Messages

1

General Discussion / System freeze troubleshooting

« on: April 26, 2023, 07:51:10 pm »

Every couple of months (not particularly regularly) my whole OPNsense box (dedicated machine) locks up and needs a physical power cycle. Nothing in the logs that stands out when the freeze occurs. Any tips on how to begin troubleshooting this and figuring out if it's a hardware or software issue? Will scheduling a system reboot weekly help?

2

General Discussion / Re: Connection dropped from LAN devices

« on: December 05, 2022, 10:12:23 pm »

For anyone else who gets a similar issue, disconnect every device and connect them back one by one, probably a local device causing issues

3

General Discussion / Re: Bandwidth: LAN devices get it first come, first served (can hog everything)?

« on: December 05, 2022, 02:11:26 pm »

I think that's how it works by default unless you set up explicit traffic shaping rules https://docs.opnsense.org/manual/shaping.html

4

General Discussion / Connection dropped from LAN devices

« on: December 05, 2022, 02:10:30 pm »

Devices on the network seem to be having their connections dropped randomly (maybe every ~10 ish minutes) for about 10 seconds before reconnecting, attached a screenshot of continuous pings from a device.

Any ideas what the issue could be? I tried pings from the OPNsense box itself at the same time as well which does not seem to show the issue..

5

Hardware and Performance / Debugging Random Reboots

« on: October 14, 2021, 03:03:37 pm »

My OPNsense box has recently been rebooting at seemingly random times, any ideas on how to go about troubleshooting? There's nothing I could find in the general logs, I've attached the logs from when it booted, anything I should look for in /var/log/? Any recommended tools to check if it's a hardware failure for the memory or disk?

Version details:
OPNsense 21.7.3_3-amd64
FreeBSD 12.1-RELEASE-p20-HBSD
OpenSSL 1.1.1l 24 Aug 2021

Hardware specs:
Intel Celeron J3160 Quad Core Mini PC
2 GB RAM
32GB SSD
4x Intel I211 Gigabit LAN ports

Code: [Select]

