Topics

Hallo,
folgender Fehler bringt das System zum Absturz!

Code Select Expand

configd.py: [fe6645ea-e72b-4b57-875e-824cd67502a5] Script action failed with Command '/usr/local/opnsense/scripts/filter/read_log.py /limit '100' /digest ''' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 484, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python3.7/subprocess.py", line 347, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/filter/read_log.py /limit '100' /digest ''' returned non-zero exit status 1.

Die Meldung wird über tausendfach ins Errorlog geschrieben wodurch der Festplatten und beim Lesen der Arbeitsspeicher überfüllt werden.

Könnt ihr euch des Problem mal annehmen? Die Firewall ist seit der Fehler existiert so ziemlich unbrauchbar. Das Aufrufen der Lobby bringt die Firewall bereits zum Abstürzen.

Ich danke euch,

Hallo,
der Konfigurationsimporteur scheint defekt zu sein ...

Leider ist es nicht möglich Virtuelle IP-Adresse zu importieren.
Nutzt man diese zum Beispiel beim NAT so kommt das System nach einem Neustart nicht mehr hoch.
(Bleibt also beim Hochfahren stehen)

Ich habe 15 Virtuelle IP-S in Benutzung ... das geht noch in Ordnung ...
Schwierig wird es bei den NAT-Regeln bei über 100 Stück ....

Evtl. wäre es noch sinnvoll statt der drop-down liste checkboxen zu benutzen beim Importer ...

Ich würde mich über eine Rückmeldung freuen,

Mit freundlichem Gruß
Dominik

Hi,

after updating an production system, one of my router went offline (failover system is running very well, btw)

In "dmesg" i found these:

Code Select Expand


re1: <RealTek 8168/8111 B/C/CP/D/DP/E/F/G PCIe Gigabit Ethernet> port 0xef00-0xefff mem 0xfebff000-0xfebfffff,0xcfff0000-0xcfffffff irq 17 at device 0.0 on pci2
re1: Using 1 MSI-X message
re1: Chip rev. 0x3c000000
re1: MAC rev. 0x00400000
miibus1: <MII bus> on re1
re1: Using defaults for TSO: 65518/35/2048
re1: Ethernet address: xx:xx:xx:xx:xx:xx:xx
re1: link state changed to UP
re1: link state changed to DOWN
re1: link state changed to UP
re1: link state changed to DOWN
re1: link state changed to UP
re1: <Realtek PCIe GBE Family Controller> port 0xef00-0xefff mem 0xfebff000-0xfebfffff,0xcfff0000-0xcfffffff irq 17 at device 0.0 on pci2
re1: Using Memory Mapping!
re1: couldn't map interrupt
device_attach: re1 attach returned 6


Its an onboard gigabit bord with 2 ports. the second (re0) for lan is up and running...

is there an workaround or solution?

Some hours ago, i've updated to the latest firmware.

Regards,

Dominik

Hi,

Code Select Expand

Dec 30 11:51:23 /services_dyndns_edit.php: Curl error occurred: bind failed with errno 47: Address family not supported by protocol family
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS (#######): Current Service: custom-v6
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS (#######): DynDns _checkStatus() starting.
Dec 30 11:51:23 /services_dyndns_edit.php: Sending request to: https://#######
Dec 30 11:51:23 /services_dyndns_edit.php: Custom dynamic DNS (#######): DNS update() starting.
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS (#######): DynDns _update() starting.
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS (#######): running get_failover_interface for wan. found vmx0
Dec 30 11:51:23 /services_dyndns_edit.php: DynDns (#######): ####### extracted from local system.
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS: (ERROR!) No Password Provided.
Dec 30 11:51:23 /services_dyndns_edit.php: Dynamic DNS: (ERROR!) No Username Provided.
Dec 30 11:51:23 /services_dyndns_edit.php: DynDns: updatedns() starting

I am using cloudns http api for updating dynsdns. IPv4 DynDNS  works very well (custom).

Just (custom-v6) give this error message.

Code Select Expand

Dec 30 11:51:23 /services_dyndns_edit.php: Curl error occurred: bind failed with errno 47: Address family not supported by protocol family

This might be an failure since pfsense. I found this on pfsense redmine
https://redmine.pfsense.org/issues/3858

ClouDNS API Wiki
https://www.cloudns.net/wiki/article/35/

Thank you very much!

