/ip firewall connection remove broken in 3.0 rc10-14, & v3.1

dsdee · Thu Nov 15, 2007 11:30 pm

I just upgraded from 2.9.45 to 3.0 rc10 this past weekend, totally cleared out my ruleset, so i could start fresh.

I'm noting a problem trying to remove established (or any listed) connection from the connection tracking, both thru the GUI and thru the CLI:

...
51 SA tcp 192.168.200.8:1754 x.x.x.x:1863 none 23h26m13s
52 SA tcp 192.168.200.8:3794 x.x.x.x:22 56 23h26m13s
53 SA tcp 192.168.200.8:2851 x.x.x.x:993 none 23h21m44s

[dsdee@sentry] /ip firewall connection> remove 49
action timed out - try again, if error continues contact MikroTik support and se
nd a supout file (13)
[dsdee@sentry] /ip firewall connection>

Has anyone else noted this problem??

Thanks,
David

dsdee · Fri Nov 16, 2007 2:34 pm

[bump]

Can someone else try to remove a connection from the active connection table and verify that the router does indeed not respond/time out for the command?? I can't be the only one experiencing this problem...

changeip · Fri Nov 16, 2007 7:03 pm

3.0rc10

It didn't time out for me, but took up to 1 minute to come back to the terminal. I also don't know for sure that it even removed it.

remove [find assured=no]

Sam

che · Mon Nov 19, 2007 1:23 am

I tried that on my home router RB532A RouterOS v3.0rc10, ~500 connections in list.

Terminal hanged for ~30secs and connection was not removed.

dsdee · Mon Nov 19, 2007 3:44 am

Good deal, then it isn't just me.

Just to verify that it's not a "quantity of connections in the list" issue, I only have 75 or so, and it is still behaving as described above.

GWISA · Mon Nov 19, 2007 10:48 am

We're experiencing policy routing problems on 3rc10 which I am suspecting may be related...

dsdee · Fri Jan 11, 2008 5:31 am

Hello;

I've now upgraded to rc14 and am still having this problem.

[dsdee@sentry] > /ip firewall connection remove [ find connection-mark = "web_conn" ]
action timed out - try again, if error continues contact MikroTik support and send a supout file (13)
[dsdee@sentry] >

I don't think it got fixed...

Additionally, within Winbox, clicking on a line in the Firewall/Connections list and then clicking "-" to remove it, doesn't seem to remove it, either.

che · Tue Jan 29, 2008 4:33 pm

Hi,

Same router as in my previous post - 532A, this time with latest RouterOS v3.1: same problem.

dsdee · Tue Jan 29, 2008 5:16 pm

Same here. I've upgraded to 3.1 on my RB532, and the

/ip firewall connection remove ###

on the console hangs til I hit ^C, or until it times out.

Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.

Flavioweb · Tue Jan 29, 2008 6:15 pm

Same here. I've upgraded to 3.1 on my RB532, and the
/ip firewall connection remove ###
on the console hangs til I hit ^C, or until it times out.

Also, the GUI "-" button on the Firewall/Connections page will most-times NOT remove the item selected, although intermittently, it will.

Same thing happens to me with RB133C and ROS 3.1...

And if i try to delete many connections the router freeze and stop work until reboot via -power supply unplug-...

leequince · Wed Jan 30, 2008 12:43 am

Has anybody else logged this with support @ mikrotik?

dsdee · Wed Jan 30, 2008 7:44 pm

I have not.

I had only logged it here, since I was under the impression this was the place to raise issues with beta versions, and this issue has been present since I first migrated over to the 3.0 Release Candidates.

che · Sun Feb 03, 2008 4:47 pm

v3.2

Seems to be working.

dsdee · Sun Feb 03, 2008 5:11 pm

Yep, seems to be working well! Thanks!

Flavioweb · Mon Feb 04, 2008 2:06 pm

I confirm that, also for me, with 3.2 all works fine.

Caci99 · Thu Apr 24, 2008 1:48 am

I confirm that, also for me, with 3.2 all works fine.

Sorry to bring this issue back, but seems it isn't working for me on 3.7, RB600AP

cmit · Thu Apr 24, 2008 3:28 pm

In 3.7 on a RB150 (MiniRouter) this does work. Don't have an RB600 at hand to test, though.

dsdee · Thu Apr 24, 2008 3:42 pm

It's working on a RB500, too, on v3.7

Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?

Caci99 · Thu Apr 24, 2008 11:21 pm

It's working on a RB500, too, on v3.7

Just to see if it is the same problem, or not, can you provide details on your "it doesn't work" ?? What are you doing, and what are you seeing?

If I try to manually remove a connection from /ip firewall connection, it would not.
This hapens in Winbox and CLI too. The message is:

Couldn't remove connection <x.x.x.x:yyy->x.x.x.x:yyy> - action failed (6)

dsdee · Thu Apr 24, 2008 11:31 pm

That's different from what I was originally seeing, I think, where it would hang, and then finally come back

I have seen what you show, but I have seen it (recently) when it is a repeated packet stream trying to keep the connection alive, such as a SIP/RTP connection, where as soon as you would kill it, it would be coming back anyways. Or something similar to that.

Caci99 · Fri Apr 25, 2008 12:11 am

Yes, I saw you were reporting a hanging problem, but since after that some of you posted it is working...
well it is not working for me

Could it be related to the Software Level? I have level 4.
And strange thing is that it could not remove even a connection with "TCP State=Close"

/ip firewall connection remove broken in 3.0 rc10-14, & v3.1

/ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 ?

Re: /ip firewall connection remove broken in 3.0 rc10 - rc14?

Re: /ip firewall connection remove broken in 3.1 (still)

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Re: /ip firewall connection remove broken in 3.0 rc10-14, & v3.1

Who is online