topic Re: dropbear R.I.P ! in Spark Firewall (SMB)

dropbear R.I.P !

G_W_Albrecht — Mon, 03 Oct 2022 07:44:45 GMT

In sk97638 Check Point Processes and Daemons under 1800 / 1600 / 1500 / 1400 / 1200R / 1100 / 900 / 700 / 600 appliances we find a list of the 4 GAiA Embedded daemons, and the last is

dropbear	Description	LightWeight SSH server. This process does not exist starting from the R80.20.60 and R81.10 versions. This process does not exist on 900, 700, and 600 models.
	Notes	"cpwd_admin list" command shows the process as "dropbear".
	To Stop	none
	To Start	none

I can find it on my 1550 as well as on my 730 - but according to the SK, only 1500 / 1600 / 1800 with firmware lower R80.20.60 have it ? I have given feedback, but can anyone see dropbear on other models and what about R81.10.00 ?

Re: dropbear R.I.P !

Amir_Ayalon — Mon, 03 Oct 2022 08:03:30 GMT

We replaced dropbear(SSH server) with openssh (same as in MT).

effective in R80.20.60 and R81.10.00

Re: dropbear R.I.P !

G_W_Albrecht — Mon, 03 Oct 2022 08:13:16 GMT

This is mentioned in neither Release Notes nor CLI guides, no sshd based commands are listed, but still dropbear, see:

Example 1 - Standard output

[Expert@HostName]# cpwd_admin list
APP        PID    STAT  #START  START_TIME
RNGD       3076   E     1       [16:03:47] 14/9/2021   N
/pfrm2.0/bin/jitterentropy_rngd -v
DROPBEAR   11318  E     1       [16:03:51] 16/9/2021   N    dropbear -F -j
-k -p 22 -r /pfrm2.0/etc/dropbear_rsa_host_key -b /opt/fw1/conf/sshd_
banner.txt

Quantum Spark 1500, 1600 and 1800 Appliance Series R81.10.00 CLI Reference Guide | 1448

Re: dropbear R.I.P !

Amir_Ayalon — Mon, 03 Oct 2022 08:16:07 GMT

thanks

I'll check

Re: dropbear R.I.P !

PhoneBoy — Mon, 03 Oct 2022 15:03:01 GMT

And you replaced the ssh client too 😉

[Expert@One550]# ssh -V
OpenSSH_8.5p1, OpenSSL 1.1.1n 15 Mar 2022
[Expert@One550]#