Page 1 of 1
/ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Nov 15, 2007 11:30 pm
by dsdee
I just upgraded from 2.9.45 to 3.0 rc10 this past weekend, totally cleared out my ruleset, so i could start fresh.
I'm noting a problem trying to remove established (or any listed) connection from the connection tracking, both thru the GUI and thru the CLI:
...
51 SA tcp 192.168.200.8:1754 x.x.x.x:1863 none 23h26m13s
52 SA tcp 192.168.200.8:3794 x.x.x.x:22 56 23h26m13s
53 SA tcp 192.168.200.8:2851 x.x.x.x:993 none 23h21m44s
[dsdee@sentry] /ip firewall connection> remove 49
action timed out - try again, if error continues contact MikroTik support and se
nd a supout file (13)
[dsdee@sentry] /ip firewall connection>
Has anyone else noted this problem??
Thanks,
David
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Fri Nov 16, 2007 2:34 pm
by dsdee
[bump]
Can someone else try to remove a connection from the active connection table and verify that the router does indeed not respond/time out for the command?? I can't be the only one experiencing this problem...
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Fri Nov 16, 2007 7:03 pm
by changeip
3.0rc10
It didn't time out for me, but took up to 1 minute to come back to the terminal. I also don't know for sure that it even removed it.
remove [find assured=no]
Sam
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Mon Nov 19, 2007 1:23 am
by che
I tried that on my home router RB532A RouterOS v3.0rc10, ~500 connections in list.
Terminal hanged for ~30secs and connection was not removed.
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Mon Nov 19, 2007 3:44 am
by dsdee
Good deal, then it isn't just me.
Just to verify that it's not a "quantity of connections in the list" issue, I only have 75 or so, and it is still behaving as described above.
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Mon Nov 19, 2007 10:48 am
by GWISA
We're experiencing policy routing problems on 3rc10 which I am suspecting may be related...
Re: /ip firewall connection remove broken in 3.0 rc10 ?
Posted: Fri Jan 11, 2008 5:31 am
by dsdee
Hello;
I've now upgraded to rc14 and am still having this problem.
[dsdee@sentry] > /ip firewall connection remove [ find connection-mark = "web_conn" ]
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
[dsdee@sentry] >
I don't think it got fixed...
Additionally, within Winbox, clicking on a line in the Firewall/Connections list and then clicking "-" to remove it, doesn't seem to remove it, either.
Re: /ip firewall connection remove broken in 3.0 rc10 - rc14?
Posted: Tue Jan 29, 2008 4:33 pm
by che
Hi,
Same router as in my previous post - 532A, this time with latest RouterOS v3.1: same problem.
Re: /ip firewall connection remove broken in 3.1 (still)
Posted: Tue Jan 29, 2008 5:16 pm
by dsdee
Same here. I've upgraded to 3.1 on my RB532, and the
/ip firewall connection remove ###
on the console hangs til I hit ^C, or until it times out.
Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Tue Jan 29, 2008 6:15 pm
by Flavioweb
Same here. I've upgraded to 3.1 on my RB532, and the
/ip firewall connection remove ###
on the console hangs til I hit ^C, or until it times out.
Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.
Same thing happens to me with RB133C and ROS 3.1...
And if i try to delete many connections the router freeze and stop work until reboot via -power supply unplug-...
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Wed Jan 30, 2008 12:43 am
by leequince
Has anybody else logged this with support @ mikrotik?
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Wed Jan 30, 2008 7:44 pm
by dsdee
I have not.
I had only logged it here, since I was under the impression this was the place to raise issues with beta versions, and this issue has been present since I first migrated over to the 3.0 Release Candidates.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Sun Feb 03, 2008 4:47 pm
by che
v3.2
Seems to be working.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Sun Feb 03, 2008 5:11 pm
by dsdee
Yep, seems to be working well! Thanks!
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Mon Feb 04, 2008 2:06 pm
by Flavioweb
I confirm that, also for me, with 3.2 all works fine.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Apr 24, 2008 1:48 am
by Caci99
I confirm that, also for me, with 3.2 all works fine.
Sorry to bring this issue back, but seems it isn't working for me on 3.7, RB600AP
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Apr 24, 2008 3:28 pm
by cmit
In 3.7 on a RB150 (MiniRouter) this does work. Don't have an RB600 at hand to test, though.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Apr 24, 2008 3:42 pm
by dsdee
It's working on a RB500, too, on v3.7
Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Apr 24, 2008 11:21 pm
by Caci99
It's working on a RB500, too, on v3.7
Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?
If I try to manually remove a connection from /ip firewall connection, it would not.
This hapens in Winbox and CLI too. The message is:
Couldn't remove connection <x.x.x.x:yyy->x.x.x.x:yyy> - action failed (6)
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Thu Apr 24, 2008 11:31 pm
by dsdee
That's different from what I was originally seeing, I think, where it would hang, and then finally come back
I have seen what you show, but I have seen it (recently) when it is a repeated packet stream trying to keep the connection alive, such as a SIP/RTP connection, where as soon as you would kill it, it would be coming back anyways. Or something similar to that.
Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1
Posted: Fri Apr 25, 2008 12:11 am
by Caci99
Yes, I saw you were reporting a hanging problem, but since after that some of you posted it is working...
well it is not working for me
Could it be related to the Software Level? I have level 4.
And strange thing is that it could not remove even a connection with "TCP State=Close"