Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - magnust

#1
Yaaay, got a notification email today! Wonder what has changed 🤷
#2
Am I the only one?
#3
Since a bunch of months I never get notification emails from the forum (not in spam folders either). I searched here and found others having the same problem but I didn't find any solution.

Alerts work fine as they should.
#4
Quote from: magnust on February 13, 2024, 01:27:57 PM
It's HA proxy. If I disable it I get the login page as I should.

Not sure what I did in my HA proxy settings that makes it work ok in 23.x but gives me this problem in 24.1. I run http to https using Letsencrypt. I'll dig around and see what I find :-) I noted that there's another thread here on issues with HA proxy in 24.x so I'll go there instead of continuing in this thread :-)

Solution:

Can't have Haproxy Public Service listening to 0.0.0.0:443. I needed to put the actual external IP-number:443 and then all works well. YMMV I guess.
#5
I seem to have the same issue, how did you solve it?
#6
It's HA proxy. If I disable it I get the login page as I should.

Not sure what I did in my HA proxy settings that makes it work ok in 23.x but gives me this problem in 24.1. I run http to https using Letsencrypt. I'll dig around and see what I find :-) I noted that there's another thread here on issues with HA proxy in 24.x so I'll go there instead of continuing in this thread :-)
#7
Quote from: N00bOner on February 07, 2024, 11:30:20 AM
Could it be related to IPv6 ?
Looks like similar issue reported:

https://forum.opnsense.org/index.php?topic=38593.msg188923#msg188923

Thanks! Will take a look! I do have IPv6 manually disabled and did some tests fiddling with turning that and other things on and off without success so far. I wouldn't be hugely surprised if the issue is IP4 vs 6 related.
#8
 :( not for me. Same behavior, still get "No web site is configured at this address."

If I run "Reload all services" from the console, right after "Generating RRD graphs" is shown on the screen, just when "Waiting for PIDS: xxx" pops up I _do_ get the login web page. But if I wait until all service are reloaded I only get the "No web site is configured at this address." again.
#9
Quote from: N00bOner on February 02, 2024, 02:22:48 PM
....

After restart all the services via SSH WebGUI available again.

Are you sure about that? For me I only get to the login page while the reloading of all the services runs. But if I wait until all services have finished reloading I get the "no web site...."

Do you run HAproxy?
#10
I've tried searching but failed. Any idea why I now after upgrading get "No web site is configured at this address." when trying to access the opnsense admin page login? Never seen that before over the years.

In addition to the standard opnsense install I run HAproxy with ACME client and ddclient.

To actually get to the login page I "reload all services" in the console and while it is restarting all the services I get the proper login page and can login. Next time I want to log in, same procedure. Restarting the services could point to one of the services breaks something while running but I can't pinpoint which.
#11
Quote from: Taomyn on November 07, 2022, 08:49:17 AM
Do you have any hostnames instead of IPs in your HA config?


I've had this since forever when I replaced all my IPs with FQDNs so I could swap machines without needing to reconfigure HA, it seems no matter what I do HA fails to look them up and thus fails to start, even with the option to ignore this (DNS resolve order: 'last','libc','none').

Thank you thank you thank you! This has plagued me for ages. Looks solved with your tip!
#12
So with the new 22.7.5 release it's time to remove the disabling of net.inet.tcp.sack.enable in tunables?
#13
Quote from: fraenki on July 26, 2022, 09:10:03 AM
The crashes are gone after enabling the workaround that was suggested in the FreeBSD bug ticket:
add tunable net.inet.tcp.sack.enable with value "0" to disable SACK support.


Regards
- Frank

Thank you!!!

:D  :D :D :D
#14
Do I get back to the current 22.1 track by simply accepting the normal upgrade in the dashboard?
#15
No crash since the install of 22.7.pre3  :D