Messages

Hi, found out where the error was. ::)
On two different computers the Firefox profile was corrupt. Temporary data had been deleted by me before, the solution was the creation of a new profile. >:(

Thanks
ahi

Hi,

I can no longer configure various settings in the OPNsense Web Interface or the corresponding pages / configuration settings are simply no longer loaded. The functionality of the firewall itself is not limited so far.

Among others, it affects the following configuration areas:

System:Routes:*
Firewall:Aliases (endless "loading data..")
Firewall:Categories

Since I have already made several restores to earlier backups, I can say that this problem existed with version 21.7. as well. But since then there has been no need for changes to the disappeared configuration, so it has not been noticed. I have also already completely reinstalled on a new machine and restored the configuration.

Any idea what can cause this problem and especially how to fix it?

Thanks in advance.
ahi

Just thinking about my underlaying VMWare infrastructure rather than a faulty OPNSense...

Hi, I have very similar problems right now. We also use ESXi 6.7 and have at least 2 "breaks" every day in the morning and evening for about 10 to 20 minutes. After that it continues without reboot as if nothing happened. In the logs I haven't found anything unusual yet. Could you solve the problem in the meantime?

Many thanks & greetings
ahi

I think this has been thought transmission or something like this :o

Just before i read your post  i discovered an small error in the return route.

Thanks for the quick answer and probably the thought transmission!  ;D

ahi

Hi,

i am trying to build a "simple" openvpn server with the latest opnsense and finally despairing...
I configured the second time from the scratch now with the same problem:

Connection to OpenVPN running on TCP443 (Web-Interface Port 444) can be established without any errors, but the routing to the LAN net is not working. Only the Opnsense IP in the LAN Net is reachable. For now all traffic should be routed over the VPN, so Redirect Gateway is on in the server setting, but i tested with this option turned off and putting the lan net in the openvpn config too.

The server has a public WAN IP. The other networks are:

LAN 172.16.30.0/23
OpenVPN 10.16.30.0/24

Code Select Expand

netstat -rn

Internet:
Destination        Gateway            Flags     Netif Expire
default            xxx.xxx.xxx.129      UGS         em0
10.16.30.0/24      10.16.30.2         UGS      ovpns1
10.16.30.1         link#7             UHS         lo0
10.16.30.2         link#7             UH       ovpns1
127.0.0.1          link#4             UH          lo0
172.16.30.0/23     link#2             U           em1
172.16.30.56       link#2             UHS         lo0
xxx.xxx.xxx.128/28  link#1             U           em0
xxx.xxx.xxx.131     link#1             UHS         lo0


Routes added to VPN Client:

Code Select Expand


     Dest           mask          Gateway    Interface Metrik
          0.0.0.0        128.0.0.0       10.16.30.1       10.16.30.2    291
       10.16.30.0    255.255.255.0   Auf Verbindung        10.16.30.2    291
       10.16.30.2  255.255.255.255   Auf Verbindung        10.16.30.2    291
     10.16.30.255  255.255.255.255   Auf Verbindung        10.16.30.2    291


   
IPCONFIG VPN Client

Code Select Expand

Ethernet-Adapter Ethernet 2:

   Verbindungsspezifisches DNS-Suffix: xxxxxxxx.de
   Beschreibung. . . . . . . . . . . : TAP-Windows Adapter V9
   Physische Adresse . . . . . . . . : 00-FF-3E-xx-xx-xx
   DHCP aktiviert. . . . . . . . . . : Ja
   Autokonfiguration aktiviert . . . : Ja
   Verbindungslokale IPv6-Adresse  . : fe80::c99:4d1c:3271:xxxxxx(Bevorzugt)
   IPv4-Adresse  . . . . . . . . . . : 10.16.30.2(Bevorzugt)
   Subnetzmaske  . . . . . . . . . . : 255.255.255.0
   Lease erhalten. . . . . . . . . . : Donnerstag, 16. November 2017 19:38:29
   Lease läuft ab. . . . . . . . . . : Freitag, 16. November 2018 19:38:29
   Standardgateway . . . . . . . . . :
   DHCP-Server . . . . . . . . . . . : 10.16.30.254
   DNS-Server  . . . . . . . . . . . : 172.16.30.5
                                       172.16.30.6
   NetBIOS über TCP/IP . . . . . . . : Aktiviert

The FW Rules are correct as far i can see. In the logs traffic is passed (attachment)

Thanks for any help

ahi