Messages

Hi Franco,

     I did another fresh install. And the first step I did is to upgrade the firmware from WebGui.  It seems this one work normally.

    I'm not so sure which steps causing the problem on previous set. I suspect on previous set, I added package tree (by enabling FreeBSD package temporary, /usr/local/etc/pkg/repos/FreeBSD.conf ). Then, I try to do upgrade on the OPNSense firmware from WebGui. Some how things get messed up?

   

OK. I have another existing production system currently on 19.7.2

Code Select Expand


Versions OPNsense 19.7.2-amd64
FreeBSD 11.2-RELEASE-p12-HBSD
OpenSSL 1.0.2s 28 May 2019


I notice these strange behavior..

on the 19.7.2 system :

Code Select Expand


root@OLD:/etc # uname -a
FreeBSD OLD 11.2-RELEASE-p12-HBSD FreeBSD 11.2-RELEASE-p12-HBSD  0f8d026f0ea(stable/19.7)  amd64
root@OLD:/etc # opnsense-update -M
https://pkg.opnsense.org/FreeBSD:11:amd64/19.7
root@OLD:/etc # cat /usr/local/opnsense/version/base
19.7.2
root@OLD:/etc # pkg info
arc-5.21p                      Create & extract files from DOS .ARC files
arj-3.10.22_8                  Open source implementation of the ARJ archiver
arp-scan-1.9                   ARP scanning and fingerprinting tool
arpwatch-2.1.a15_10            Monitor arp & rarp requests
bash-5.0.7                     GNU Project's Bourne Again SHell
beep-1.0_1                     Beeps a certain duration and pitch out of the PC Speaker
brotli-1.0.7_2,1               Generic-purpose lossless compression algorithm
bsdinstaller-19.7              BSD Installer mega-package
c-icap-0.5.5,2                 ICAP server implementation
c-icap-modules-0.5.3_1         Modules for c-icap: virus_scan and srv_url_check
ca_root_nss-3.45               Root certificate bundle from the Mozilla Project
choparp-20150613               Simple proxy arp daemon
clamav-0.101.2,1               Command line virus scanner written entirely in C



But, on the newly installed system (19.7):

Code Select Expand


Versions OPNsense 19.7-amd64
FreeBSD 11.2-RELEASE-p11-HBSD
OpenSSL 1.0.2t 10 Sep 2019


Code Select Expand


root@xxxx:/etc # uname -a
FreeBSD xxxx 11.2-RELEASE-p11-HBSD FreeBSD 11.2-RELEASE-p11-HBSD  ab3b8b47944(stable/19.7)  amd64
root@xxxx:/etc # cat /usr/local/opnsense/version/base
19.7
root@xxxx:/etc # pkg info
arc-5.21p                      Create & extract files from DOS .ARC files
arj-3.10.22_8                  Open source implementation of the ARJ archiver
arpwatch-2.1.a15_10            Monitor arp & rarp requests
bash-5.0.11                    GNU Project's Bourne Again SHell
brotli-1.0.7_2,1               Generic-purpose lossless compression algorithm
c-icap-0.5.5,2                 ICAP server implementation
c-icap-modules-0.5.3_1         Modules for c-icap: virus_scan and srv_url_check
ca_root_nss-3.47               Root certificate bundle from the Mozilla Project
clamav-0.101.4,1               Command line virus scanner written entirely in C
curl-7.66.0                    Command line tool and library for transferring data with URLs
cvsps-2.1_2                    Create patchset information from CVS
dmidecode-3.2                  Tool for dumping DMI (SMBIOS) contents in human-readable format
expat-2.2.8                    XML 1.0 parser written in C
gettext-runtime-0.20.1         GNU gettext runtime libraries and programs


It seems like I have newer packages on the newly installed system, even though the version is 19.7.

eg.
19.7 system (newly installed) :  bash-5.0.11
19.7.2 system (existing old system) : bash-5.0.7

It looks like freebsd / openssl updated somehow. But, OPNsense not get updated.
Does these provide any clues?

err.. not 0..

Code Select Expand


root@xxxx:/etc # pkg info | wc -l
      71
root@xxxx:/etc #


Code Select Expand


root@xxxx:/etc # uname -a
FreeBSD xxxx 11.2-RELEASE-p11-HBSD FreeBSD 11.2-RELEASE-p11-HBSD  ab3b8b47944(stable/19.7)  amd64


Hi Franco,

    Yes, looks strange.

Code Select Expand


root@xxxx:/usr/local/www # opnsense-update -M
https://pkg.opnsense.org/FreeBSD:11:amd64/19.7

root@xxxx:/usr/local/www # pkg update -f
Updating OPNsense repository catalogue...
Fetching meta.txz: 100%    1 KiB   1.5kB/s    00:01
Fetching packagesite.txz: 100%  178 KiB 181.9kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 700 packages processed.
All repositories are up to date.



Done a fresh install using version 19.7.
Click the "Check for updates". But, system always return "There are no updates available on the selected mirror."

When I click on the Change Log, it shows latest version is 19.7.6.

How can I force the system to update to 19.7.6 ?

Code Select Expand


Version Date
19.7.6 2019-11-01
19.7.5 2019-10-11
19.7.4 2019-09-11
19.7.3 2019-08-28
19.7.2 2019-08-05
19.7.1 2019-07-25
19.7 (installed) 2019-07-17

In the Zone Edit Dialog, we can enter "pass thru" IP or MAC in the following field.
Allowed addresses -- this is for IP addresses or subnets
Allowed MAC addresses -- this is for MAC addresses

My question is, how OPNsense control the allowed MAC Address? When I run "ipfw list", I don't see any rules associated with the MAC address that I enter in "Allowed MAC address".

Is there any other means for me to verify this?

thanks!