Messages

When will NameCheap be implemented into the OPNsense Dynamic DNS?

Check for updates should fix that as there no local package database right after upgrade.


Cheers,
Franco

I tried checking for updates and it didn't fix the problem.

I also noticed things in the logs when I did the upgrade:

Code Select Expand


2020-02-05T17:02:54 kernel: pkg-static: Repository OPNsense cannot be opened. 'pkg update' required
2020-02-05T17:02:54 kernel: pkg-static: Repository OPNsense has a wrong packagesite, need to re-create database
2020-02-05T17:02:54 pkg-static: opnsense upgraded: 19.7.10_1 -> 20.1
2020-02-05T17:02:38 pkg-static: os-api-backup reinstalled: 1.0 -> 1.0
2020-02-05T17:02:37 pkg-static: os-clamav reinstalled: 1.7 -> 1.7
2020-02-05T17:02:35 pkg-static: os-dyndns upgraded: 1.18_1 -> 1.19
2020-02-05T17:02:33 pkg-static: os-etpro-telemetry reinstalled: 1.4_1 -> 1.4_1
2020-02-05T17:02:31 pkg-static: os-maltrail reinstalled: 1.3 -> 1.3
2020-02-05T17:02:29 pkg-static: os-netdata reinstalled: 1.0 -> 1.0
2020-02-05T17:02:27 pkg-static: os-nut reinstalled: 1.6_2 -> 1.6_2
2020-02-05T17:02:25 pkg-static: os-smart reinstalled: 2.1 -> 2.1
2020-02-05T17:02:22 pkg-static: os-theme-rebellion reinstalled: 1.8.3 -> 1.8.3
2020-02-05T17:02:21 pkg-static: os-wol reinstalled: 2.2 -> 2.2
2020-02-05T17:02:21 kernel: pkg-static: POST-INSTALL script failed
2020-02-05T17:02:21 kernel: pkg-static: Repository OPNsense has a wrong packagesite, need to re-create database
2020-02-05T16:48:33 pkg-static: libuv upgraded: 1.34.0 -> 1.34.1
2020-02-05T16:48:33 pkg-static: opnsense upgraded: 19.7.9_1 -> 19.7.10_1
2020-02-05T16:48:20 pkg-static: os-theme-rebellion upgraded: 1.8.2 -> 1.8.3
2020-02-05T16:48:20 pkg-static: py27-setuptools upgraded: 41.4.0_1 -> 44.0.0
2020-02-05T16:48:19 pkg-static: isc-dhcp44-relay upgraded: 4.4.1 -> 4.4.2
2020-02-05T16:48:19 pkg-static: isc-dhcp44-server upgraded: 4.4.1_4 -> 4.4.2
2020-02-05T16:48:19 pkg-static: strongswan upgraded: 5.8.2 -> 5.8.2_1
2020-02-05T16:48:18 pkg-static: wpa_supplicant reinstalled: 2.9 -> 2.9
2020-02-05T16:48:17 pkg-static: curl upgraded: 7.67.0 -> 7.68.0
2020-02-05T16:48:16 pkg-static: e2fsprogs-libuuid upgraded: 1.45.4 -> 1.45.5
2020-02-05T16:48:16 pkg-static: liblz4 upgraded: 1.9.2,1 -> 1.9.2_1,1
2020-02-05T16:48:16 pkg-static: py37-urllib3 upgraded: 1.25.6,1 -> 1.25.7,1
2020-02-05T16:48:15 pkg-static: ca_root_nss upgraded: 3.48 -> 3.49.1
2020-02-05T16:48:15 pkg-static: cyrus-sasl upgraded: 2.1.27 -> 2.1.27_1
2020-02-05T16:48:14 pkg-static: py37-six upgraded: 1.12.0 -> 1.13.0
2020-02-05T16:48:14 pkg-static: py37-setuptools upgraded: 41.4.0_1 -> 44.0.0


The upgrade went great!  Thank You OpnSense for a very smooth upgrade!

The only thing that I noticed regarding the upgrade is that the Plugins I have installed all say "orphaned" and there isn't a list with uninstalled plugins on the Plugins page. 

Could Pi-Hole be turned into an add-on/plugin?

@Charles2019 see the fourth post above on how to accomplish this. You have to create a new floating rule.

Actually that doesn't work as it should either. 
When I added the rule myself as noted above, I got this: ipv6_01.png
But when I unchecked the box to allow IPv6 I got this: ipv6_02.png

Looks and sounds like a nice plugin!  Looking forward to when it is in the official repo!

I need just to disable IPv6 in OPNsense. Totally and everywhere.

I think Antaris is very clear on what he wants.

Also, if we don't start to utilize IPv6 and understand it then, we will always fall back to not wanting to use it.

I honestly don't like this thought process relating to a firewall I need to maintain complete control over.

I also noticed ntpd was using IPv6 as well and don't see a means to disable this in the webui. I think it would be a little more appropriate to add a disable all related IPv6 functionality toggle button somewhere in the webui. This setting should then toggle off all other related IPv6 settings in the webui and actually disable IPv6 functionality.

