New HP2551 Setup

[water01]

Well done everyone, that was it.

I enabled an inbound port for Port 8998 for Domain, Public and Private networks and MX is now receiving a full data stream from the HP2551. Didn't have this problem with my HP2551 on Windows 10, could this be a Windows 11 problem?

One last thing. I started posting data to Ecowitt.net on the 20th April, but actually started CumulusMX up on the 24th. Putting the start date to 20/04/2024 doesn't seemed to have picked up data from Ecowitt.net prior to the 24th. Is there any way of achieving that?

[mcrossley]

The old C1 FAQ is still valid: https://www.cumuluswiki.org/a/FAQ#I%E2% ... er_station

[SamiS]

Well done everyone, that was it.

I enabled an inbound port for Port 8998 for Domain, Public and Private networks and MX is now receiving a full data stream from the HP2551. Didn't have this problem with my HP2551 on Windows 10, could this be a Windows 11 problem?

Both win 10 and 11 should block incoming connections by default, but in real world there seems to be variance how the firewall is configured. Basically when you install a program, the setup process should apply the necessary firewall rules. Maybe some programs do open too big portranges, or the user adjusts the firewall inproperly when resolving some other issue.

Since Cumulus does not have a setup program, and the needed firewall rules are depending from the station type, it is the user’s responsibility to adjust the firewall. Some station types do not need inbound connections at all. So in my eyes this is not technically a problem in the first place. Theoretically it maybe could be possible to enumerate firewall rules and compare them to the station type selected in Windows. But on linux it would be quite hard, since there are several different firewalls depending on distro and version, and reading the rules probably would need root permissions.

A suggestion @Mark: What if you added a list of needed firewall ports to the station configuration sceen for the station types that depend on inbound connections?

[davepaterson]

I have V4 running on 2 Win11 laptops with no problem one reading the GW1100C and the other my HP2551 station. I got no clue about firewall rules and because it is running great me no touch.

[SamiS]

I have V4 running on 2 Win11 laptops with no problem one reading the GW1100C and the other my HP2551 station. I got no clue about firewall rules and because it is running great me no touch.

Just a thought. When you connect a windows machine to a new network first time, it asks something about ”do you want this pc to be discoverable for other devices in this network”. I wonder if answering yes will make the firewall ruleset more relaxed, and if answered no, then you must allow all inbound manually. Dunno.

[davepaterson]

Slow motion brain kicked in through the night. As I still have V3 running on both laptops I am running V4 on port 8999, don't know if that will make any difference to your problem but could be worth a try on port 8999

[SamiS]

Slow motion brain kicked in through the night. As I still have V3 running on both laptops I am running V4 on port 8999, don't know if that will make any difference to your problem but could be worth a try on port 8999

David’s problem was resolved by adding the appropriate firewall rule, so no need to make more guesses how to fix it. I was just speculating around why someone needs manual adjustment while someone seems to cope without.

[mcrossley]

Afaik, you have always had to create a firewall rule on Windows if you wanted to access the dashboard from another device. With the advent of of the http "listening" protocols the role is also required from them. I'll see if I can dig out some old threads on this, I'm sure I have the cmd line commands for creating appropriate rules way back, but it doesn't look like they found their way into the wiki

[SamiS]

Afaik, you have always had to create a firewall rule on Windows if you wanted to access the dashboard from another device. With the advent of of the http "listening" protocols the role is also required from them. I'll see if I can dig out some old threads on this, I'm sure I have the cmd line commands for creating appropriate rules way back, but it doesn't look like they found their way into the wiki

Ah, yes, Dashboard remote access probably explains things at least partially.

It could be a nice addition to provide the required commands just like file integrity check etc.

[mcrossley]

I found this one... viewtopic.php?p=158770#p158770

Code: Select all

netsh advfirewall firewall add rule name="Allow CMX Inbound 8998" dir=in action=allow protocol=TCP localport=8998

Early on Cumulus MX also had instructions to "permit" the web service to run under a regular user, I don't know if this is still required in Windows 10/11?

Code: Select all

netsh http add urlacl url=http://*:8998/ user=\users