Messages

We'll add Python3 in 19.1.

Thanks!

I would like to know if Python3 support is already in the pipeline. And if it is, what are the timelines on the inclusion of python3 in the distribution?

I ask this for several reasons.
My main reason is that Python2.7 will retire shortly (https://pythonclock.org) and security updates for that package will cease around 2020Q1. This, ofcourse, will not instantly break the firewall but does put us at increased risk as time progresses beyond 01JAN2020.

Another reason is that I develop python software. I use python3 and it annoys the heck out of me that I can't run those apps under OPNsense because python3 is not supported. I know I can install python3 manually, but that has some unwanted side-effects (notably during upgrades  ;) ). Alternatively, re-factoring back to python2.7 just to support OPNsense is a no-go where I'm concerned.

fixed it by uninstalling python3

[OPNsense 18.1.13_1-amd64FreeBSD 11.1-RELEASE-p11]

I must have clicked the wrong button somewhere, because I seem to have upgraded successully to 18.7 but then accidentally clicked the Update button which took me back to 18.1 and ow I'm stuck.

On the GUI I am at "18.1.13 (installed)"
On the CLI I am at

Code Select Expand

# opnsense-update -v
18.1.11-amd64

When I click the "Unlock this upgrade" button in the CLI and then click the "Upgrade now"
it says that its fetching the 18.7 packages
Then there's an error when fetching the kernel package:

Code Select Expand

pgrep cannot get process list [kvm_getprocs: No such process]

This is followed by extraction of the packages and seemingly succesful installation.
(see attachment)

After the upgrade I'm still on
OPNsense 18.1.13_1-amd64
FreeBSD 11.1-RELEASE-p11


I can SSH into the box.
Any commands I might try to force this?

Do you have the router advertisements service enabled on the LAN interface?

I do now :-D
Managed, priority: normal

OK. I now have a fixed IPv6 address configured for the LAN interface:
xxxx:yyyy:zzzz::2/118

On Services > DHCPv6 > [LAN] I now have an available range of
xxxx:yyyy:zzzz:: - xxxx:yyyy:zzzz::3ff

I've entered a Range of:
xxxx:yyyy:zzzz::3 - xxxx:yyyy:zzzz::3f0

No leases are being handed out.

The IPv6 address on the WAN interface is xxxx:yyyy:zzzz:1:20e:c4ff:fed0:9f95
I assume that's okay.

  If you could just clarify if you're trying to get LAN IPv6 addresses allocated or something else.

What I want to achieve is:
1. The clients on my LAN get issued an IPv4 AND an IPv6 address
2. On every client on my LAN this should work:

Code Select Expand


$ ping6 google.com
connect: Network is unreachable


Code Select Expand


$ ping6 google.com
ping6: UDP connect: No route to host

On OPNsense it already works:

Code Select Expand


$ ping6 google.com
PING6(56=40+8+8 bytes) 2001:985:509c:1:20e:c4ff:DEAD:DEAD --> 2a00:1450:4002:808::200e
16 bytes from 2a00:1450:4002:808::200e, icmp_seq=0 hlim=53 time=20.743 ms


What errors are you seeing with DHCP? Do you see a suggested range when you to the DHCPv6 config page?

[EDIT] I forgot to ask if you have a fixed IP address for IPv6?

Thanks for taking the time to provide assistance with this.
Here are the settings that I think are appropriate.

My ISP (XS4ALL; NL) has provided me with a modem (Fritz!Box 5490). IPv6 relevant settings on the modem:
x Assign unique local addresses (ULA) as long as no IPv6 connection exists (recommended)
x Priority of Router advertisements = Low
x Announce DNSv6 server via router advertisement (RFC 5006)
x DHCPv6 server is enabled and assigns DNS server, prefix (IA_PD) and IPv6 address (IA_NA).

The OPNsense firewall is behind the modem (in DMZ). The WAN interface has been assigned an IPv4 and an IPv6 address. The IPv6 addresses shown by ifconfig match the addresses that the FritzBox says it has issued.



OPNsense configuration:

On Interfaces > [WAN]
IPv6 Configuration Type = DHCPv6
DHCP client configuration = all options empty (defaults); prefex delegation size = 64; use VLAN priority = disabled.

On Interfaces [LAN]
IPv6 Configuration Type = Track Interface
IPv6 Interface = WAN
IPv6 Prefix ID = 0

I get stranded when I want to configure the DHCPv6 server. On Services > DHCPv6 > Relay: I select:
Enable = ON
Interfaces = WAN

Clicking Save I get:

The following input errors were detected:
The field Destination Server is required.