I agree that there should be one setting to turning off IPv6 completely.

When I go to Firewall -> Rules -> Floating and click to edit the IPv6 rule not allowing IPv6, it takes me to Firewall -> Settings -> Advanced where there is an option to Allow IPv6(or disallow)  Don't know how to control the logging as I see IPv6 blocked traffic and it would be nice not to see it too without having to modify core files.

Well after looking around, I actually had to modify this file:
/usr/local/www/status_dhcp_leases.php

On line 358 I commented it out as such:

Code Select Expand


<!--            <table class="table table-striped">-->


Then around line 420 I added the below code:

Code Select Expand


<?php If ($data['online'] == 'offline') { ?><tr style="background:rgba(235, 9, 9, 0.3); border: 2px solid black; border-radis:
5px;">
<?php } else { ?><tr style="background:rgba(5, 142, 73, 0.3); border: 2px solid black; border-radis: 5px;">
<?php } ?>



When looking at the main.css file for the Rebellion theme, I noticed the table-striped class but it not only affects the DHCP v4 Status page, but several other pages.  How can I edit the main.css file to where it will only affect the DHCP v4 Status page?

P.S. Not worried about DHCP v6 as I don't use IP6 in my network at all.

I have the os-theme-rebellion theme installed and I would like to make some modifications to the theme.
What is the location of where the theme is installed?

On the Firewall -> Log Files -> Live View where allowed traffic has green fill and blocked traffic has a red fill, I would like to apply it similarly to Services -> DHCPv4 -> Leases where green would show online and red would show offline.

Yes I'm able to reach my cable modem through OPNSense.

This should help @Charles2019

https://wiki.freebsd.org/SpeculativeExecutionVulnerabilities

So from my understanding, I am turning off the protection for Meltdown. 

Has OPNSense been updated with this below?:
https://reviews.freebsd.org/rS329462

When can I enable the Meltdown protection again?

You could also try this:
https://forum.opnsense.org/index.php?topic=11419.msg55219#msg55219

When you're at the boot prompt (after selecting option 3), type this in:

set vm.pmap.pti="0"
boot

That worked perfectly!   What is that setting for?

Oh, I posted this in the wrong thread, see below.

@bimmeldriver yes please, installer may hang but CTRL+C should work around it ok.

So this is the preliminary amd64 ISO for 19.1.4. It can be used in production and upgrades normally...

https://pkg.opnsense.org/FreeBSD:11:amd64/snapshots/OPNsense-19.1.4-OpenSSL-dvd-amd64.iso.bz2

All images, checksums and the announcement follow next week when we will have wrapped up testing image integrity for all other images (it takes about 2 days in total to do that).


Cheers,
Franco

First I want to say thanks for all the hard work put into this outstanding software!

I downloaded the ISO and burned it to a DVD.  When I boot from the DVD, it reboots over and over.  It does load the Kernel modules and then shows Booting.  The screen refreshes and looks like it is starting up and then that is when the computer restarts.  I even tried the Safe Mode and that didn't help.

The DVD Reader isn't that old while my Motherboard, Processor and RAM are.
Motherboard:  ASUS M4A785-M
Processor:  AMD Athlon II X2 245 Speed 2900Mhz
RAM: 8GB

The bios on the Motherboard is up to date.

Thanks,
Charles

I believe setting `vm.pmap.pti=0` at the boot prompt will solve your boot loop issue. Once your system is booted, you can set that permanently via the GUI or via manual edit of /boot/loader.conf.local

On the menu I pressed 3 for Escape to loader prompt and entered vm.pmap.pti=0 and it said not found.
I even tried menu 6 Configure Boot Options but nothing is there about vm.pmap.pti=0

Oh, I posted this in the wrong thread, see below.

@bimmeldriver yes please, installer may hang but CTRL+C should work around it ok.

So this is the preliminary amd64 ISO for 19.1.4. It can be used in production and upgrades normally...

https://pkg.opnsense.org/FreeBSD:11:amd64/snapshots/OPNsense-19.1.4-OpenSSL-dvd-amd64.iso.bz2

All images, checksums and the announcement follow next week when we will have wrapped up testing image integrity for all other images (it takes about 2 days in total to do that).


Cheers,
Franco

First I want to say thanks for all the hard work put into this outstanding software!

I downloaded the ISO and burned it to a DVD.  When I boot from the DVD, it reboots over and over.  It does load the Kernel modules and then shows Booting.  The screen refreshes and looks like it is starting up and then that is when the computer restarts.  I even tried the Safe Mode and that didn't help.

The DVD Reader isn't that old while my Motherboard, Processor and RAM are.
Motherboard:  ASUS M4A785-M
Processor:  AMD Athlon II X2 245 Speed 2900Mhz
RAM: 8GB

The bios on the Motherboard is up to date.

Thanks,
Charles