Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - mmoser

Pages: [1]

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 04:28:23 pm »

18.1 läuft

Vielen, vielen Dank!

Liebe Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 03:55:52 pm »

Das erste Kommando hat wohl "silent" was gemacht, das Zweite läuft gerade...

Danke inzwischen!

Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 03:42:41 pm »

Ich bin gerade dabei das Perl Paket erneut zu installieren... und die diversen gefühlten 20 anderen auch gleich :-)

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 03:36:16 pm »

Hi Franco!

Da scheint was im Argen zu liegen, viele Prüfsummenfehler, siehe Anhang.

Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 03:20:22 pm »

Hier ist der gewünschte Output:

Code: [Select]

root@fw1:~ # pkg info
GeoIP-1.6.11                   Find the country that any IP address or hostname originates from
apinger-0.7                    IP device monitoring tool
beep-1.0_1                     Beeps a certain duration and pitch out of the PC Speaker
bsdinstaller-18.1              BSD Installer mega-package
ca_root_nss-3.34.1             Root certificate bundle from the Mozilla Project
choparp-20150613               Simple proxy arp daemon
clog-1.0.1_3                   Circular log support for FreeBSD syslogd
cpdup-1.18                     Comprehensive filesystem mirroring and backup program
cpustats-0.1                   Gather system statistics
curl-7.57.0                    Command line tool and library for transferring data with URLs
cyrus-sasl-2.1.26_13           RFC 2222 SASL (Simple Authentication and Security Layer)
dhcp6-20080615.2               KAME DHCP6 client, server, and relay
dhcpleases-0.2                 Read dhpcd.lease file and add it to hosts file
dnsmasq-2.78,1                 Lightweight DNS forwarder, DHCP, and TFTP server
e2fsprogs-libuuid-1.43.8       UUID library from e2fsprogs package
easy-rsa-3.0.1_1               Small RSA key management package based on openssl
expat-2.2.5                    XML 1.0 parser written in C
expiretable-0.6_1              Utility to remove entries from the pf(4) table based on their age
filterdns-0.2                  filterdns
filterlog-0.2                  Parse pflog(4) output
flock-2.30.1                   Manage locks from shell scripts
flowd-0.9.1_3                  Small, fast, and secure NetFlow collector
freetype2-2.8_1                Free and portable TrueType font rendering engine
gettext-runtime-0.19.8.1_1     GNU gettext runtime libraries and programs
glib-2.50.2_7,1                Some useful routines of C programming (current stable version)
gmp-6.1.2                      Free library for arbitrary precision arithmetic
hostapd-2.6_1                  IEEE 802.11 AP, IEEE 802.1X/WPA/WPA2/EAP/RADIUS Authenticator
hyperscan-4.6.0                High-performance multiple regex matching library
icu-60.2_1,1                   International Components for Unicode (from IBM)
ifinfo-10.1                    Interface statistics reader
indexinfo-0.3.1                Utility to regenerate the GNU info page index
isc-dhcp43-client-4.3.6        The ISC Dynamic Host Configuration Protocol client
isc-dhcp43-relay-4.3.6         The ISC Dynamic Host Configuration Protocol relay
isc-dhcp43-server-4.3.6_2      ISC Dynamic Host Configuration Protocol server
jansson-2.10                   C library for encoding, decoding, and manipulating JSON data
json-c-0.13                    JSON (JavaScript Object Notation) implementation in C
krb5-1.15.2                    MIT implementation of RFC 4120 network authentication service
ldns-1.7.0_1                   Library for programs conforming to DNS RFCs and drafts
libart_lgpl-2.3.21_3,1         Library for high-performance 2D graphics
libbson-1.8.1                  BSON utility library
libdaemon-0.14_1               Lightweight C library that eases the writing of UNIX daemons
libedit-3.1.20170329_2,1       Command line editor library
libevent-2.1.8                 API for executing callback functions on events or timeouts
libffi-3.2.1_2                 Foreign Function Interface
libiconv-1.14_11               Character set conversion library
libltdl-2.4.6                  System independent dlopen wrapper
liblz4-1.8.1.2,1               LZ4 compression library, lossless and very fast
libmcrypt-2.5.8_3              Multi-cipher cryptographic library (used in PHP)
libnet-1.1.6_5,1               C library for creating IP packets
libnghttp2-1.29.0              HTTP/2.0 C Library
libucl-0.8.0                   Universal configuration library parser
libxml2-2.9.7                  XML parser library for GNOME
libyaml-0.1.6_2                YAML 1.1 parser and emitter written in C
lighttpd-1.4.48_1              Secure, fast, compliant, and flexible Web Server
lzo2-2.10_1                    Portable speedy, lossless data compression library
mpd5-5.8_2                     Multi-link PPP daemon based on netgraph(4)
nettle-3.4                     Low-level cryptographic library
ntp-4.2.8p10_2                 The Network Time Protocol Distribution
openldap-sasl-client-2.4.45    Open source LDAP client implementation with SASL2 support
openssh-portable-7.6.p1_3,1    The portable version of OpenBSD's OpenSSH
