Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - gpac

#1
Issue no 1 : i recently discovered that during one of the upgrade, configs of schedule blocks have been lost. Schedule aliases still appear in firewall rules, but they don't in schedule list which is completely empty. When you click on the schedule name in the rule page, you end up in a blank schedule sheet (the schedule creation page with all fields empty).

Issue no 2 : when you want to create several time blocks on the same schedule page if you don't change the 4 time items (start H, start M, end H, end M), then whatever is shown on the screen before click on add item, is not taken into account. Ie : you created a rule for Monday from 08:30 to 20:00, Now you want to add another block for Tuesday from 09:30 to 20:00 => you select Tuesday, you change the 08 to 09 and click add-time => you get a rule from 09:00 to 23:59.

Issue no 3 : in the situation where a scheduled 8:00-21:00 was created just before and you want to create one 09:00-23:00. When you try to change the 21 to 23, you can choose the 23 in the list, but after clicking on the hour, the box stays at 21. If you reclick on the 21, you can see that in the list the 23 is highlighted (and not the 21).

Best regards

version : 16.1.16 / nano
browser : firefox
#2
Hello,

I've found a small bug :
The "Log packets matched from the default pass rules put in the ruleset" check box from diag_logs_settings.php works the opposite way : when enabled there is no logging, and when disabled logging is active.

Best regards.
#3
Hello,

I discovered that dashboard page (when firewall log widget is activated) & firewall log page are verrrryyy long to load when it is requested to display log on an interface that has no entry in log.

In my case I have many entries logged for LAN and OPT1 but none for WAN (behind another fw) => if i try to display / filter firewall log entries for WAN it takes several minutes before displaying web page.

nota : "cat /var/log/filter.log | grep vr1" provides an instantaneous (and blank) answer.

Best regards.
#4
Hello,

Upgrading to 15.7.5 doesn't seem to work on Alix with 4 Gb compact flash :

From GUI :

***GOT REQUEST TO UPGRADE: all***
***STARTING UPGRADE***
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
Checking for upgrades (61 candidates): .......... done
Processing candidates (61 candidates): . done
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
   opnsense: 15.7.4 -> 15.7.5

The process will require 4 KiB more space.
9 MiB to be downloaded.
Fetching opnsense-15.7.5.txz: .......... done
Checking integrity... done (0 conflicting)
[1/1] Upgrading opnsense from 15.7.4 to 15.7.5...
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Removing OPNsense version
You may need to manually remove /usr/local/etc/config.xml if it's no longer needed.
[1/1] Extracting opnsense-15.7.5: .......... done
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Writing OPNsense version
Stopping configd...done
Starting configd.
Flush Phalcon volt templates
Message for opnsense-15.7.5:
Follow the brave badger!
Checking integrity... done (0 conflicting)
Nothing to do.
The following package files will be deleted:
   /var/cache/pkg/opnsense-15.7.4-ddec3dfa3d.txz
   /var/cache/pkg/opnsense-15.7.4.txz
The cleanup will free 9 MiB
Deleting files: .. done
All done
Restarting webConfigurator....done.
!!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!!!
! A kernel/base upgrade is in progress. !
!  Please do not turn off the system.   !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Fetching kernel-15.7.4-i386.txz... ok
Fetching base-15.7.4-i386.txz... failed
***DONE***


Then retried from Console :

Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.       
All repositories are up-to-date.         
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.       
All repositories are up-to-date.         
Checking for upgrades (60 candidates): 100%
Processing candidates (60 candidates): 100%
Checking integrity... done (0 conflicting)
Your packages are up to date.             
Checking integrity... done (0 conflicting)
Nothing to do.                             
Nothing to do.                             

Restarting webConfigurator...done.

There are updates available.
!!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!!!
! A kernel/base upgrade is in progress. !
!  Please do not turn off the system.   !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Fetching kernel-15.7.4-i386.txz... ok
Fetching base-15.7.4-i386.txz... fetch: /tmp/opnsense-update.56118/base-15.7.4-i386.txz: No space left on device
failed



df -H in shell gives :
Filesystem            Size    Used   Avail Capacity  Mounted on
/dev/ufs/OPNsense0    981M    693M    210M    77%    /
devfs                 1.0k    1.0k      0B   100%    /dev
tmpfs                  35M     24M     11M    68%    /tmp
tmpfs                  42M     31M     11M    73%    /var
devfs                 1.0k    1.0k      0B   100%    /var/dhcpd/dev

It's quite a fresh install (CF re-formated for installing 15.7.2). I don't understand why various partitions (and especially /tmp) are so small by default. Is there something I could do to increase their sizes ?

Thanks for advice.

Best regards
#5
Good evening,

Please note that unfortunately upgrading from 15.1.12 nanoBSD is not working on Alix 2d3 with 4 Gb Compact Flash because it claims for a lack of space on /var/cache/pkg : "pkg: Not enough space in /var/cache/pkg, needed 43 MiB available 38 MiB"

Increasing the /var size in web GUI to 70 Mb allowed after a reboot to start the verrryyyy sssslooooww upgrading process with many "g_vfs_done():md1[WRITE(offset=20480000, length=32768)]error = 28", and a "syncache_socket: could not copy policy" during perl5 upgrade/extraction.

Please note that the system was almost idle (one single PC pulling few basic web pages).

After 2 hours waiting for the upgrade to accomplish, and having to work early tomorrow, I'm leaving it and hope it will be done by tomorrow.
#6
15.1 Legacy Series / diag_confbak.php issues
May 30, 2015, 11:05:43 AM
It seems that diag_confbak.php has some issues.

My platform : Alix SD3 (time is lost when power-off).
OPNsense release : 15.1.11.1 nano

System made automatically some backups before syncing time with NTP server => these backups appears dated 1/1/2000 from CLI with file names config-946685???.xml

From web GUI they appear "Unknown" date.

From GUI trying to remove those with "Unknown" do not work (I think because malformation of URL which didn't get proper backup file no : https://192.168.2.1/diag_confbak.php?rmver=)

From GUI trying to remove those with a date works bizarrely :
+ clicking on the "x" seems to work (we go to confirmation screen)
+ file is actually removed from the disk & GUI says "Deleted Backup...", but stays with the confirmation screen.
If you click on "Config History" to reload the list of backups, the deleted backup is still present in the list.

Best regards.