2021-10-14T12:16:08 kernel OK
2021-10-14T12:16:08 kernel done.
2021-10-14T12:16:07 kernel done.
2021-10-14T12:16:07 kernel ..
2021-10-14T12:16:06 kernel ...
2021-10-14T12:16:06 kernel done.
2021-10-14T12:16:06 opnsense[38958] /usr/local/etc/rc.routing_configure: Removing static route for monitor xxx.xxx.xxx.xxx via xxx.xxx.xxx.xxx
2021-10-14T12:16:06 opnsense[38958] plugins_configure monitor (execute task : dpinger_configure_do(1))
2021-10-14T12:16:06 kernel done.
2021-10-14T12:16:06 opnsense[38958] plugins_configure monitor (1)
2021-10-14T12:16:06 opnsense[38958] /usr/local/etc/rc.routing_configure: ROUTING: keeping current default gateway 'xxx.xxx.xxx.xxx'
2021-10-14T12:16:06 opnsense[38958] /usr/local/etc/rc.routing_configure: ROUTING: setting IPv4 default route to xxx.xxx.xxx.xxx
2021-10-14T12:16:06 opnsense[38958] /usr/local/etc/rc.routing_configure: ROUTING: IPv4 default gateway set to wan
2021-10-14T12:16:06 opnsense[38958] /usr/local/etc/rc.routing_configure: ROUTING: entering configure using defaults
2021-10-14T12:16:05 syslog-ng[41433] syslog-ng starting up; version='3.34.1'
2021-10-14T12:16:05 kernel .
2021-10-14T12:16:05 syslog-ng[13398] syslog-ng shutting down; version='3.34.1'
2021-10-14T12:16:05 kernel config_aqm Unable to configure flowset, flowset busy!
2021-10-14T12:16:05 kernel config_aqm Unable to configure flowset, flowset busy!
2021-10-14T12:16:05 kernel Bump sched buckets to 256 (was 0)
2021-10-14T12:16:05 kernel Bump sched buckets to 256 (was 0)
2021-10-14T12:16:05 kernel load_dn_aqm dn_aqm PIE loaded
2021-10-14T12:16:05 kernel load_dn_aqm dn_aqm CODEL loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched FQ_PIE loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched FQ_CODEL loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched PRIO loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched WF2Q+ loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched RR loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched QFQ loaded
2021-10-14T12:16:05 kernel load_dn_sched dn_sched FIFO loaded
2021-10-14T12:16:05 kernel ipfw2 (+ipv6) initialized, divert loadable, nat loadable, default to accept, logging disabled
2021-10-14T12:16:04 /flowd_aggregate.py[4479] startup, check database.
2021-10-14T12:16:03 kernel WARNING: attempt to domain_add(netgraph) after domainfinalize()
2021-10-14T12:16:02 kernel tun0: changing name to 'wg0'
2021-10-14T12:16:02 kernel tun0: link state changed to UP
2021-10-14T12:16:00 kernel OK
2021-10-14T12:15:58 opnsense[66405] /usr/local/etc/rc.routing_configure: Removing static route for monitor xxx.xxx.xxx.xxx via xxx.xxx.xxx.xxx
2021-10-14T12:15:58 opnsense[66405] plugins_configure monitor (execute task : dpinger_configure_do(1))
2021-10-14T12:15:58 opnsense[66405] plugins_configure monitor (1)
2021-10-14T12:15:58 opnsense[66405] /usr/local/etc/rc.routing_configure: ROUTING: keeping current default gateway 'xxx.xxx.xxx.xxx'
2021-10-14T12:15:58 opnsense[66405] /usr/local/etc/rc.routing_configure: ROUTING: setting IPv4 default route to xxx.xxx.xxx.xxx
2021-10-14T12:15:58 opnsense[66405] /usr/local/etc/rc.routing_configure: ROUTING: IPv4 default gateway set to wan
2021-10-14T12:15:58 opnsense[66405] /usr/local/etc/rc.routing_configure: ROUTING: entering configure using defaults
2021-10-14T12:15:58 kernel OK
2021-10-14T12:15:57 opnsense[79604] plugins_configure newwanip (execute task : webgui_configure_do(,wan))
2021-10-14T12:15:57 opnsense[79604] plugins_configure newwanip (execute task : vxlan_configure_interface())
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (execute task : unbound_configure_do(,wan))
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (execute task : openssh_configure_do(,wan))
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (execute task : opendns_configure_do())
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (execute task : ntpd_configure_do())
2021-10-14T12:15:55 opnsense[79604] /usr/local/etc/rc.newwanip: Dynamic DNS: (Success) IP Address Updated Successfully!
2021-10-14T12:15:55 opnsense[79604] /usr/local/etc/rc.newwanip: Dynamic DNS: updating cache file /var/cache/dyndns_duckdns.org_0.cache: xxx.xxx.xxx.xxx
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (execute task : dyndns_configure_do(,wan))
2021-10-14T12:15:55 opnsense[79604] plugins_configure newwanip (,wan)
2021-10-14T12:15:55 opnsense[79604] plugins_configure vpn (execute task : openvpn_configure_do(,wan))
