Intrusion Prevention broken after update

After updating to Core 194 my intrusion prevention graph is gone. And I cannot turn intrusion prevention on:

Is there a way to fix that or should I better save the settings, re-install from fresh and restore the settings?

I suspect that a fresh install is going to be your best bet.

The update to CU194 must have gone wrong quite badly for some reason.

You are missing a whole chunk of the Intrusion Prevention System page.

You have no checkboxes for enabling the IPS or the desired interfaces to scan.

Nothing was changed on that WUI page since September 2024 with CU 189.

If the graph used to work in CU193 then the fact that the graph code can’t find one of the required graphs is worrying. It suggests somehow that was deleted but not from the update as the script for that does not do anything with the /var/log directory contents.

I would suggest doing a fresh install and then restore from the backup you did before the update.

If you do your backups including the logfiles then when you restore you will get all your settings back and also the log history for the graphs etc up to when the backup was carried out.

If your backups don’t include the logs then a fresh install and backup restore is still the best thing to do but after the Intrusion Prevention System has been started you will have to wait for a short period until the first graph data is created. Then the graph will be able to be shown again.

2 Likes

Thanks! I will do that.:+1:

Little update for others: I have re-installed the IPFire from scratch. Then I could activate IPS. But as soon as I uploaded the saved settings from before, IPS was broken again. So I had to do a completely fresh install and manually set all necessary settings, set up VPN stuff etc. But now it’s all working fine (version 195).