OPNsense Forum

English Forums => Zenarmor (Sensei) => Topic started by: itnorm on November 16, 2022, 08:35:52 pm

Title: Zenarmor wizard was run and now no internet nor browser page
Post by: itnorm on November 16, 2022, 08:35:52 pm

I am coming up to speed with OpnSense and I just have a Protectli box with 1 machine connected to the LAN.  After going thru the Zenarmor wizard (chose all defaults with a free edition at the end), now no internet (the machine is still connected to 192.1681.1) on the machine and cannot connect to the browser page of OpnSense.  There are no other pkgs or plugins installed.  I am getting this continually on the console:
(some numbers) [4022] net_transmit    igb0 drop mbuf that needs checksum offload

Ran rm -f /usr/local/sensei/etc/.configdone as root and nothing changed.

Zenarmor looks to be the right package going forward for me.

Title: Re: Zenarmor wizard was run and now no internet nor browser page
Post by: almodovaris on November 17, 2022, 07:05:54 am

You need these two lines in config.xml:

Code: [Select]

    <disablechecksumoffloading>1</disablechecksumoffloading>
    <disablesegmentationoffloading>1</disablesegmentationoffloading>


just before </system>

Title: Re: Zenarmor wizard was run and now no internet nor browser page
Post by: sy on November 17, 2022, 02:03:23 pm

Hi,

You need to disable interface offloading settings for the netmap. Zenarmor uses netmap which is an Operating System subsystem to grab packets off the wire. You can disable them on GUI as well. Interfaces - Settings - Disable hardware checksum offload, Disable hardware TCP segmentation offload,  Disable hardware large receive offload

Title: Re: Zenarmor wizard was run and now no internet nor browser page
Post by: itnorm on November 17, 2022, 05:19:15 pm

Thanks for those.  I wasn't able to do those changes since a new error line (same content) was continually appearing on the console output.  I could not use SSH either (maybe I should have tried the com connection on the Protectli for ssh access?).

I did a factory reset.

The Zenarmor plugin was already installed after the factory reset without me downloading and installing it.  I went thru the wizard and the interface LAN(igbo) was already on the right-side as a selected interface for protection.  It seems the settings from my previous wizard run were also not erased with a factory reset.  After this wizard run   Zenarmor appears to be working.