2021-10-14T12:15:55 opnsense[79604] plugins_configure vpn (execute task : ipsec_configure_do(,wan))
2021-10-14T12:15:55 opnsense[79604] plugins_configure vpn (,wan)
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: Removing static route for monitor xxx.xxx.xxx.xxx via xxx.xxx.xxx.xxx
2021-10-14T12:15:53 opnsense[79604] plugins_configure monitor (execute task : dpinger_configure_do())
2021-10-14T12:15:53 opnsense[79604] plugins_configure monitor ()
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: ROUTING: keeping current default gateway 'xxx.xxx.xxx.xxx'
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: ROUTING: setting IPv4 default route to xxx.xxx.xxx.xxx
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: ROUTING: IPv4 default gateway set to wan
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: ROUTING: entering configure using 'wan'
2021-10-14T12:15:53 opnsense[79604] plugins_configure hosts (execute task : unbound_hosts_generate())
2021-10-14T12:15:53 opnsense[79604] plugins_configure hosts (execute task : dnsmasq_hosts_generate())
2021-10-14T12:15:53 opnsense[79604] plugins_configure hosts ()
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: On (IP address: xxx.xxx.xxx.xxx) (interface: WAN[wan]) (real interface: igb1).
2021-10-14T12:15:53 opnsense[79604] /usr/local/etc/rc.newwanip: IPv4 renewal is starting on 'igb1'
2021-10-14T12:15:52 kernel done.
2021-10-14T12:15:52 syslog-ng[13398] syslog-ng starting up; version='3.34.1'
2021-10-14T12:15:52 syslogd kernel boot file is /boot/kernel/kernel
2021-10-14T12:15:52 syslogd exiting on signal 15
2021-10-14T12:15:51 kernel done.
2021-10-14T12:15:51 kernel done.
2021-10-14T12:15:51 kernel done.
2021-10-14T12:15:48 opnsense[51388] plugins_configure bootup (execute task : unbound_configure_do(1))
2021-10-14T12:15:48 kernel done.
2021-10-14T12:15:48 opnsense[51388] plugins_configure bootup (execute task : opendns_configure_do(1))
2021-10-14T12:15:48 kernel done.
2021-10-14T12:15:48 opnsense[51388] plugins_configure bootup (execute task : ntpd_configure_do(1))
2021-10-14T12:15:48 opnsense[51388] /usr/local/etc/rc.bootup: miniupnpd: Starting service on interface: lan
2021-10-14T12:15:48 kernel done.
2021-10-14T12:15:48 opnsense[51388] plugins_configure bootup (execute task : miniupnpd_configure_do(1))
2021-10-14T12:15:47 opnsense[51388] /usr/local/etc/rc.bootup: Dynamic DNS: (Success) IP Address Updated Successfully!
2021-10-14T12:15:47 opnsense[51388] /usr/local/etc/rc.bootup: Dynamic DNS: updating cache file /var/cache/dyndns_duckdns.org_0.cache: xxx.xxx.xxx.xxx
2021-10-14T12:15:46 opnsense[51388] plugins_configure bootup (execute task : dyndns_configure_do(1))
2021-10-14T12:15:46 opnsense[51388] plugins_configure bootup (1)
2021-10-14T12:15:46 opnsense[51388] /usr/local/etc/rc.bootup: Resyncing OpenVPN instances.
2021-10-14T12:15:46 opnsense[51388] plugins_configure vpn (execute task : openvpn_configure_do(1))
2021-10-14T12:15:44 opnsense[51388] plugins_configure vpn (execute task : ipsec_configure_do(1))
2021-10-14T12:15:44 kernel done.
2021-10-14T12:15:44 opnsense[51388] plugins_configure vpn (1)
2021-10-14T12:15:44 kernel done.
2021-10-14T12:15:44 kernel ..
2021-10-14T12:15:42 kernel .
2021-10-14T12:15:42 kernel ..
2021-10-14T12:15:42 kernel done.
2021-10-14T12:15:42 opnsense[51388] /usr/local/etc/rc.bootup: Removing static route for monitor xxx.xxx.xxx.xxx via xxx.xxx.xxx.xxx
2021-10-14T12:15:42 opnsense[51388] plugins_configure monitor (execute task : dpinger_configure_do(1))
2021-10-14T12:15:42 opnsense[51388] plugins_configure monitor (1)
2021-10-14T12:15:42 kernel done.
2021-10-14T12:15:40 opnsense[51388] plugins_configure dns (execute task : unbound_configure_do(1))
2021-10-14T12:15:40 opnsense[51388] plugins_configure dns (execute task : dnsmasq_configure_do(1))
2021-10-14T12:15:40 opnsense[51388] plugins_configure dns (1)
2021-10-14T12:15:40 opnsense[51388] plugins_configure dhcrelay (execute task : dhcpd_dhcrelay_configure(1))
2021-10-14T12:15:40 opnsense[51388] plugins_configure dhcrelay (1)
2021-10-14T12:15:40 kernel done.
2021-10-14T12:15:39 opnsense[51388] plugins_configure dhcp (execute task : dhcpd_dhcp_configure(1))
2021-10-14T12:15:39 kernel done.
2021-10-14T12:15:39 opnsense[51388] plugins_configure dhcp (1)
2021-10-14T12:15:39 opnsense[51388] plugins_configure hosts (execute task : unbound_hosts_generate())
2021-10-14T12:15:39 opnsense[51388] plugins_configure hosts (execute task : dnsmasq_hosts_generate())
2021-10-14T12:15:39 kernel done.
2021-10-14T12:15:39 opnsense[51388] plugins_configure hosts ()
