Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - emiletenhagen

#1
19.7 Legacy Series / Re: GEOIP not updating
September 17, 2019, 11:41:13 AM
Hello, I checked today and the GeoIP is updating.

In /usr/local/share/GeoIP/alias and /var/db/aliastables the files with regard to GEOIP have now the date of yesterday.

Rgds.
#2
19.7 Legacy Series / Re: (Solved) Firewall not rebooting
September 11, 2019, 04:41:32 PM
Sorry to say, but the system is rebooting now.

Rgds
#3
19.7 Legacy Series / Re: (Solved) Firewall not rebooting
September 11, 2019, 04:27:23 PM
Updated to Opnsense 19.7.4 which updates zabbixagent to 4.0.12 and the problem is solved.

Thanks for the update!!
#4
Hello France,

I understand completely, but maybe because I have not read it or found it. What would be the best option to report on bugs for let's say that the GEOIP is not renewing?

Rgds.
#5
The problem was already known by Zabbix.

https://support.zabbix.com/browse/ZBX-16460

Rgds.
#6
19.7 Legacy Series / Re: Where do the bug reports go?
August 22, 2019, 02:58:57 PM
Thanks for your reply.

I was concerned that reports from within opnsense where not picked up because you don't see anything back.

Rgds.
#7
19.7 Legacy Series / Re: Firewall not rebooting
August 22, 2019, 02:56:49 PM
I'm not sure, depends on who compiled the zabbix_agentd. If opnsense just copies the available lts version to their repo your correct.

I did some extra testing by downloading the agent version from the opnsense repo from 19.1 :https://pkg.opnsense.org/FreeBSD:11:amd64/19.1/latest/All/ , installed this one and it works.

This is version 4.0.9.

I will report this to Zabbix.
#8
19.7 Legacy Series / Re: Firewall not rebooting
August 21, 2019, 04:38:15 PM
I did try the following to find a solution, but unfortunately it did not work.

What I found was that the command from the system does not stop the processes, but only terminates them.

   77820   root   45   0   1034m   3132k   wait   1   0:00   0.00%   /bin/sh -c /usr/local/etc/rc.d/zabbix_agentd stop; /usr/bin/killall zabbix_agentd; exit 0
   12057   root   52   0   1034m   3408k   wait   0   0:00   0.00%   /bin/sh /usr/local/etc/rc.d/zabbix_agentd stop
   34983   zabbix   20   0   15m   6m   nanslp   1   0:00   0.00%   zabbix_agentd: collector #1 [terminated] (zabbix_agentd)
   86178   zabbix   20   0   15m   6m   wait   0   0:00   0.00%   /usr/local/sbin/zabbix_agentd -c /usr/local/etc/zabbix_agentd.conf
   12963   zabbix   20   0   15m   6m   nanslp   1   0:00   0.00%   zabbix_agentd: active checks #1 [terminated] (zabbix_agentd)
   11863   zabbix   20   0   15m   6m   nanslp   1   0:00   0.00%   zabbix_agentd: listener #3 [terminated] (zabbix_agentd)
   75731   zabbix   20   0   15m   6m   nanslp   0   0:00   0.00%   zabbix_agentd: listener #2 [terminated] (zabbix_agentd)
   35366   zabbix   20   0   15m   6m   nanslp   1   0:00   0.00%   zabbix_agentd: listener #1 [terminated] (zabbix_agentd)

In the zabbix_agentd.log you see a SIGTERM for the process and the sub-processes are terminated, as shown.
When the sub-processes (status nanslp) are terminated with kill -9 the main process is stopped.

I tried it with a newer version of the zabbix agent but this does not work either.

Now each time when there is a configuration change I have to kill the procceses manually before I can apply.

#9
19.7 Legacy Series / (Solved) Firewall not rebooting
August 20, 2019, 09:34:42 AM
After upgrading to 19.7.2 with zabbix agent installed the system will not reboot untill the zabbix_agentd pid is killed.
#10
19.7 Legacy Series / (Solved) GEOIP not updating
August 09, 2019, 12:04:55 PM
I noticed with comparing the download from https://geolite.maxmind.com/download/geoip/database/GeoLite2-Country-CSV.zip that there are ip ranges which are not in the pftables of the alias of geoip.

Comparing the dates on the system and the file, the downloaded is newer.
Running manually alias.py or geoip.py provides the error: file name to long.
#11
What does happen with the bugreport I did send in via: System > Firmware > Reporter?

Rgds
Emile
#12
Hello,

I have a problem to get port forwording working.

I want to nat port ssh to an internal system but it's not working.
I see in the firewall logging that the request is forwarded to the internal system and see the request on the internal system. The internal system does send an acknowledge but it is not received at the client.