I updated a number of OPNSense 22.7.6 instances yesterday night by remote connection. All upgrades were "successful."
One installation, however, now has no devices which can connect to the internet. Meanwhile, I can still connect to the router remotely and can see all expected devices listed in /status_dhcp_leases.php. However, I can not connect to any of those machines by VNC, SSH or other methods for which ports are open.
This sounds like a firewall configuration problem (although I changed nothing before or after the upgrade!), so i turned it off (temporarily). I did this at /system_advanced_firewall.php under Miscellaneous/"Disable all packet filtering." [ I recognize this is a "bazooka"-type, acceptable for quick testing-only "solution," but the devices could still NOT connect out nor I in. ]
I started worrying that the modem was doing something weird, but having a user at the facility connect a computer directly to the modem immediately enables internet access via that (i.e. directly connected) device (Arris SB6183, basically a "dumb" device which allows for essentially no end-user configuration; the modem is at the same exact hardware and software revisions as other installations which are working fine under OPNSense 22.7.8).
OPNSense health check indicates no problems . . .
***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 22.7.8 (amd64/OpenSSL) at Mon Nov 21 13:31:12 PST 2022
>>> Check installed kernel version
Version 22.7.7 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 22.7.7 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-ddclient 1.9_1
os-wireguard 1.13_1
os-wol 2.4_1
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 63 dependencies to check.
Checking packages: ................................................................. done
***DONE***
Any and all ideas would be most welcome.
Thank you in advance!!
Can you ping anything on the internet?
Could just be a DNS problem.
Hi @Demusman
Quote from: Demusman on November 22, 2022, 01:28:39 AM
Can you ping anything on the internet?
Could just be a DNS problem.
From OPNSense-Router-attached devices, NO.
From within OPNSense itself (using the applet at /diag_ping.php ), yes.
WRT @Demusman 's DNS idea, there may be something to it.
This installation has all Windows (10, Pro) machines. Who knows if some upgrade (possibly automagically applied over the weekend) caused a DNS configuration change?!
Interestingly, the many other OPNSense upgrades I performed yesterday all have Linux devices attached -- with no complaints of internet connectivity.
That said, I doubt that a DNS configuration issue would cause me to no longer have remote access. Then again, I have witnessed Windows close off ports like that for RDP right after upgrades were applied.
I'll have a user in the office check some related settings tomorrow morning.
Additional input from OPNSense gurus still sought! TIA