Messages

1

19.1 Legacy Series / Re: FRR package broken for OSPF Neighbors exchange

« on: April 15, 2019, 12:58:07 pm »

I'm still having issues with this, even without VRRP, there is VRRP on the network but that should be fine.

OPNsense advertises itself with an old IP, Router-id seems to be OK so there might be some cache involved ?

If anyone has some extra information here it would be great because the documentation is quite unclear and incomplete.

2

19.1 Legacy Series / Re: FRR package broken for OSPF Neighbors exchange

« on: April 13, 2019, 03:42:12 am »

Thanks for the update!

That makes it all clear that my single interface IP, direct on eth0, worked. This because there was no CARP address there but there is on the VLAN.

As it's kinda late I update this later on with some extra info!

3

19.1 Legacy Series / FRR package broken for OSPF Neighbors exchange

« on: April 12, 2019, 01:35:27 pm »

Hi,

I have ran into a problem with is the same as in the following link but does not work as well in OPNsense as the guy of the topic claims.

Then you have the firewall enabled with a allow all any any any and really any rule, OSPF neigbors are stuck on Init and then everything dies. if you disable the firewall like pfctl -d then you get all routes int, traffic starts to flow but when you pfctl -e again... routes die, traffic stops flowing, etc...

I have tested this also on non-vlan interfaces before and that seems to work, could there be an issie related to vlans ?

https://forum.netgate.com/topic/142397/ospf-neighbors-not-coming-up/2

Any ideas or people who have the same related issue ?

4

General Discussion / Re: [SOLVED] Backup OPSsense configuration with wget

« on: February 11, 2019, 02:31:56 pm »

I'm only trying to help and I feel you're not accepting it. I'm sorry I cannot communicate this any better.

Sorry for that, we might have some misunderstanding here! I have some other way I'm working on where I actually need this for so for now it's not needed anymore.

Thanks!

5

Development and Code Review / Let's encrypt Automation not triggered ?

« on: February 11, 2019, 02:30:31 pm »

Hi Guys,

I'm trying to create something as Lets Encrypt Automation after a certificate renewal but it doesn't seem to be triggered.

When I add something simple like touch() in the upload_highwinds.php the file is not created as well, so I'm wondering why it doesn't work or gets triggered.

6

General Discussion / Re: [SOLVED] Backup OPSsense configuration with wget

« on: February 10, 2019, 06:30:17 pm »

This topic is about config.xml backups, sorry.

Which I try to get with a working bash script you say which is working referring to a script you are not wiling to (re)post ?

From that I can see what I do else but this is my base, so please share what you say you have working or is working.

Thanks again!

7

General Discussion / Re: [SOLVED] Backup OPSsense configuration with wget

« on: February 10, 2019, 06:01:13 pm »

install os-api-backup plugin and see https://github.com/opnsense/plugins/pull/895#issuecomment-458158323

That is not the bashscript I requested for. I want to do something else with bash as well, like exporting certificates but want to have this working first.

I'm looking forward to it

8

General Discussion / Re: [SOLVED] Backup OPSsense configuration with wget

« on: February 10, 2019, 05:45:44 pm »

> Am I right if this doesn't work at all on 19.x ?

No, it is ok.

Can you please post a working, tested, example as reference ? I think it clears up the topic as well. Thanks!

9

General Discussion / Re: [SOLVED] Backup OPSsense configuration with wget

« on: February 10, 2019, 05:25:12 pm »

Am I right if this doesn't work at all on 19.x ?

If it should work please add a working example.

Thanks!

10

19.1 Legacy Series / Let's Encrypt DNS-01 howto with nsupdate

« on: February 06, 2019, 07:06:21 pm »

Hi Guys,

I'm trying to figure out how I can create (wildcard) certificates using the Lets Encrypt module and DNS-01 and nsupdate using my own DNS server but I'm not able to figure out the Secret Key Part.

My DNS servers, which are seperate, are PowerDNS ones and I see Bind mentioned everywhere, is this for local lookup ?

A Howto would be great as this one is not completely clear: https://github.com/opnsense/plugins/pull/66

Thanks in advance!