Topics

Hello just got my ISP to upgrade my connection to 5GB, and want to check if that is true, what is the best way to run speed test at the router level? I guess im trying to get to something less involved that running iperf someone and running iperf and a bit better than `py38-speedtest-cli`, when i run that i get like 7 Mbit/s up/down, when i run the regular speedtest.net on my laptop i get over 500 Mbit/s
I also tried the UI version of speedtest and also sucks, i get 16 up/down

Hello all, had a power outage today, and for some reason few of my homelab servers cant communicate... but the weird thing is only when using static address.... So i had these servers setup for few months, been using DHCP Static Mappings.

So here is the deal, i can SSH to the servers, but they cant ping anything external, internally i can ping other local devices like switches, but i cant ping my gateway, not even the gateway... If i remove the DHCP Static Mapping and allow it to get a regular DHCP it works just fine... So not sure what is going on... Servers are running k3s (Kubernetes distribution)

Hello running latest version, since i updated to latest last week i been getting alot of error out... I have sensei running, routed mode with netmap

Im Getting the following error :

Code Select Expand

[15-Mar-2023 23:25:34 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'mongodb.so' (tried: /usr/local/lib/php/20210902/mongodb.so (Cannot open "/usr/local/lib/php/20210902/mongodb.so"), /usr/local/lib/php/20210902/mongodb.so.so (Cannot open "/usr/local/lib/php/20210902/mongodb.so.so")) in Unknown on line 0


I tried following the steps on this thread: https://forum.opnsense.org/index.php?topic=12056.msg55103#msg55103 and running

opnsense-update -pf

but still getting that error.

I ran an audit/health and got:

Code Select Expand

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 23.1.3_4 at Wed Mar 15 19:29:29 EDT 2023
>>> Check installed kernel version
Version 23.1.2 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 23.1.2 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
SunnyValley
mimugmail
OPNsense
>>> Check installed plugins
os-adguardhome-maxit 1.8
os-clamav 1.8
os-crowdsec 1.0.2
os-ddclient 1.11_1
os-freeradius 1.9.22
os-ntopng 1.2_2
os-redis 1.1_2
os-sensei 1.12.4
os-sensei-updater 1.12
os-smart 2.2
os-sunnyvalley 1.2_3
os-theme-cicada 1.33
os-wireguard 1.13_5
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
php80-pecl-mongodb has a missing dependency: php80
>>> Check for missing or altered package files
Checking all packages......... done
>>> Check for core packages consistency
Core package "opnsense" has 66 dependencies to check.
Checking packages: ................................................................... done
***DONE***

EDIT:
Tried running

Code Select Expand

pkg delete php80-pecl-mongodb and waiting to see if that fixed the issued

Motherboard supports MVMe drive, any reason to not to use it?

Only one i can think off, is that with SSD i can have multiple drives and set them up in a raid 1 configuration instead of a single NVMe drive which are way faster (but not sure if OPNsense cares much about this)

Hello i just got a SMART failure notification, so i dont think my drive has much left on it. Last time i did a backup and restore i still had to manually install all plugins, and configure them, it was a bit of a pain. Is there a way to make a really full backup and restore it to another install/drive? Im also considering buying a offline harddrive cloning tool.

Opinions? Suggestions?

I have like 10 cameras that are just making DNS requests like there is no tomorrow, so 90% of my app breakdown are dns request from this cameras. The firewall rules for that VLAN are block all, but i guess DNS requests still making it to Zenarmor, should i just delete that VLAN from the Zenarmor list? or is there a way to get rid of all them requests. Thanks!

Hello all i need to move my entire configuration (clone) from one machine to another one, meaning 100% settings, add ons, etc etc. Whats the best way to do so? Does the full backup include addons and settings for them?

Im currently only using Sensei on my LAN side, the only open port i have on WAN side is for WireGuard does it make sense to run Suricata on the WAN side?

