TIPS Hardware Firewall Warning Won't Go Away

[rossiv]

This one's got me stumped. I just spun up a new 2.0.6.4.4 Green image with FreePBX 2.11 and Incredible 4.5, and after EVERY command I enter in SSH, I get a nag message about running Incredible PBX behind a secure hardware-based firewall.
I've never noticed this before on any install, so it must be new. It is 1:1 NAT'd through pfSense both inbound-NAT and outbound-NAT, but access is limited both by pfSense and TravelinMan/ipTables.
It initially appears after the Incredible PBX update script runs upon SSH login after 'status' auto-runs. Then after every "enter" whether or not a command is entered, it still displays.

                                     ┌────────────────────────SYSTEM INFORMATION───────────────────────────┐
                                     │  Asterisk   = ONLINE  | Dahdi     = ONLINE  | MySQL     = ONLINE    │  
                                     │  SSH        = ONLINE  | Apache    = ONLINE  | Iptables  = ONLINE    │  
                                     │  Fail2ban   = ONLINE  | Internet  = ONLINE  | Ip6Tables = ONLINE    │  
                                     │  Disk Free  = ADEQUATE| Mem Free  = ADEQUATE| NTPD      = ONLINE    │  
                                     │  SendMail   = ONLINE  | Samba     = OFFLINE | Webmin    = ONLINE    │  
                                     │  Ethernet0  = ONLINE  | Ethernet1 = N/A     | Wlan0     = N/A       │  
                                     │                                                                     │  
                                     │  PIAF Installed Version   = 2.0.6.4 under *KVM*                     │  
                                     │  FreePBX Version          = 2.11.0.11                               │  
                                     │  Running Asterisk Version = 11.5.1                                  │  
                                     │  Asterisk Source Version  = 11.5.1 MODIFIED                         │  
                                     │  Dahdi Source Version     = 2.7.0.1                                 │  
                                     │  Libpri Source Version    = 1.4.14                                  │  
                                     │  IP Address               = 192.168.1.63 on eth0                    │  
                                     │  Operating System         = CentOS release 6.4 (Final)              │  
                                     │  Kernel Version           = 2.6.32-358.6.2.el6.i686 - 32 Bit        │  
                                     │  Incredible Version       = 11.5                                    │  
                                     └─────────────────────────────────────────────────────────────────────┘  
                                                                                                              


WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  
root@pbx:~ $ 
WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  
root@pbx:~ $ 
WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  
root@pbx:~ $ 
WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  
root@pbx:~ $

Thoughts?

 

[Bob Helbush]

That's a message Ward put in. It's normal when running Incredible.

│

 

[rossiv]

That's a message Ward put in. It's normal when running Incredible.

│

I figured Ward or Tom put it in but it's so darn annoying. I am behind a firewall. I see it's intent but I would do it upon each login but not after every command.

 

[tbrummell]

^^^^^ + a million!

My eyes now seem to look right past it. I had to login to a box to see if it was still there...

 

[rossiv]

^^^^^ + a million!

My eyes now seem to look right past it. I had to login to a box to see if it was still there...

Good, so it's not just me. I'm going to do some digging.

 

[Bob Helbush]

Good, so it's not just me. I'm going to do some digging.

Edit bash_profile.orig in root

 

[rossiv]

Yep, that's where I am now. I changed

#export PS1="WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  \n\[$(tput setaf 2)\]\u@\h:\w $ \[$(tput sgr0)\]"
export " \n\[$(tput setaf 2)\]\u@\h:\w $ \[$(tput sgr0)\]"

But I lost some colors in the shell. Not all colors though. It did get rid of the message though.

 

[rossiv]

Edit bash_profile.orig in root

That's not the real file. You want to edit .bash_profile in ~

 

[rossiv]

This works - colors stay too

#export PS1="WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  \n\[$(tput setaf 2)\]\u@\h:\w $ \[$(tput sgr0)\]"
export PS1="$(tput setaf 2)\]\u@\h:\w $ \[$(tput sgr0)\]"

 

[LesD]

Thanks for the fix. Problem still there with 3.6.5

 

[wlraider70]

log out, then log back in

 

[lionheart]

This works - colors stay too

Refined rossiv's code into this:

#export PS1="WARNING: Always run Incredible PBX behind a secure hardware-based firewall.  \n\[$(tput setaf 2)\]\u@\h:\w $ \[$(tput sgr0)\]"
export PS1="$(tput setaf 2)\u@\h:\w $ \[$(tput sgr0)\]"

 

[ostridge]

I get a nag message about running Incredible PBX behind a secure hardware-based firewall.
I've never noticed this before on any install, so it must be new.

No @rossiv see my post https://pbxinaflash.com/community/posts/111925/

Oh perhaps we need some test code to check for a nat router or sbc lol.