Messages

1

23.7 Legacy Series / Re: slow vpn to NAS server directories since upgrade

« on: December 28, 2023, 09:05:36 pm »

OK  ...

I set the MSS normalization setting in firewall settings to 1380 for the wireguard group and things magically are superfast.

The ping response times and iperf3 times are the same though. Is there a way to see if a packet is indeed being fragmented? I see no drops before or now, so it must be fragmenation right?

BTW, Here is a good article to go by. https://gist.github.com/nitred/f16850ca48c48c79bf422e90ee5b9d95

2

23.7 Legacy Series / Re: slow vpn to NAS server directories since upgrade

« on: December 28, 2023, 07:26:22 pm »

I checked the max mtu size as via ping as 1392+ 28 = 1420. When I set that, the WAN took a dump and I couldn't connect at all, so I reset it to blank and its working again.

not sure how to test mss.

3

23.7 Legacy Series / [SOLVED] slow vpn to NAS server directories since upgrade

« on: December 28, 2023, 05:56:27 pm »

running

OPNsense 23.7.10_1-amd64
FreeBSD 13.2-RELEASE-p7
OpenSSL 1.1.1w

Since the upgrade, it takes minutes to show folders on my NAS server. 2 minutes to open up a 11kb pdf file.

I have tried smb v2,3 webdav, used openvpn, wireguard and tailscale to test if it the vpn software itself or the protocol. there is zero packet loss, 32ms ping repsonse.

NAS server works perfectly if in the office. Firewall is basically 0%cpu, state table 485. I'm at a loss.

4

19.7 Legacy Series / Re: Not seeing client install packages under Client Export in openVPN

« on: October 03, 2019, 09:07:45 pm »

bump..

any ideas please?

5

19.7 Legacy Series / Not seeing client install packages under Client Export in openVPN

« on: September 26, 2019, 08:23:20 pm »

running:

OPNsense 19.7.4_1-amd64
FreeBSD 11.2-RELEASE-p14-HBSD
OpenSSL 1.0.2s 28 May 2019

I have configured the authoritative and server certificates, user name and cert but when I try to perform the client export i do not see "link to openvpn clients" at the bottom of the page. In addition I see an option "export type" which is not in the documentation.

AM I missing something? see screenshot for info.

6

19.7 Legacy Series / voip not reconnecting after reboot

« on: August 09, 2019, 09:27:24 pm »

Running

OPNsense 19.7.2-amd64
FreeBSD 11.2-RELEASE-p12-HBSD
OpenSSL 1.0.2s 28 May 2019

Converted over from pfsense and have this nagging issue. My home voip phone cisco spa122 used to reconnect fine after a firewall reboot or upgrade. It seems not to be able to do this with opnsense. Not sure if a state table issue, dhcp, etc, but if i reboot the spa122 it connects fine.

Any suggestions?

7

19.7 Legacy Series / Re: [Solved] Port forwarding rule Plex not working after upgrade to 19.7

« on: August 02, 2019, 05:09:55 pm »

np

8

19.7 Legacy Series / Re: Port forwarding rule Plex not working after upgrade to 19.7

« on: August 02, 2019, 04:58:37 pm »

I agree. change destination to WAN address. Attached pic is mine and it works fine. To be on the safe side, delete rule and recreate.

9

19.7 Legacy Series / editing of username error.

« on: August 02, 2019, 04:48:20 pm »

running:
OPNsense 19.7.1-amd64
FreeBSD 11.2-RELEASE-p11-HBSD
OpenSSL 1.0.2s 28 May 2019

I have 3 usernames defined root,admin and john. I was setting up John to use google authentication which works fine. The problem is when I try to edit the username john and click the pencil, it quickly shows john and then the screen changes to the username admin. Very weird.

The only way to circumvent this is to change the username manually to John and then start to edit and save. Editing root or admin works fine.

10

19.7 Legacy Series / [SOLVED] Health quality graphs no data

« on: July 19, 2019, 11:10:49 pm »

Can't figure this out.

The health quality graph under reporting is showing no data for zoom levels 20,60 hours and 6 years but shows fine for 77 days.


solved.  had to reset rrd data.

11

18.7 Legacy Series / Re: Running ntopng

« on: October 16, 2018, 09:56:10 pm »

Any chance of re-configuring the plugin to add a link in the reporting section of the dashboard?

12

18.7 Legacy Series / Re: collectd question

« on: October 11, 2018, 10:12:46 pm »

thank you.

13

18.7 Legacy Series / collectd question

« on: October 11, 2018, 08:39:30 pm »

How do you access the graphs for the collectd plugin?

14

18.7 Legacy Series / Re: Error message in Suricata

« on: August 31, 2018, 03:12:06 pm »

here is line 8 from the rule

# -- User defined rules
drop ip  any any -> any any (msg:"block russia";  geoip:src,RU ; sid:4294967294; rev:1;)

15

18.7 Legacy Series / [SOLVED] Extremely long time for web pages to load whether squid is on or off.

« on: August 30, 2018, 08:08:20 pm »

It seems that a port forward rule for port 80 still hung around after I disabled web proxy. It was redirecting all port 80 traffic to the proxy server 3128 port.

Now web site loading is instantaneous. Boy that was frustrating....