Hello all, on a new installation i tried install FreeRadius and i get the following:

Code Select Expand

***GOT REQUEST TO INSTALL***
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
The following 10 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
freeradius3: 3.0.25
gdbm: 1.22
groff: 1.22.4_4
libpaper: 1.1.24.4
mysql57-client: 5.7.36
os-freeradius: 1.9.17
protobuf: 3.17.3,1
psutils: 1.17_5
talloc: 2.3.1
uchardet: 0.0.7

Number of packages to be installed: 10

The process will require 103 MiB more space.
9 MiB to be downloaded.
[1/10] Fetching os-freeradius-1.9.17.txz: ...... done
[2/10] Fetching freeradius3-3.0.25.txz: .......... done
[3/10] Fetching talloc-2.3.1.txz: ....... done
[4/10] Fetching mysql57-client-5.7.36.txz: .......... done
[5/10] Fetching groff-1.22.4_4.txz: .......... done
[6/10] Fetching uchardet-0.0.7.txz: .......... done
[7/10] Fetching psutils-1.17_5.txz: ........ done
[8/10] Fetching libpaper-1.1.24.4.txz: ... done
[9/10] Fetching protobuf-3.17.3,1.txz: .......... done
[10/10] Fetching gdbm-1.22.txz: .......... done
Checking integrity... done (0 conflicting)
[1/10] Installing libpaper-1.1.24.4...
[1/10] Extracting libpaper-1.1.24.4: .......... done
[2/10] Installing uchardet-0.0.7...
[2/10] Extracting uchardet-0.0.7: .......... done
[3/10] Installing psutils-1.17_5...
[3/10] Extracting psutils-1.17_5: .......... done
[4/10] Installing groff-1.22.4_4...
[4/10] Extracting groff-1.22.4_4: .......... done
[5/10] Installing protobuf-3.17.3,1...
[5/10] Extracting protobuf-3.17.3,1: .......... done
[6/10] Installing talloc-2.3.1...
[6/10] Extracting talloc-2.3.1: .......... done
[7/10] Installing mysql57-client-5.7.36...
[7/10] Extracting mysql57-client-5.7.36: .......... done
[8/10] Installing gdbm-1.22...
[8/10] Extracting gdbm-1.22: .......... done
[9/10] Installing freeradius3-3.0.25...
===> Creating groups.
Using existing group 'freeradius'.
===> Creating users
Using existing user 'freeradius'.
===> Setting user and group in radiusd.conf
[9/10] Extracting freeradius3-3.0.25: .......... done
===> Adjusting ownership of directory /usr/local/etc/raddb
===> Adjusting ownership of directory /var/log/radacct
===> Adjusting ownership of directory /var/run/radiusd
===> Adjusting ownership of /var/log/radius.log
===> Adjusting ownership of /var/log/radutmp
===> Adjusting ownership of /var/log/radwtmp
===> Updating libdir in /usr/local/etc/raddb/radiusd.conf
[10/10] Installing os-freeradius-1.9.17...
[10/10] Extracting os-freeradius-1.9.17: .......... done
Stopping configd...done
Starting configd.
*** OPNsense\Freeradius\Eap Migration failed, check log for details
Reloading plugin configuration
Configuring system logging...done.
Reloading template OPNsense/Freeradius: Execute error
=====
Message from groff-1.22.4_4:

--
In order to be able to use the html driver, you need to install the following
packages:
- ghostscript
- netpbm
=====
Message from mysql57-client-5.7.36:

--
This is the mysql CLIENT without the server.
for complete server and client, please install databases/mysql57-server
=====
Message from freeradius3-3.0.25:

--
To enable FreeRADIUS, put the following line in /etc/rc.conf

radiusd_enable="YES"


The sample configuration can be found at
/usr/local/share/examples/freeradius/raddb

If you are upgrading FreeRADIUS, you are advised to use this as a reference
for updating your configuration.


FreeRADIUS will look for its configuration directory at
/usr/local/etc/raddb by default.

If you did not already have a configuration at this location, the sample
configuration has been copied to this location and has been bootstrapped.


If you wish to point FreeRADIUS to a configuration at a different
location, put the following line in /etc/rc.conf

radiusd_flags="-d /path/to/raddb"


To start the server in normal (daemon) mode, run:

/usr/local/etc/rc.d/radiusd start

and to stop the server, run:

/usr/local/etc/rc.d/radiusd stop


To start the server in debugging mode, run:

/usr/local/etc/rc.d/radiusd debug


You are advised to make cautious changes to the configuration, and to test
frequently, using debugging mode where necessary. Try to resist the
temptation to disable or delete things that you don't understand - you may
well break things!

Useful configuration advice can be found in the FreeRADIUS Wiki at
http://wiki.freeradius.org
Checking integrity... done (0 conflicting)
Nothing to do.
***DONE***



I tried starting it by using `radiusd -X` and i got:

Code Select Expand

The server is not configured to listen on any ports.  Cannot start