Messages

856

15.1 Legacy Series / Re: Possible to Share USB drives on Network?

« on: May 21, 2015, 08:52:02 am »

This feature is not in OPNsense and is not on the roadmap, for a security product is probably not a very good idea to use it as a NAS.

857

15.1 Legacy Series / Re: OS corruption after power failure

« on: May 11, 2015, 06:04:20 pm »

Hi Yordan,

Reinstalling the device with a bootable usb is quite easy, just download the serial install image from one of the download mirrors and write it to a usb stick (https://wiki.opnsense.org/index.php/Installation_and_Initial_Configuration).

Then connect the delivered mini usb cable to the A10 appliance and your computer and setup a terminal client (like putty) connected at a baudrate of 115200.

Next you power the device and wait for a few seconds till some output from the bios appears on screen and there's a phrase telling something like "Press F12 for boot menu." then press F12 and choose USB as boot option.

And your ready to install.

Just let me know if you have issues,

858

15.1 Legacy Series / Re: Restoring area cannot locate the correct XML tag

« on: May 10, 2015, 02:19:29 pm »

It should be fixed in this commit:
https://github.com/opnsense/core/commit/4a7bf0b7c6f66cc45cc5014f0e600826da44be75

There still are some legacy functions to handle the config file, and this checks the root node of the xml file. We probably best replace this at some point in time, but for now this fix should do the trick.

859

15.1 Legacy Series / Re: pftop not working

« on: May 10, 2015, 11:14:19 am »

Hi,

I had the same issue on my install, so it was easy to reproduce. It has something to do with the last base/kernel update which cleaned up a lot of non standard hooks.
Some ports although are build up to a specific kernel and need some structures to be the same but these dependencies are a bit tricky to catch. So after upgrade some programs have issues because of mismatch in base/kernel. 

We are working on a solution for new releases with base kernel impact, but solving this issue is fortunately quite simple.
Just run:

Code: [Select]

pkg install -f pftop


To reinstall the package again (same version, but build with current base/kernel) and it functions again.

 

860

15.1 Legacy Series / Re: CARP VHID must be unique?

« on: May 10, 2015, 11:02:47 am »

Hi,

Your right, the vhid must be equal on both machines and unique per machine. This could be an issue with the xmlrpc client part sending virtualip's to the other side.
The xmlrpc server part was completely rewritten some time ago, the client part still is up for improvement (the code quality of the original script is not very well).

Can you retest your setup with "Synchronize Virtual IPs" disabled and remove / create those items again on the backup node?

We started the project with the last publicly available pfSense version (2.2 development), but a lot has changed in the short time period between our original copy. We try to focus on improving code quality and eliminating non standard hooks.

861

15.1 Legacy Series / Re: Enabling TrafficShaping error.

« on: May 08, 2015, 11:30:11 pm »

There is an issue in the kernel related to altq : https://github.com/opnsense/src/commit/6cec1085278c191c5fca3c5c77048e963e6854e7

Which results in a kernel panic, the next version will include a fix for that.

The limiters where removed in our last version, but will be back as soon as possible.

862

15.1 Legacy Series / Re: apinger and miniupnpd not work!

« on: May 05, 2015, 10:14:23 pm »

You probably need a reinstall of the miniupnp package, because of kernel dependencies.
Can you try to reinstall upnp by running the following in a shell (via ssh or console)?

pkg install -f miniupnpd

And then try to start it again.

863

15.1 Legacy Series / Re: [SOLVED] IPsec and TCP flows

« on: May 03, 2015, 04:03:49 pm »

Hi Yordan,

Great to hear your issue is fixed in our latests version, about the updates it shows,  these are the none base/kernel updates provided by pkg (like core and all software packages). You could update now or wait a day, tomorrow there will be a new version containing the latests versions.

Looking at the kernel build date and branch, your using the correct version and the update was performed nicely.
(....(master): Thu Apr 30 08:38:44 CEST 2015)

Thanks for testing!

Cheers,

Ad

864

15.1 Legacy Series / Re: [SOLVED] IPsec and TCP flows

« on: May 03, 2015, 11:53:23 am »

Hi Yordan,

I think the base/kernel image are already removed from our server, but I do have the same build configuration in GitHub (clean_kernel branch) so I can build it again for you.
As soon as the old test base/kernel are back on-line I will drop you a note, so you have a way to revert to the current config. 

Cheers,

Ad

865

15.1 Legacy Series / Re: [SOLVED] IPsec and TCP flows

« on: May 01, 2015, 05:07:07 pm »

Hi Yordan,

If you have the time, could you please test again with our new kernel? It will be released on Monday, but if you want to try it before Monday you could upgrade using:

opnsense-update -r 15.1.10 && reboot


Thanks,

866

15.1 Legacy Series / Re: IPsec and TCP flows

« on: April 21, 2015, 09:18:40 am »

Yesterday we we're able to reproduce the issue, and it seems to be related to the non standard kernel patches we've inherited.
At the moment we're re-evaluating the need for those patches and perform cleanups, as soon as we're done it shouldn't happen again  .... for now there's a temporary fix by installing a custom kernel and base available at our server.

867

15.1 Legacy Series / Re: IPsec and TCP flows

« on: April 19, 2015, 12:13:55 pm »

I've looked at the video, but I don't see the issue either. The only thing I noticed was the difference in ping times, when the connection was just enabled you had approx. 25 msec when you had the rdp session running they seemed to have dropped to 3 msec....

I would really like to setup a similar box from my end to test, If you like we could do that on Monday or Tuesday just send me an email so we can arrange that.
We must be missing something, but without the issue at hand it's very difficult to solve.

 

868

15.1 Legacy Series / Re: IPsec and TCP flows

« on: April 17, 2015, 09:20:33 am »

Ok, just let me know if I can do anything.
If you have the opportunity to let me test from my side to your office using the same type of machine that might also be an option (just send me an email).
I tested with the 64bit version using 2 OPNsense installs and the same hardware. But if there's any weirdness going on with your specific machine we should be able to find it.

One last question, have you tried using one of the other network ports for your connection? It's probably not the issue, but you never know.

869

General Discussion / Re: [SOLVED] Standard user are unable to see web content after update.

« on: April 15, 2015, 10:51:55 am »

Maybe it's better to test using the next release at the end of this week, I really think it works when you have the latest code on your machine.

870

General Discussion / Re: [SOLVED] Standard user are unable to see web content after update.

« on: April 15, 2015, 08:30:03 am »

To be very sure, you checkout the code via github and changed the username to a valid one? This code will be in the following release at the end of this week.

From rost's reaction I figured he was testing with the current (defective) version, so that makes sense 
If the problem still persists, I probably need some more info. In that case, can you create a new group with some privileges and put in a new user with some other privileges in and run the test script again for that user. It should output both privileges.