Project

General

Profile

Actions

Bug #1968

closed

webconfigurator dies

Added by Franck Bourdonnec over 12 years ago. Updated about 12 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
Web Interface
Target version:
-
Start date:
10/19/2011
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Release Notes:
Affected Version:
2.0
Affected Architecture:

Description

--- /conf/backup/config-1319057958.xml 2011-10-19 23:18:58.000000000 0200
++ /conf/backup/config-1319057344.xml 2011-10-19 22:59:18.000000000 +0200
@ -2262,10 +2262,10 @
</alias>
<alias>
Hello team,

cleaning up aliases, I made the folowing change to an entry.
- downcase Www to www
- add ip 72.233.69.89

After saving the alias and applying, webconfigurator never restarted until I went to console,
enter /conf/backup; copy previous save to ../config.xml
Restart webconfigurator(11) was not enougth. Need full Restart(5)

Franck

<name>downloads_wordpress</name>
- <address>72.233.56.139 72.233.56.138 74.200.247.187 www.wordpress.com 72.233.69.89</address>
+ <address>72.233.56.139 72.233.56.138 74.200.247.187 Www.wordpress.com</address>
<descr><![CDATA[Source, patches, extensions]]></descr>
<type>host</type>
- <detail><![CDATA[qui||Entry added Thu, 06 Oct 2011 20:57:48 0200||Entry added Thu, 06 Oct 2011 20:59:46 +0200||Entry added Thu, 06 Oct 2011 21:00:57 +0200||antispam akismet]]></detail>
<detail><![CDATA[qui||Entry added Thu, 06 Oct 2011 20:57:48 +0200||Entry added Thu, 06 Oct 2011 20:59:46 +0200||Entry added Thu, 06 Oct 2011 21:00:57 +0200]]></detail>
</alias>

Actions #1

Updated by Chris Buechler over 12 years ago

  • Status changed from New to Feedback

it's not that simple. need the specific problem, this isn't adequate as a bug report. I suspect it's an installed package of some sort.

Actions #2

Updated by Franck Bourdonnec over 12 years ago

no, no other addon, pure valilla pfsense 2.0 !

It is not my habit to spell www.something Www.something.
I have notice two or more other alias with upcase first letter!

I dont think the IP addition is the problem. If you tell me where lighthttpd outputs its logs I can check for more precision.

Franck

Actions #3

Updated by Franck Bourdonnec over 12 years ago

ok,
new freeze of web interface WITHOUT modification.
This eliminates totally 'syntax error'

I made following investigation :

go /usr/local/www
#php index.php
....html .. pentential rebind attack ....
This test validate php+configurator

Going to webbrother
wget https//:123.123.123.123/index.html freezes. Excepted at leat the Rebind attach page.
If the brother asks for the certificate, it correctly receive it. Then NOTHING.
Tcpdump shows the client sending to pfsense as last exchange.

Restarting lighthttpd does nothing.

The problem is like if the pipe beetween php output and httpd is broken or if not httpd result is not sent to network...

The last page I called before freezing was : status_graph.php, displayed but never updated.

Restarting pfsense again fixed the broken chain.
Franck

Actions #4

Updated by Jim Pingle over 12 years ago

Probably the rate command is hanging on status_graph.php and if a command hangs like that, it hangs up fastcgi, which makes the web interface start working.

Next time try:

killall -9 rate

If that doesn't bring it back, try:

killall -9 php; killall -9 lighttpd; /etc/rc.restart_webgui

The rate command transitions the interface you're watching into promiscuous mode, and certain (older) NICs can flip out a little when that happens. I would suspect you'd have a similar issue with packet capture locking up on you, but it may be something else altogether.

As another test, you could mv /usr/local/www/bandwidth_by_ip.php to another location and then see if the traffic graph works without rate.

Actions #5

Updated by Franck Bourdonnec over 12 years ago

well,I will try to unlock as suggested next time if it happens again.

Something I did not mention here, related to the hardware : the pfsense runs on ESXI4.0 without wmware tools.
The NIC driver is the one from pfsense bsd (E1000).
When web control is lost, is it from LAN nic and from WAN nic together and pfsense is routing/filtering as usual.

Franck

Actions #6

Updated by Chris Buechler about 12 years ago

  • Status changed from Feedback to Closed
Actions

Also available in: Atom PDF