search

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.
GNU General Public License v3.0
10.73k stars 498 forks source link

Ping is blocked #1194

Open Danny3 opened 16 hours ago

Danny3 commented 16 hours ago

The 'ping' command is blocked I was trying to ping another computer on my LAN with the following command: ping 192.168.1.2 Which gave this output: PING 192.168.1.2 (192.168.1.2) 56(84) bytes of data.

Here the above message stays unchanged for a long time, until I press CTRL+C, which then shows: --- 192.168.1.2 ping statistics --- 60 packets transmitted, 0 received, 100% packet loss, time 60423ms

After spending 2-3 hours on the other computer to see what is going on, I moved to the firewall and deleted all rules to see if I blocked ping by mistake and see the pop-up again, but the pop-up is never shown when the ping command is executed.

Include the following information:

To Reproduce Install the firewall from Debian's repository with a command like: sudo apt install opensnitch

Steps to reproduce the behavior:

  1. Open Konsole terminal emulator
  2. Ping a local devices that is up and running
  3. Wait for the ping to show the normal output
  4. See that there's no output, except for the ping attempt
  5. Pause the firewall
  6. See that the ping finally starts working and lines of output are added

Post error logs: There are no error logs, as far as I can see. Except this one in the [2024-09-20 10:04:37]  WAR  iptables not available: exec: "iptables": executable file not found in $PATH

Expected behavior (optional) Ping command not blocked, as always. This is the first time in years when I see that is blocked.

Additional context I saw another open issue about ping being blocked by having Firefox open. I don't use Firefox, but LibreWolf and I tried to close it for testing, but doesn't solve this problem. Only pausing the firewall solves the problem.

Any idea what could be the problem here or what more should I try?

Thank you!

Danny3 commented 13 hours ago

I think I found a solution!

I uninstalled (purged) it. And then downloaded and installed the files from here, version: 1.6.6 Which seems to work Ping seems to work normally now, without having to disable the firewall.

Can the version in Debian's repository be updated to this one, that seems to work? I much prefer to have it installed from Debian's repository so I can easily be notified when there's an update and update to it.

BTW, the uninstall (purge) command probably doesn't work correctly, at least as I expected it, by removing not only the rules, but also the settings that I previously made and the tab that I have selected last time I had it open. Not a big problem, but I think that when a program is uninstalled in the purge way, everything should be removed so that if it's reinstalled, it will look and behave like it was the first time being installed.

gustavo-iniguez-goya commented 6 hours ago

hey @Danny3 !

iptables not available: exec: "iptables": executable file not found in $PATH

This may be the reason of the issue. Check where is the iptables binary: whereis iptables or command -v iptables as root.

And see if the path is added to $PATH.

Can the version in Debian's repository be updated to this one, that seems to work?

If I'm still on time to do it yes. I haven't had all the free time I expected this year.