I'm sorry, I'm not that good in english.
Don't hesitate to ask if you don't understand me!

Regards,
Dominik

Guten,

ich würde gerne 2 Standorte miteinander per OpenVPN Verbinden.

Der Server ist eingerichtet auf dem Client erhalte ich lediglich folgende "Meldungen"

Code Select Expand

Nov 2 23:08:58 openvpn[37913]: MANAGEMENT: Client disconnected
Nov 2 23:08:58 openvpn[37913]: MANAGEMENT: CMD 'state 1'
Nov 2 23:08:58 openvpn[37913]: MANAGEMENT: Client connected from /var/etc/openvpn/client1.sock
Nov 2 23:08:57 openvpn[37913]: UDPv4 WRITE [68] to [AF_INET]ServerIP:1194: DATA len=68
Nov 2 23:08:57 openvpn[37913]: UDPv4 WRITE [68] to [AF_INET]ServerIP:1194: DATA len=68
Nov 2 23:08:47 openvpn[37913]: UDPv4 WRITE [68] to [AF_INET]ServerIP:1194: DATA len=68
Nov 2 23:08:47 openvpn[37913]: UDPv4 WRITE [68] to [AF_INET]ServerIP:1194: DATA len=68
Nov 2 23:08:37 openvpn[37913]: UDPv4 WRITE [68] to [AF_INET]ServerIP:1194: DATA len=68
Nov 2 23:08:37 openvpn[37913]: UDPv4 link remote: [AF_INET]ServerIP:1194
Nov 2 23:08:37 openvpn[37913]: UDPv4 link local (bound): [AF_INET]192.168.178.207
Nov 2 23:08:37 openvpn[37913]: Expected Remote Options hash (VER=V4): '97a4b72c'
Nov 2 23:08:37 openvpn[37913]: Local Options hash (VER=V4): '97a4b72c'
Nov 2 23:08:37 openvpn[37913]: Expected Remote Options String: 'V4,dev-type tun,link-mtu 1561,tun-mtu 1500,proto UDPv4,tun-ipv6,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,secret'
Nov 2 23:08:37 openvpn[37913]: Local Options String: 'V4,dev-type tun,link-mtu 1561,tun-mtu 1500,proto UDPv4,tun-ipv6,comp-lzo,cipher AES-128-CBC,auth SHA1,keysize 128,secret'
Nov 2 23:08:37 openvpn[37913]: Data Channel MTU parms [ L:1561 D:1450 EF:61 EB:143 ET:0 EL:3 AF:3/1 ]
Nov 2 23:08:27 openvpn[37913]: /usr/local/sbin/ovpn-linkup ovpnc1 1500 1561 init
Nov 2 23:08:27 openvpn[37913]: TUN/TAP device /dev/tun1 opened
Nov 2 23:08:27 openvpn[37913]: TUN/TAP device ovpnc1 exists previously, keep at program end
Nov 2 23:08:27 openvpn[37913]: Socket Buffers: R=[42080->42080] S=[57344->57344]
Nov 2 23:08:27 openvpn[37913]: LZO compression initialized
Nov 2 23:08:27 openvpn[37913]: Static Decrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 2 23:08:27 openvpn[37913]: Static Decrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Nov 2 23:08:27 openvpn[37913]: Static Encrypt: Using 160 bit message hash 'SHA1' for HMAC authentication
Nov 2 23:08:27 openvpn[37913]: Static Encrypt: Cipher 'AES-128-CBC' initialized with 128 bit key
Nov 2 23:08:27 openvpn[37913]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Nov 2 23:08:27 openvpn[37913]: MANAGEMENT: unix domain socket listening on /var/etc/openvpn/client1.sock
Nov 2 23:08:27 openvpn[37393]: library versions: OpenSSL 1.0.2j 26 Sep 2016, LZO 2.09
Nov 2 23:08:27 openvpn[37393]: OpenVPN 2.3.12 i386-portbld-freebsd10.3 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Oct 25 2016

Konfiguration habe ich von hier "übernommen" und entsprechend meiner Daten angepasst.

Mit freundlichem Gruß

dominikp