Posts by bepe

Thank you. I was worried about possible db structure changes, I hope the installer will handle them properly.

I had a Debian 10 upgrade on a nonprod system and a few thing broke... the only viable way was to move forward and upgrade to a nightly build. Not is is working properly and looks stable enough.

(I understand the daily build is not supported in any way.)

Is there a way to do an in-place reinstall and move from the nightly build to last stable version?

Thank you. IIRC the custom rules were all added to the IMSCP_INPUT chain but will check it over the weekend.

Thank you for the reminder.

• Your Distribution and its codename:
  Debian8 Jessie
• The i-MSCP version in use:
  i-MSCP 1.3.16 (the behaviour has been the same since 1.2.x when I first tested iMSCP)
• A understandable description of the problem
  I have an larger iptables ruleset with ~15k lines and have problems keeping those rules when upgrading. The size of the iptables rules is irrelevant, I just want to preserve my custom settings.
  Also, every time the default iptables rules are applied (I think when the server traffic stats are calculated) I have to reload my rules or disable the crontab for the stats.
  Is there a way to make my rules persistent between stats and between upgrades?
• The exact steps to reproduce the problem
  1. I generate a large iptables ruleset that I add to the default iptables rules. All unwanted IPs are blocked successfully.
  

  
  

  2. Traffic accounting cron jobs (see below) reset the rules every 30 minutes
  #0,30 * * * * root perl /var/www/imscp/engine/traffic/imscp-srv-traff > /var/log/imscp/imscp-srv-traff.log 2>&1
  #0,30 * * * * root perl /var/www/imscp/engine/traffic/imscp-vrl-traff > /var/log/imscp/imscp-vrl-traff.log 2>&1
  
  3. The default rules are active, but the IPs from my rules are not blocked anymore

  
  

  When I add the rules to the file that generates the default iptables rulesets, it get overwritten by every update.
  The only workaround for me was to disable the traffic accounting crons, so my iptables rules could remain in place, but this way I lose stats.
  

Thanks for any hint or guidance.

Hello,
I have an larger iptables ruleset with ~15k lines and have problems keeping those rules when upgrading. The size of the iptables rules is irrelevant, I just want to preserve my custom settings.
Also, every time the default iptables rules are applied (I think when the server traffic stats are calculated) I have to reload my rules or disable the crontab for the stats.
Is there a way to make my rules persistent between stats and between upgrades?
Thank you in advance!