Messages

Also note that depending on your CPU, sysctl dev.hwpstate_intel.0.xyz may not work - on my i5250u, it doesn't :-(

Code Select Expand

root@OPNsense:~ # sysctl dev.hwpstate_intel.0
sysctl: unknown oid 'dev.hwpstate_intel.0'

This looks horrible from a ZFS perspective :-)

Does FreeBSD really set up partitionson disk  instead of datasets in a ZFS pool?

I would have thought that basically the following should suffice:

Code Select Expand

Zpool attach zroot gpt/whateveryourdrivenameis

Habe diese Fehlermeldung nun auch erstmalig, nach Update auf 22.19_1. alle 2 min.

2022-06-28T19:33:21   Error   monit   'RootFs' unable to read filesystem '/' state   
2022-06-28T19:33:21   Error   monit   Filesystem '/' not mounted   

habe ein neues Boot environment eingerichtet für das Update, das hatte ich für alle 22.1.x updates aber auch schon gemacht.

Habe diese Fehlermeldung nun auch, nach Update auf 22.19_1.

Try this one (A+E key for m.2): https://www.amazon.de/NGFF-Gigabit-Ethernet-Chipset-Intel/dp/B09NYMCCMG

I often see erroneous log messages, and think the logging GUI may be broken.

E.g., the log will show traffic from my local 192.168.x.x to a public IP being blocked by the default deny/state violation rule. That should trigger on WAN in traffic only though, so something is amiss. (I reckon the display is erroneous - this error seems prevalent after changing the firewall rules)

Only issue I noticed is that the crowdsec aliases remain empty. That may be a crowdsec issue of course.

A temporary fix has been posted on GitHub: https://github.com/opnsense/plugins/issues/2842#issuecomment-1134831981

Have you reported this as a bug on GitHub? If not please do - sounds like a bug and that will get resolved earlier if a GitHub report is made.

The Kalea one on Amazon seems cheaper:
[Wrong link, see below]

You would be better off looking at a m.2 format NIC to go either in the wifi slot (2230) or the 2nd storage slot (2280) - you can get proper intel chipset NICs in that format which are well supported

Do you have examples? I looked for m..2 NICs some time ago out of interest, and could hardly find ones, especially with an Intel chipset.
The only one I remember is on Amazon: "Kalea Informatique Controllerkarte Mini PCI Express (MiniPCIE) – 1 Port LAN Gigabit Ethernet – Chipsatz Intel 82574"

I did pkg upgrade xxxx for all the 3 files and that got it working again.

Somewhat similar here - I re-installed from CLI and updated (via GUI). pulled 1.3.3. working fine now on os-0.1.

Now did a

Code Select Expand

pkg remove os-crowdsec
pkg install os-crowdsec-devel

and crowdsec seems to be up and running. System->Firmware->Plugins now also reports 0.2 and shows notes for the plugin.

There is also sysctl hw.acpi.cpu.cx_lowest

Have you tried if

Code Select Expand

sysctl hw.acpi.cpu.cx_lowest=c3
has any effect on your system (the command as such works)?

[crowdsec_blacklists]

Sorry if I'm missing something obvious, but I just installed it and the two aliases crowdsec_blacklists and crowdsec6_blacklists are empty ?

I thought they'd contain the URLs where they'd take the bad IPs from ?

It looks like they get pulled every two hours by default according to the "Alerts" tab on the plugin UI. I don't remember if they got populated immediately at installation time though. I'd give it a little time, like two hours max or check the docs.

Confirmed that they get populated automatically after some time (2h sounds about right).

Can't recommend firehol - it often blocs GitHub addresses (false positives).