Chris Davis
2013-11-26 20:16:45 UTC
Thanks for your reply Alan. Someone answered me by personal email. What I discovered was that there were 2 patches that related to Fortinet on the Rancid ftp site. (I didn't even know there was one) Once I found it and the patches, I applied them to my 2.3.8 build and re-made the package and installed it. The problems were taken care of by the patches. The biggest one was that fnlogin was calling for a port for ssh and not supplying one. That problem was fixed by patch 3. Patch 4 looks like it dealt with the key issue and was recommended, so I installed that one as well.
Everything has been perfect since. No more 24 times a day diff files with Keys and date/time data in them. And I made some insignificant changes on the firewall and they were reported properly on subsequent runs. Much, much better. Thanks to whoever wrote those patches. Just wish I had gotten around to this earlier.
Chris
-----Original Message-----
Message: 2
Date: Tue, 26 Nov 2013 01:25:20 +0200
From: Alan McKinnon <***@gmail.com>
To: rancid-***@shrubbery.net
Subject: Re: [rancid] Fortinet Firewall Question.
Message-ID: <***@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
- regexes have been updated to remove that annoying cycling data
- 2.3.8 is not sending mail (or you are not getting it).
A few simple questions to determine which it is:
- do you still receive other mail from rancid?
- are the line of interest appearing in rancid's output file? Do they change there after you make a config change on the device?
--
Alan McKinnon
***@gmail.com
*****************************
Everything has been perfect since. No more 24 times a day diff files with Keys and date/time data in them. And I made some insignificant changes on the firewall and they were reported properly on subsequent runs. Much, much better. Thanks to whoever wrote those patches. Just wish I had gotten around to this earlier.
Chris
-----Original Message-----
Message: 2
Date: Tue, 26 Nov 2013 01:25:20 +0200
From: Alan McKinnon <***@gmail.com>
To: rancid-***@shrubbery.net
Subject: Re: [rancid] Fortinet Firewall Question.
Message-ID: <***@gmail.com>
Content-Type: text/plain; charset=ISO-8859-1
I have configured Rancid to process my Fortinet Firewalls. I was
running 2.3.6 and it was reporting every hour with changes because of
the time and keys in my HA cluster. Well, I finally had the time to
look at upgrading it to 2.3.8 today. I waited until after the hourly
processing, and configured, made and installed the upgrade.
I let it run, and voila, no firewall change. The end of the hourly
config diffs has finally ended. So then I went in and deleted a
disabled record, hoping to see it on the next hourly run. But I got
nothing. The firewall itself emailed me the change, but I saw nothing
reported in Rancid.
Any ideas?
There are two main possibilities for the behaviour you describe:running 2.3.6 and it was reporting every hour with changes because of
the time and keys in my HA cluster. Well, I finally had the time to
look at upgrading it to 2.3.8 today. I waited until after the hourly
processing, and configured, made and installed the upgrade.
I let it run, and voila, no firewall change. The end of the hourly
config diffs has finally ended. So then I went in and deleted a
disabled record, hoping to see it on the next hourly run. But I got
nothing. The firewall itself emailed me the change, but I saw nothing
reported in Rancid.
Any ideas?
- regexes have been updated to remove that annoying cycling data
- 2.3.8 is not sending mail (or you are not getting it).
A few simple questions to determine which it is:
- do you still receive other mail from rancid?
- are the line of interest appearing in rancid's output file? Do they change there after you make a config change on the device?
--
Alan McKinnon
***@gmail.com
*****************************