openssl-1.0.2n,1               SSL and crypto library
openvpn-2.4.4                  Secure IP/Ethernet tunnel daemon
opnsense-17.7.12_1             OPNsense release package
opnsense-lang-17.7.8           OPNsense translations
opnsense-update-17.7.10_2      OPNsense update utilities
pam_opnsense-17.1              OPNsense shared authentication system using PAM
pcre-8.40_1                    Perl Compatible Regular Expressions library
pecl-radius-1.4.0.b1           Radius client library for PHP
perl5-5.24.3                   Practical Extraction and Report Language
pftop-0.7_8                    Utility for real-time display of statistics for pf
phalcon-3.2.4                  Phalcon PHP Framework written in C-language
php71-7.1.13                   PHP Scripting Language
php71-ctype-7.1.13             The ctype shared extension for php
php71-curl-7.1.13              The curl shared extension for php
php71-dom-7.1.13               The dom shared extension for php
php71-filter-7.1.13            The filter shared extension for php
php71-gettext-7.1.13           The gettext shared extension for php
php71-hash-7.1.13              The hash shared extension for php
php71-intl-7.1.13              The intl shared extension for php
php71-json-7.1.13              The json shared extension for php
php71-ldap-7.1.13              The ldap shared extension for php
php71-mcrypt-7.1.13            The mcrypt shared extension for php
php71-openssl-7.1.13           The openssl shared extension for php
php71-pdo-7.1.13               The pdo shared extension for php
php71-session-7.1.13           The session shared extension for php
php71-simplexml-7.1.13         The simplexml shared extension for php
php71-sockets-7.1.13           The sockets shared extension for php
php71-sqlite3-7.1.13           The sqlite3 shared extension for php
php71-xml-7.1.13               The xml shared extension for php
php71-zlib-7.1.13              The zlib shared extension for php
pkg-1.10.3_1                   Package manager
pkgconf-1.4.0,1                Utility to help to configure compiler and linker flags
png-1.6.34                     Library for manipulating PNG images
py27-Babel-2.5.1               Collection of tools for internationalizing Python applications
py27-Jinja2-2.10               Fast and easy to use stand-alone template engine
py27-MarkupSafe-1.0            Implements XML/HTML/XHTML Markup safe string for Python
py27-asn1crypto-0.22.0         ASN.1 library with a focus on performance and a pythonic API
py27-certifi-2018.1.18         Mozilla SSL certificates
py27-cffi-1.11.2               Foreign Function Interface for Python calling C code
py27-chardet-3.0.4             Universal encoding detector for Python 2 and 3
py27-cryptography-2.0.3_1      Cryptographic recipes and primitives for Python developers
py27-dnspython-1.15.0          DNS toolkit for Python
py27-enum34-1.1.6              Python 3.4 Enum backported to 3.3, 3.2, 3.1, 2.7
py27-idna-2.5                  Internationalized Domain Names in Applications (IDNA)
py27-ipaddress-1.0.19          Port of Python 3.3+ ipaddress module to 2.7
py27-netaddr-0.7.19            Manipulation of IPv4, IPv6, CIDR, EUI and MAC network addresses
py27-openssl-17.5.0            Python interface to the OpenSSL library
py27-pycparser-2.10            C parser in Python
py27-pysocks-1.6.8             Python SOCKS module
py27-pytz-2017.3,1             World Timezone Definitions for Python
py27-requests-2.18.1_1         HTTP library written in Python for human beings
py27-setuptools-38.2.5         Python packages installer
py27-six-1.11.0                Python 2 and 3 compatibility utilities
py27-sqlite3-2.7.14_7          Standard Python binding to the SQLite3 library (Python 2.7)
py27-ujson-1.35                Ultra fast JSON encoder and decoder for Python
py27-urllib3-1.22              HTTP library with thread-safe connection pooling, file post, and more
python27-2.7.14_1              Interpreted object-oriented programming language
radvd-1.15                     Linux/BSD IPv6 router advertisement daemon
rate-0.9_1                     Traffic analysis command-line utility
readline-7.0.3_1               Library for editing command lines as they are typed
rrdtool12-1.2.30_7             Round Robin Database Tools v1.2
samplicator-1.3.8.r1           Receives UDP datagrams and redistributes them to a set of receivers
sqlite3-3.21.0_1               SQL database engine in a C library
squid-3.5.27_2                 HTTP Caching Proxy
sshlockout_pf-0.0.2_2          Automatically block IPs with failed SSH logins using pf(4)
strongswan-5.6.0               Open Source IKEv2 IPsec-based VPN solution
sudo-1.8.21p2_1                Allow others to run commands as root
suricata-4.0.3                 High Performance Network IDS, IPS and Security Monitoring engine
syslog-ng-3.13.2_1             Powerful syslogd replacement
syslogd-11.1                   FreeBSD syslogd with additions
unbound-1.6.7_1                Validating, recursive, and caching DNS resolver
wpa_supplicant-2.6_2           Supplicant (client) for WPA/802.1x protocols
zip-3.0_1                      Create/update ZIP files compatible with PKZIP
root@fw1:~ #

Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 02:52:06 pm »

Alles klar Franco, wurde gemacht:

Code: [Select]

root@fw1:~ # opnsense-revert openssl opnsense-update
root@fw1:~ # opnsense-update -Vur 18.1
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ DO_UPGRADE=-u
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ DO_RELEASE='-r 18.1'
+ RELEASE=18.1
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ shift 2
+ [ -n '' ]
+ [ -n '' ]
+ [ '' '=' -T ]
+ [ -z '' ]
+ DO_KERNEL=-k
+ DO_BASE=-b
+ DO_PKGS=-p
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -z '' ]
+ [ -n -k -a -n '' -a -z -u ]
+ [ -n -b -a -n '' -a -z -u ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -z 18.1 ]
+ [ -b '=' -B ]
+ [ -p '=' -P ]
+ [ -n '' ]
+ [ -p '=' -p -a -z -u ]
+ FLAVOUR=Base
+ [ -n '' ]
+ [ -f /usr/local/bin/openssl ]
+ /usr/local/bin/openssl version
+ awk '{ print $1 }'
+ FLAVOUR=OpenSSL
+ PACKAGESSET=packages-18.1-OpenSSL-amd64.tar
+ KERNELSET=kernel-18.1-amd64.txz
+ OBSOLETESET=base-18.1-amd64.obsolete
+ BASESET=base-18.1-amd64.txz
+ mirror_abi
+ sed -n 's/^[[:space:]]*url:[[:space:]]*\"pkg\+\(.*\/${ABI}\/[^\/]*\)\/.*/\1/p' /usr/local/etc/pkg/repos/origin.conf
+ MIRROR='http://pkg.opnsense.org/${ABI}/17.7'
+ opnsense-verify -a
+ ABI=''
+ MIRROR=/sets
root@fw1:~ #

Ich sehe mal aufs Erste keine Unterschiede

Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 02:23:27 pm »

Hi Franco!

Dachte ich mir. Danke für die schnelle Bestätigung.

Hier ist der Output:

Code: [Select]

root@fw1:~ # opnsense-update -Vur 18.1
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ DO_UPGRADE=-u
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ DO_RELEASE='-r 18.1'
+ RELEASE=18.1
+ getopts a:BbcdefgikLl:Mm:N:n:Ppr:Sst:TUuvV OPT
+ shift 2
+ [ -n '' ]
+ [ -n '' ]
+ [ '' '=' -T ]
+ [ -z '' ]
+ DO_KERNEL=-k
+ DO_BASE=-b
+ DO_PKGS=-p
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -z '' ]
+ [ -n -k -a -n '' -a -z -u ]
+ [ -n -b -a -n '' -a -z -u ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -n '' ]
+ [ -z 18.1 ]
+ [ -b '=' -B ]
+ [ -p '=' -P ]
+ [ -n '' ]
+ [ -p '=' -p -a -z -u ]
+ FLAVOUR=Base
+ [ -n '' ]
+ [ -f /usr/local/bin/openssl ]
+ /usr/local/bin/openssl version
+ awk '{ print $1 }'
+ FLAVOUR=OpenSSL
+ PACKAGESSET=packages-18.1-OpenSSL-amd64.tar
+ KERNELSET=kernel-18.1-amd64.txz
+ OBSOLETESET=base-18.1-amd64.obsolete
+ BASESET=base-18.1-amd64.txz
+ mirror_abi
+ sed -n 's/^[[:space:]]*url:[[:space:]]*\"pkg\+\(.*\/${ABI}\/[^\/]*\)\/.*/\1/p' /usr/local/etc/pkg/repos/origin.conf
+ MIRROR='http://pkg.opnsense.org/${ABI}/17.7'
+ opnsense-verify -a
+ ABI=''
+ MIRROR=/sets
root@fw1:~ #

Hoffe du kannst damit was anfangen

Grüsse,
Martinez

German - Deutsch / Re: Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 01:45:55 pm »

Hi Franco!

