OPNsense Forum

Archive => 20.1 Legacy Series => Topic started by: lrosenman on January 30, 2020, 04:01:56 am

Title: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: lrosenman on January 30, 2020, 04:01:56 am
Given that I *DEPEND* on the pfatt module to authorize my ONT, will the netgraph change called out in the release notes cause me grief?

thanks (I don't dare try it as I don't want to be knocked offline).
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: franco on January 30, 2020, 07:05:27 am
We simply don't load the drivers on boot, but you can put the file back if you have any issues. I don't know pfatt or what this could possibly imply.

https://github.com/opnsense/core/blob/stable/19.7/src/etc/rc.loader.d/20-netgraph


Cheers,
Franco
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: lrosenman on February 01, 2020, 02:25:53 am
I wound up with having to add the file referenced as /boot/loader.conf.local and restoring my interface config to get all my vlans, et al, right.

Hopefully that survives the next major upgrade.

Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: harshw on February 01, 2020, 08:21:48 pm
Could you provide more details? I use the pfatt script as well and I am hesitant to move to 20.1 because of this

Thanks in advance!
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: pvols1979 on February 01, 2020, 09:38:08 pm
I was able to make the modification mentioned in this thread.  I simply created a /boot/loader.conf.local file and put the required modules in it.  I have a guide on my site to setting up the bypass using the pfatt method and I posted an update to my article regarding the changes and what is required to make it work.  Everything is working fine on my system and the local loader file should protect me against the next update.
https://geekzweb.com/2019/06/10/bypassing-arris-bgw210-700-pfsense-netgraph/
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: pvols1979 on February 01, 2020, 09:39:59 pm
I will also contact the GitHub user who wrote the original pfatt code and let them know of the change.
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: harshw on February 03, 2020, 04:00:16 am
Checked the PFATT script again and only the following modules are needed

I will try to prune the /boot/loader.conf.local file to the following and check if it still works:

Code: [Select]
netgraph_load="YES"
ng_ether_load="YES"
ng_eiface_load="YES"
ng_one2many_load="YES"
ng_vlan_load="YES"
ng_etf_load="YES"

Don't want to load modules unnecessarily if we don't need them ...
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: franco on February 03, 2020, 08:17:58 am
Yes, good thinking. That's why we opted for removing most of netgraph from the system, although some PPP and NetFlow still need it but load it on demand.


Cheers,
Franco
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: harshw on February 04, 2020, 01:05:40 am
Yes, good thinking. That's why we opted for removing most of netgraph from the system, although some PPP and NetFlow still need it but load it on demand.


Cheers,
Franco

I modified loader.conf.local and rebooted - after which I proceeded to do the upgrade.
So far it seems to be working ... everything came up as expected
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: cwied on February 05, 2020, 10:08:23 pm
99-pfatt.sh already has a line to load ng_etf, so it might make sense to just load all the other modules there too. The script uses -nq so it won't complain if they're already loaded.

Thanks for this thread. I noticed that the script would work if I invoked it by hand, but didn't know what had changed to break it during boot.
Title: Re: netgraph change: will https://github.com/aus/pfatt need adjustment?
Post by: powderwt on April 19, 2021, 12:37:21 pm
I was able to make the modification mentioned in this thread.  I simply created a /boot/loader.conf.local file and put the required modules in it.  I have a guide on my site to setting up the bypass using the pfatt method and I posted an update to my article regarding the changes and what is required to make it work.  Everything is working fine on my system and the local loader file should protect me against the next update.
https://geekzweb.com/2019/06/10/bypassing-arris-bgw210-700-pfsense-netgraph/

So I'm new to opnsense, still don't have it up and running, but I had blindlessly upgraded my pfsense to which broke my.pfatt workaround due to freebsd upgrading apparently.

Curious if your method on the linked site is still working on opnsense as I had hoped to make the switch? Already installed the latest opnsense img to my machine, just need to pop in the necessary files and switch all my ONT and gateway cables and such (time is very limited however when you take the internet down in the household however 😬😬😬)