I keep getting this error when checking for updates, is this normal?
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.1.2_1 (amd64/OpenSSL) at Sun Mar 20 19:53:09 GMT 2022
Fetching changelog information, please wait... fetch: transfer timed out
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Operation timed out
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Operation timed out
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
Looks like your wan port doesn't have proper access to Internet or is not setup properly.
Try connecting your wan port as DHCP client to a working network with internet access or make sure your wan port uses proper authentication if PPoE or other than DHCP.
That doesn't make sense to me, this has been working fine for well over a year now, and the internet is working fine otherwise I wouldn't be able to post this, it's only since 22.1 update this has started.
Did you try to change the mirror in the Settings ?
It doesn't make sense to us either. The mirror has been working well for years?
Cheers,
Franco
I got it to update by restarting, and I mean power off/on, reboot did not work.
However when I press check for updates again same problem, it wont work until power off/on ?
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.1.3 (amd64/OpenSSL) at Mon Mar 21 19:17:20 GMT 2022
Fetching changelog information, please wait... fetch: transfer timed out
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Operation timed out
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Operation timed out
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
Can you do the connectivity audit?
Cheers,
Franco
***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 22.1.3 (amd64/OpenSSL) at Mon Mar 21 19:56:58 GMT 2022
Checking connectivity for host: pkg.opnsense.org -> 89.149.211.205
PING 89.149.211.205 (89.149.211.205): 1500 data bytes
1508 bytes from 89.149.211.205: icmp_seq=0 ttl=56 time=15.275 ms
1508 bytes from 89.149.211.205: icmp_seq=1 ttl=56 time=15.204 ms
1508 bytes from 89.149.211.205: icmp_seq=2 ttl=56 time=21.178 ms
1508 bytes from 89.149.211.205: icmp_seq=3 ttl=56 time=15.323 ms
--- 89.149.211.205 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 15.204/16.745/21.178/2.560 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:13:amd64/22.1
Updating OPNsense repository catalogue...
Fetching meta.conf: . done
Fetching packagesite.txz: .......... done
Processing entries: .......... done
OPNsense repository update completed. 783 packages processed.
All repositories are up to date.
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:4f00:a005:5::
ping6: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:13:amd64/22.1
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!
***DONE***
Yep, your IPv6 is broken but IPv4 works. You can either set to prefer IPv4 (System: Settings: General) or try to fix IPv6 on the box. What's your IPv6 setup?
Cheers,
Franco
I don't use IPv6 at all, I have set "prefer IPv4" and now get this?
(I do have internet as I posted this)
***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 22.1.3 (amd64/OpenSSL) at Mon Mar 21 20:28:16 GMT 2022
Checking connectivity for host: pkg.opnsense.org -> 89.149.211.205
PING 89.149.211.205 (89.149.211.205): 1500 data bytes
--- 89.149.211.205 ping statistics ---
4 packets transmitted, 0 packets received, 100.0% packet loss
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:13:amd64/22.1
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Operation timed out
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Operation timed out
Unable to update repository OPNsense
Error updating repositories!
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:4f00:a005:5::
ping6: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:13:amd64/22.1
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!
***DONE***
Now you have two problems... ?!
Cheers,
Franco
I had a GeoIP filter at one point that was blocking that server 89.149.211.205 (I'm assuming that's the primary opnsense update server).
I thought GeoIP filters blocked incoming connections, not outgoing, right?
I set mine up for both directions. Don't need to click a web page link and go where I don't want to. So I guess you'd need to check your rules.
I guess my rules are fine then, this problem only started since the v22.x uodates, the actual config has not been modified in over a year, is it still possible to download v21.x image files? I think I'll just reinstall that.
Yeah...my rules were working too and the GeoIP data changed and that's what caused my issue. Somehow the location of that IP changed countries...so...just something to be aware of if you have rules around those. Either way, easy enough to test...just turn on logging for your rules and see where it's getting dropped.
Logging already enabled 89.149.211.205 not in list of blocked ip's
Good...you could try adding a temporary firewall rule...at the top...allow icmp to 89.149.211.205...if that works, it's another rule blocking it. Would love to know what the problem ultimately was. Cheers.
Thanks just tried it, still the same.
The old release is here :
https://pkg.opnsense.org/releases/
I have reinstalled a fresh system of 22.1 and tried to restore a backup made from v21 and get this error?
The following input errors were detected:
The configuration could not be restored.
I have made some progress, I think.
I had made a backup config of the v22.1 system before I reinstalled (v22.1) and thought I would try and restore each section on by one, after every section was restored it rebooted and checked for updates.
First attempt,
OPNsense Additions OK
Bridge Devices Not found
SSL Certificate Authorities Breaks everything no internet (had to reset defaults and start again)
After a reset defaults, second attempt starting from SSL Certificates,
SSL Certificates OK
DHCP Server OK
DHCPv6 Server Not found
DHCP Relay Not found
DHCPv6 Relay Not found
Dnsmasq DNS Not found
Dynamic DNS Not found
RFC 2136 Not found
Firewall Rules OK
Gateways OK
GIF devices Not found
IGMP Proxy Not found
Universal Plug and Play Not found
Interfaces OK
IPsec Not found
LAGG Devices Not found
Load Balancer OK
Network Address Translation OK
System Notifications Not found
Network Time OK
DNS Filter Not found
OpenVPN Not found
Point-to-Point Devices OK
PPTP Server Not found
Proxy ARP Not found
RRD Data Not found
SNMP Server OK
Static routes Fatal error: Uncaught OPNsense\Core\ConfigException: no valid config loaded in /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php:256 Stack trace: #0 /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php(188): OPNsense\Core\Config->checkvalid() #1 /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php(237): OPNsense\Core\Config->fromArray(Array, Object(SimpleXMLElement), 'ca') #2 /usr/local/etc/inc/config.inc(147): OPNsense\Core\Config->fromArray(Array) #3 /usr/local/www/diag_backup.php(63): write_config('Restored sectio...') #4 /usr/local/www/diag_backup.php(214): restore_config_section('staticroutes', '
System tunables OK
Syslog OK
System OK
Unbound DNS OK
VLAN Devices Not found
Dashboard Widgets OK
Wireless Devices Not found
Wake on LAN Not found
Static routes and interesting one there but I was able to continue, all good so far updates work, so I decided to try OPNsense Additions again, this being the last section to restore and the problem is back.
***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.1.2_2 (amd64/OpenSSL) at Wed Mar 23 21:33:30 GMT 2022
Fetching changelog information, please wait... fetch: transfer timed out
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Operation timed out
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Operation timed out
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***
And another thing I noticed is nothing under Services > Intrusion Destection has been restored?
Any ideas?
Finally tracked down the problem, the top 3 settings under Interfaces: Settings
Hardware CRC Disable hardware checksum offload
Hardware TSO Disable hardware TCP segmentation offload
Hardware LRO Disable hardware large receive offload
Where all unticked, so ticked them to disable and all working as it should now.