Firewall displayed as inaktiv

Hello everybody,
the firewall on my Freedombox is displayed as “inactive” under “System” and I can not start it from there, that makes my nervous if I simultaneously see in the log files that a Chinese IP adress knocks:

error: maximum authentication attempts exceeded for root from 218.92.x.xxx port 18213 ssh2 [preauth

]But if I look at cockpit or via ssh on the command line with “service - status - all” the Firewall is active.
Why is not it displayed as active under system?


Debian GNU/Linux 10 (buster) and FreedomBox Version 19.14. (stable) downloaded from (http://Freedombox.org), for RaspberryPi 3b+ Firefox 68.01 on manjaro Linux

firewalld’s status comes from the output of the following command:

firewall-cmd --state

Output should be

running

Please also run and report the output of the following commands:

systemctl status firewalld
journalctl -u firewalld

after reboot the firewall has started and was displayed as running in system/firewall too
Now everything works fine but it was the second time the firewall was displayed inactive and i never switch it off. Here comes the output from.

systemctl status firewalld

● firewalld.service - firewalld - dynamic firewall daemon
Loaded: loaded (/lib/systemd/system/firewalld.service; enabled; vendor preset: enabled)
Active: active (running) since Tue 2019-08-20 20:52:14 CEST; 21h ago
Docs: man:firewalld(1)
Main PID: 341 (firewalld)
Tasks: 2 (limit: 2125)
Memory: 16.9M
CGroup: /system.slice/firewalld.service
└─341 /usr/bin/python3 /usr/sbin/firewalld --nofork --nopid
Warning: Journal has been rotated since unit was started. Log output is incomplete or unavailable.

and journalctl -u firewalld

– Logs begin at Wed 2019-08-21 10:36:53 CEST, end at Wed 2019-08-21 18:01:16 CEST. –
– No entries –

I saw in the update logs that no updates were carried out since I connected the box to a buffer battery a few days ago. But after

E: dpkg was interrupted, you must manually run ‘dpkg --configure -a’ to correct the problem.
root@freedombox:~# dpkg --configure -a

i cold make the update manually. Can there be a connection? Now the Box is connected directly. I will have a Eye on Firewall


Debian GNU/Linux 10 (buster) and FreedomBox Version 19.14.
RaspberryPi 3b+ Firefox 68.01 on manjaro Linux
And I love my Freedombox!

Recently firewalld package was upgraded in testing/unstable distributions. There was a new configuration file prompt that prevented automatic upgrades. FreedomBox released an update to handle the configuration file prompt and let firewalld upgrade to 0.7.x from 0.6.x. So, this issue could be related.

Requiring dpkg --configure -a sounds like an upgrade operation was interrupted. This could have resulted in the problem you saw. unattended-upgrades would likely have fixed this situation in its next run (once a day) due to Unattended-Upgrade::AutoFixInterruptedDpkg "true"; in the default configuration. Please also examine /var/log/unattended-upgrades/*.log to find out where the upgrade failed and if firewalld was involved.

/var/log/unattended-upgrades/*.log shows

2019-08-17 04:07:28,514 INFO Checking if system is running on battery is skipped. Please install powermgmt-base package to check power status and skip installing updates when the system is running on battery.
2019-08-17 04:07:28,602 INFO Initial blacklist :
2019-08-17 04:07:28,604 INFO Initial whitelist:
2019-08-17 04:07:28,606 INFO Starting unattended upgrades script
2019-08-17 04:07:28,607 INFO Allowed origins are: origin=Debian,codename=buster,label=Debian, origin=Debian,codename=buster,label=Debian-Security, o=Debian Backports,a=buster-backports,l=Debian Backports
2019-08-17 04:07:45,976 INFO Packages that will be upgraded: freedombox
2019-08-17 04:07:45,980 INFO Writing dpkg log to /var/log/unattended-upgrades/unattended-upgrades-dpkg.log
2019-08-17 04:09:17,184 WARNING SIGTERM received, will stop
2019-08-17 04:09:25,441 ERROR Exception happened during upgrade.
Traceback (most recent call last):
File “/usr/bin/unattended-upgrades”, line 610, in cache_commit
res = cache.commit(install_progress=iprogress)
File “/usr/lib/python3/dist-packages/apt/cache.py”, line 648, in commit
raise SystemError(“installArchives() failed”)
SystemError: installArchives() failed
2019-08-17 04:09:28,388 WARNING SIGTERM received, will stop
2019-08-17 04:09:28,389 ERROR Exception happened during upgrade.
NoneType: None
2019-08-17 04:09:28,391 ERROR Installing the upgrades failed!
2019-08-17 04:09:28,393 ERROR error message: installArchives() failed
2019-08-17 04:09:28,395 ERROR dpkg returned a error! See /var/log/unattended-upgrades/unattended-upgrades-dpkg.log for details

so there was a Problem during update process and maybe the Problem was me because there was a Thunderstorm in the night and i switched off Freedombox…