<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;"><div>Just to finish this off:</div><div><br></div><div>I ignored that error, started Quassel IRC on my computer. There was the warning that my core did not support SSL, thus passwords etc. were exchanged unencrypted. But the core is now working on the computer and in QuasselDroid. </div><div>My impression is that I stumbled in a lot of topics that actually were not related to the firewalld updates.</div><div><br></div><div>Anyway, all working again now.</div><div><br></div><div> Dietmar</div><div><br></div><div>Am Freitag, den 14.09.2018, 18:36 +0200 schrieb permondes - sagen:</div><blockquote type="cite"><div>Hi Joseph,</div><div><br></div><div>most functions are working now - and I have no idea why. </div><div>DefaultZone is set to the packagers value "public", but this should have no influence as the packages have defined zones.</div><div>I realized I have to access the box now with "freedombox" in the browser instead of "freedombox.local". I do not know which update caused that change.</div><div><br></div><div>The only thing not working is Quassel. In QuasselDroid it got stuck at "SSL handshake" and on the desktop it just would not work.</div><div>I deactivated it in Plinth, then removed and purged it with apt (in order to get rid of the conf files). Now I am trying to re-install it with apt which terminates with</div><blockquote type="cite"><div>Generating SSL certificate as /var/lib/quassel/quasselCert.pem ...</div><div>su: Berechtigung verweigert</div></blockquote><div>The last phrase means "access denied". This reminds me of the initial issue with getting stuck at "SSL handshake". </div><div>That's where I am now.</div><div><br></div><div> Dietmar</div><div><br></div><div><br></div><div>Am Freitag, den 14.09.2018, 12:02 +0000 schrieb Joseph Nuthalapati:</div><blockquote type="cite"><pre>Dietmar,
I have upgraded firewalld on FreedomBox testing and chose to keep
FreedomBox's configuration instead of the package maintainer's
version. The upgrade seems to have gone through without issues.
The diff as you said is changing the default zone from external
to public and adding the line "FirewallBackend=iptables" to the
file.
root@FreedomBox /etc/firewalld # diff firewalld.conf
firewalld.conf.dpkg-dist 6c6
< DefaultZone=external
---
<blockquote type="cite">
DefaultZone=public
</blockquote>
57a58,64
<blockquote type="cite">
# FirewallBackend
# Selects the firewall backend implementation.
# Choices are:
# - nftables (default)
# - iptables (iptables, ip6tables, ebtables and ipset)
FirewallBackend=iptables
</blockquote>
You can try replacing your firewalld.conf file with the previous
version (see attached) and restart firewalld or a do a system
reboot.
permondes - sagen <<a href="mailto:sagen@permondes.de">sagen@permondes.de</a>> wrote:
<blockquote type="cite">
Gladly sudo works again.
What I see now is:- quassel-plinth is newly added to
zones/external and ../internal <- strange in firewalld added is
the line FirewallBackend=iptables Issue remains that I cannot
connect to my Quassel-core (no message in Debian, remains stuck
at SSL handshake in the android app)and that freedombox.local
cannot be used to access the box; IP-address works. Any ideas?
Am Mittwoch, den 12.09.2018, 21:57 +0200 schrieb permondes -
sagen:
<blockquote type="cite">
I had started this topic in Quassel but now I do not have access to
it any more, so I have to continue on the mailing list.
What I did was: "apt install firewalld", which changed the
DefaultZone=external to public. There was an error message at the end
of the install saying the operation (don't know which) was aborted
before it could be finished. Later-on I changed the settings back to
external and restarted the box twice.
Now I have no access through freedombox.local any more, so also Proxy
does not work. Nor Quassel.
It also says my user name is not any more in the sudoers file. I can
ssh into the box but do not get sudo access.
Now I am in trouble!!
Dietmar
_______________________________________________
Freedombox-discuss mailing list
<a href="mailto:Freedombox-discuss@alioth-lists.debian.net">Freedombox-discuss@alioth-lists.debian.net</a>
<a href="https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-d">https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-d</a>
iscuss_______________________________________________
</blockquote>
Freedombox-discuss mailing list
<a href="mailto:Freedombox-discuss@alioth-lists.debian.net">Freedombox-discuss@alioth-lists.debian.net</a>
<a href="https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss">https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss</a>
</blockquote>
</pre></blockquote><pre>_______________________________________________
Freedombox-discuss mailing list
<a href="mailto:Freedombox-discuss@alioth-lists.debian.net">Freedombox-discuss@alioth-lists.debian.net</a>
<a href="https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss">https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/freedombox-discuss</a></pre></blockquote></body></html>