems to be working. :)
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Sun Feb 03, 2008 5:11 pm

Yep, seems to be working well! Thanks!
Top
 
User avatar
Flavioweb
newbie
Posts: 35
Joined: Tue Jan 22, 2008 8:52 pm

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Mon Feb 04, 2008 2:06 pm

I confirm that, also for me, with 3.2 all works fine.
Top
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:
Contact Caci99

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Apr 24, 2008 1:48 am

I confirm that, also for me, with 3.2 all works fine.
Sorry to bring this issue back, but seems it isn't working for me on 3.7, RB600AP
Top
 
cmit
Forum Guru
Forum Guru
Posts: 1547
Joined: Fri May 28, 2004 12:49 pm
Location: Germany

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Apr 24, 2008 3:28 pm

In 3.7 on a RB150 (MiniRouter) this does work. Don't have an RB600 at hand to test, though.
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Apr 24, 2008 3:42 pm

It's working on a RB500, too, on v3.7

Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?
Top
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:
Contact Caci99

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Apr 24, 2008 11:21 pm

It's working on a RB500, too, on v3.7

Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?
If I try to manually remove a connection from /ip firewall connection, it would not.
This hapens in Winbox and CLI too. The message is:

Couldn't remove connection <x.x.x.x:yyy->x.x.x.x:yyy> - action failed (6)
Top
 
dsdee
newbie
Topic Author
Posts: 43
Joined: Thu Dec 08, 2005 2:32 am
Location: Denver, CO

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Thu Apr 24, 2008 11:31 pm

That's different from what I was originally seeing, I think, where it would hang, and then finally come back

I have seen what you show, but I have seen it (recently) when it is a repeated packet stream trying to keep the connection alive, such as a SIP/RTP connection, where as soon as you would kill it, it would be coming back anyways. Or something similar to that.
Top
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:
Contact Caci99

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Fri Apr 25, 2008 12:11 am

Yes, I saw you were reporting a hanging problem, but since after that some of you posted it is working...
well it is not working for me :)
Could it be related to the Software Level? I have level 4.
And strange thing is that it could not remove even a connection with "TCP State=Close"
Top
Post Reply
  4. RouterOS
  5. General