Destination server?  :o

Never did get this to work satisfactorily.
Is there any documentation that goes into the ipv6 options?

I must admit that I too can't seem to get IPv6 working properly.
I have now got the WAN-interface to acquire an address from the upstream router, but getting DHCP6 to dish out IPv6 address to the LAN-interface and the LAN clients is a whole different story.

I know DNSMASQ can even do this, but the GUI doesn't seem to support this directly. And really, isn't this what DHCPv6 is there for anyway?   :(

[only]

Observed behaviour:
The OPNsense Forum sends me a "Daily Digest" e-mail every single day regardless if there has been activity on the subscribed topics or not.  When there's been no activity the mail is empty apart from the header text:

Below is a summary of all activity in your subscribed boards and topics at OPNsense Forum today. To unsubscribe please visit the link below.

Expected behaviour:
The OPNsense forum sends me a "Daily Digest" e-mail only on days when there actually is some activity in the topics I've subscribed to.

+1

I have an action script to find new devices in Lan and i would like to get an E-Mail Notification

Perhaps you could use this Python script: https://gist.github.com/Mausy5043/0f7fa43ba35cf68e2756b7bfe1419146

All that is required for this is a Gmail account and an App-specific password (see: https://support.google.com/accounts/answer/185833?hl=en).

We cannot provide safety for more than the ports that we offer as binary packages.

Clear.
I'll see if I can downgrade my scripts to Python 2.7. Shouldn't be too hard. I just used 3.5 because all my other Python projects use it.

P.S. Please be aware that Python 2.7 is EOL in 2020 (see PEP466: https://www.python.org/dev/peps/pep-0466/).

We don't offer Python 3.5. It will cause further trouble.

:-[

Code Select Expand


% whereis python35
python35: /usr/ports/lang/python35


Hmm ???

# opnsense-update -sn "18.1\/latest"
# pkg bootstrap -f

type "y"

# pkg upgrade -f

or if that doesn't work

# pkg install opnsense


Cheers,

Code Select Expand


% sudo opnsense-update -sn "18.1\/latest"
% sudo pkg bootstrap -f
The package management tool is not yet installed on your system.
Do you want to fetch and install it now? [y/N]: y
Bootstrapping pkg from pkg+http://pkg.opnsense.org/FreeBSD:11:amd64/18.1/latest, please wait...
Verifying signature with trusted certificate pkg.opnsense.org.20171219... done
Installing pkg-1.10.3_1...
package pkg is already installed, forced install
Extracting pkg-1.10.3_1: 100%
% sudo pkg upgrade -f
Updating OPNsense repository catalogue...
pkg: Repository OPNsense has a wrong packagesite, need to re-create database
Fetching meta.txz: 100%    1 KiB   1.5kB/s    00:01
Fetching packagesite.txz: 100%  126 KiB 129.0kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 468 packages processed.
All repositories are up to date.
Updating database digests format: 100%
Checking for upgrades (149 candidates):  14%
python35 has no direct installation candidates, change it to python27? [Y/n]: Y
Checking for upgrades (149 candidates): 100%
Processing candidates (149 candidates): 100%
pkg: sqlite error while executing UPDATE packages SET name=?1  WHERE name=?2; in file pkg_jobs.c:1731: UNIQUE constraint failed: packages.name
:
[143/144] Fetching py27-dnspython-1.15.0.txz: 100%  167 KiB 170.6kB/s    00:01
Checking integrity...Assertion failed: (strcmp(uid, p->uid) != 0), function pkg_conflicts_check_local_path, file pkg_jobs_conflicts.c, line 386.
Child process pid=54683 terminated abnormally: Abort trap


Retried without trying to replace python35 seemed to work.
Rebooted (may not have been necessary).

Status acc. the GUI:

Code Select Expand


OPNsense 18.1.2_2-amd64
FreeBSD 11.1-RELEASE-p6
OpenSSL 1.0.2n 7 Dec 2017


Actually, the creation of account and Dynamic DNS hostname is free. Just need to fill the form https://www.dtdns.com/

This is interesting. Could someone enlighten me (mega-n00b on this subject) as to the merits of using a dynamic DNS service as opposed to setting up dnsmasq with 9.9.9.9 as an external resolver or using unbound?

never mind. Found it on Google  ;D