Mit dem ersten Kommando passiert nichts. Soll ich wirklich gleich danach direkt den Reboot triggern? Hier ist die Ausgabe auf der Konsole:

Code: [Select]

*** fw1.xyz.office: OPNsense 17.7.12_1 (amd64/OpenSSL) ***

 LAN (re0)       -> v4: 192.168.1.254/24
 WAN_3 (re1)     -> v4/DHCP4: 192.168.3.100/24
 WAN_A1 (re2)    -> v4/DHCP4: 10.0.0.30/24

  0) Logout                              7) Ping host
  1) Assign interfaces                   8) Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Upgrade from console
  6) Reboot system                      13) Restore a backup

Enter an option: 8

root@fw1:~ # opnsense-update -ur 18.1
root@fw1:~ #

German - Deutsch / [GELÖST] Upgrade von 17.7.12_1 (amd64/OpenSSL) failed

« on: January 30, 2018, 01:14:11 pm »

Hallo Leute,

beim Versuch 18.1 zu installieren kam es zu einem Abbruch. Das System ist nun immer noch auf 17.7.12_1 und kommt ständig mit einem Crash Report hoch.

Code: [Select]


User-Agent Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/63.0.3239.132 Safari/537.36
FreeBSD 11.1-RELEASE-p6  6621d681e(stable/18.1)
OPNsense 17.7.12_1-d0434f481 [18.1.r_121-1abdaef5c] OpenSSL 1.0.2n  7 Dec 2017 (amd64)
Time Tue, 30 Jan 2018 13:11:12 +0100

[30-Jan-2018 11:57:48 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/ldap.so' - Shared object "libldap-2.4.so.2" not found, required by "ldap.so" in Unknown on line 0
[30-Jan-2018 11:57:48 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/mcrypt.so' - Shared object "libmcrypt.so.4" not found, required by "mcrypt.so" in Unknown on line 0
[30-Jan-2018 11:57:48 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/ldap.so' - Shared object "libldap-2.4.so.2" not found, required by "ldap.so" in Unknown on line 0
[30-Jan-2018 11:57:48 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/mcrypt.so' - Shared object "libmcrypt.so.4" not found, required by "mcrypt.so" in Unknown on line 0
[30-Jan-2018 11:57:51 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/ldap.so' - Shared object "libldap-2.4.so.2" not found, required by "ldap.so" in Unknown on line 0
[30-Jan-2018 11:57:51 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library '/usr/local/lib/php/20160303/mcrypt.so' - Shared object "libmcrypt.so.4" not found, required by "mcrypt.so" in Unknown on line 0

Ein Versuch über die Konsole (Option 12) bzw. opnsense-update -t opnsense passiert nichts.

Upgrade Now zeigt folgendes:

<code>
***GOT REQUEST TO UPGRADE: maj***
***DONE***
</code>

Hatte nun auch versucht über opnsense-update -t opnsense-devel das Update zu triggern, hat auch nicht geklappt.

Jegliche Hilfe ist willkommen

Martinez

17.1 Legacy Series / Re: Upgrade from 16.7.14: Firewall rules doesn't works as before

« on: February 03, 2017, 08:10:49 am »

Thank djGrrr for investing the time and confirming that the issue is not being the FW rules itself!

Martinez

German - Deutsch / Re: Wie kann ich auf einen früheren Stand "downgraden"

« on: February 02, 2017, 11:33:11 pm »

Danke Franco! Werde das bei nächster Gelegenheit angehen.

Schönen Abend,
Martin

17.1 Legacy Series / Re: Upgrade from 16.7.14: Firewall rules doesn't works as before

« on: February 02, 2017, 10:58:44 pm »

Hi Franco!

Thanks for the feedback.

I have "Failover" configured based on that HOW-TO here:
https://docs.opnsense.org/manual/how-tos/multiwan.html

On top of that I have
- No floating rules
- LAN rules where one rule should hit a dedicated WAN Gateway
- No special WAN rules

The LAN rules are attached, 1 WAN rule is attached and is same for both WAN Gateways
(not added all of them due to size restrictions)

Hope this helps, let me know if you need more input.

Thanks,
Martinez

Pages: [1]