No firewall log and

[gotuser32]

Hello,

I have read every wiki, official document and forum post concerning this issue- and I have reinstalled proxmox 5 times since October- had hardware failure and have been locked out when trying to change host ip address or move it to a vlan on another subnet. That being said (as if that isn't bad enough) I feel totally stupid.. Prior to this recent release I always had a firewall log; no all I get is
28/Jan/2019:12:18:41 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:12:18:41 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:12:20:08 -0600 starting pvefw logger
0 5 - 28/Jan/2019:13:07:29 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:13:07:29 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:13:09:33 -0600 starting pvefw logger
0 5 - 28/Jan/2019:13:17:54 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:13:17:54 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:13:19:21 -0600 starting pvefw logger
0 5 - 28/Jan/2019:14:19:35 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:14:19:35 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:14:19:35 -0600 starting pvefw logger
0 5 - 28/Jan/2019:14:24:24 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:14:24:24 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:14:25:52 -0600 starting pvefw logger
0 5 - 28/Jan/2019:14:25:56 -0600 received terminate request (signal)
0 5 - 28/Jan/2019:14:25:56 -0600 stopping pvefw logger
0 5 - 28/Jan/2019:14:25:56 -0600 starting pvefw logger

and in the system log:
Jan 28 15:46:08 pve1 systemd[1]: Started 100.scope.
Jan 28 15:46:08 pve1 systemd-udevd[7493]: Could not generate persistent MAC address for tap100i0: No such file or directory
Jan 28 15:46:08 pve1 kernel: device tap100i0 entered promiscuous mode
Jan 28 15:46:08 pve1 systemd-udevd[7548]: Could not generate persistent MAC address for fwbr100i0: No such file or directory
Jan 28 15:46:08 pve1 systemd-udevd[7566]: Could not generate persistent MAC address for fwln100i0: No such file or directory
Jan 28 15:46:08 pve1 systemd-udevd[7564]: Could not generate persistent MAC address for fwpr100p0: No such file or directory
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 1(fwln100i0) entered blocking state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 1(fwln100i0) entered disabled state
Jan 28 15:46:08 pve1 kernel: device fwln100i0 entered promiscuous mode
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 1(fwln100i0) entered blocking state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 1(fwln100i0) entered forwarding state
Jan 28 15:46:08 pve1 kernel: vmbr3: port 2(fwpr100p0) entered blocking state
Jan 28 15:46:08 pve1 kernel: vmbr3: port 2(fwpr100p0) entered disabled state
Jan 28 15:46:08 pve1 kernel: device fwpr100p0 entered promiscuous mode
Jan 28 15:46:08 pve1 kernel: vmbr3: port 2(fwpr100p0) entered blocking state
Jan 28 15:46:08 pve1 kernel: vmbr3: port 2(fwpr100p0) entered forwarding state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 2(tap100i0) entered blocking state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 2(tap100i0) entered disabled state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 2(tap100i0) entered blocking state
Jan 28 15:46:08 pve1 kernel: fwbr100i0: port 2(tap100i0) entered forwarding state

this is the same for vmbr0 etc..

I have all firewall settings on in all areas.

I am at a loss to fix this; can someone please give me a lesson and slap me with some knowledge?

 

[gotuser32]

and although I have a specific management ip- anything even on the entire host subnet can pull up login page

this is driving me insane

 

[gotuser32]

so far what I have notices is running the command line to version cluster.fw etc is that it did not represent the GUI- so I unchecked and rechecked and rebooted and settings magically appeared- but failed to magically work as expected.

 

[wolfgang]

Hi,

You have to be a bit more specific in case that somebody can help you.

have been locked out when trying to change host ip address or move it to a vlan on another subnet

Did you lose connection or do the firewall block you?

If you move the subnet the default lockout rules are no more working.
So, insure that ssh and port 8006 is open for the new subnet.

 

[gotuser32]

Wolfgang, sorry it took so long to get back- I ended up starting to log martains like crazy in the system log- same stuff in the firewall no info- deleted all of my VMs and all bridges but vmbr0 ran up a few VMs played arond the martians came back and right before the hard locked I got the IRQ 16 because nobody cares in the system log...end up me doing a hard shut down.
Upon restart pressing power button did nothing- pulled out scope and multimeter- all power good etc. pulled cmos battery reset bios- still nothing.
So I tore it all down and was thinking about doing some target practice in the morning (seriously pissed) instead went to bed. Put her all together tonight- she boots into bios just fine- have not put anything else together yet.

guess I will have to invest in some bifurcation hardware since bios supports it- I had left everything stock as I expected it to be fine... any thoughts?