2021-10-14T12:15:39 opnsense[51388] /usr/local/etc/rc.bootup: ROUTING: keeping current default gateway 'xxx.xxx.xxx.xxx'
2021-10-14T12:15:39 opnsense[51388] /usr/local/etc/rc.bootup: ROUTING: setting IPv4 default route to xxx.xxx.xxx.xxx
2021-10-14T12:15:39 opnsense[51388] /usr/local/etc/rc.bootup: ROUTING: IPv4 default gateway set to wan
2021-10-14T12:15:39 kernel done.
2021-10-14T12:15:39 opnsense[51388] /usr/local/etc/rc.bootup: ROUTING: entering configure using defaults
2021-10-14T12:15:39 opnsense[51388] plugins_configure early (execute task : webgui_configure_do(1))
2021-10-14T12:15:39 opnsense[51388] plugins_configure early (execute task : unbound_cache_flush(1))
2021-10-14T12:15:39 opnsense[51388] plugins_configure early (execute task : openssh_configure_do(1))
2021-10-14T12:15:39 kernel pflog0: permanently promiscuous mode enabled
2021-10-14T12:15:39 kernel
2021-10-14T12:15:39 opnsense[51388] plugins_configure early (1)
2021-10-14T12:15:39 kernel done.
2021-10-14T12:15:38 kernel ..
2021-10-14T12:15:37 kernel ...
2021-10-14T12:15:37 opnsense[51388] plugins_configure vxlan_prepare (execute task : vxlan_configure_interface(1))
2021-10-14T12:15:37 opnsense[51388] plugins_configure vxlan_prepare (1)
2021-10-14T12:15:37 opnsense[51388] plugins_configure ipsec_prepare (execute task : ipsec_configure_vti(1))
2021-10-14T12:15:37 opnsense[51388] plugins_configure ipsec_prepare (1)
2021-10-14T12:15:37 kernel done.
2021-10-14T12:15:37 opnsense[51388] /usr/local/etc/rc.bootup: The command '/sbin/ifconfig 'wg0' -staticarp' returned exit code '1', the output was 'ifconfig: interface wg0 does not exist'
2021-10-14T12:15:37 opnsense[51388] /usr/local/etc/rc.bootup: The command '/sbin/ifconfig 'wg0' inet6 -accept_rtadv' returned exit code '1', the output was 'ifconfig: interface wg0 does not exist'
2021-10-14T12:15:37 opnsense[51388] plugins_configure openvpn_prepare (execute task : openvpn_prepare(,wg0))
2021-10-14T12:15:37 opnsense[51388] plugins_configure openvpn_prepare (,wg0)
2021-10-14T12:15:37 dhclient[125] bound to xxx.xxx.xxx.xxx -- renewal in 21600 seconds.
2021-10-14T12:15:37 opnsense[59996] /usr/local/etc/rc.newwanip: IP renewal deferred during boot on 'igb1'
2021-10-14T12:15:36 dhclient[98023] Creating resolv.conf
2021-10-14T12:15:36 dhclient[65543] route add default xxx.xxx.xxx.xxx
2021-10-14T12:15:36 dhclient[79812] New Routers (igb1): xxx.xxx.xxx.xxx
2021-10-14T12:15:36 dhclient[46712] New Broadcast Address (igb1): xxx.xxx.xxx.xxx
2021-10-14T12:15:36 dhclient[36170] New Subnet Mask (igb1): 255.255.255.224
2021-10-14T12:15:36 dhclient[15778] New IP Address (igb1): xxx.xxx.xxx.xxx
2021-10-14T12:15:36 dhclient[125] DHCPACK from xxx.xxx.xxx.xxx
2021-10-14T12:15:36 dhclient[125] DHCPREQUEST on igb1 to 255.255.255.255 port 67
2021-10-14T12:15:36 kernel igb1: link state changed to UP
2021-10-14T12:15:35 kernel igb0: link state changed to UP
2021-10-14T12:15:31 kernel igb1: link state changed to DOWN
2021-10-14T12:15:31 kernel
2021-10-14T12:15:31 kernel igb0: link state changed to DOWN
2021-10-14T12:15:31 kernel
2021-10-14T12:15:30 opnsense[51388] plugins_configure openvpn_prepare (execute task : openvpn_prepare(1))
2021-10-14T12:15:30 opnsense[51388] plugins_configure openvpn_prepare (1)
2021-10-14T12:15:30 opnsense[51388] plugins_configure loopback_prepare (execute task : loopback_configure_interface(1))
2021-10-14T12:15:30 kernel done.
2021-10-14T12:15:30 opnsense[51388] plugins_configure loopback_prepare (1)
2021-10-14T12:15:30 kernel done.
2021-10-14T12:15:30 syslog-ng[37672] syslog-ng starting up; version='3.34.1'
2021-10-14T12:15:30 kernel coretemp0: <CPU On-Die Thermal Sensors> on cpu0
2021-10-14T12:15:30 kernel aesni0: <AES-CBC,AES-CCM,AES-GCM,AES-ICM,AES-XTS> on motherboard
2021-10-14T12:15:30 kernel lo0: link state changed to UP
2021-10-14T12:15:30 kernel igb1: link state changed to UP
2021-10-14T12:15:30 kernel igb0: link state changed to UP
2021-10-14T12:15:30 kernel run0: MAC/BBP RT3070 (rev 0x0201), RF RT3020 (MIMO 1T1R), address 00:25:d3:69:e0:78
2021-10-14T12:15:30 kernel run0: <1.0> on usbus0
2021-10-14T12:15:30 kernel run0 on uhub0
2021-10-14T12:15:30 kernel ugen0.2: <Ralink 802.11 n WLAN> at usbus0
2021-10-14T12:15:30 kernel uhub0: 13 ports with 13 removable, self powered
2021-10-14T12:15:30 kernel WARNING: /mnt: reload pending error: blocks 112 files 0
2021-10-14T12:15:30 kernel WARNING: /mnt: reload pending error: blocks 112 files 0
2021-10-14T12:15:30 kernel WARNING: /mnt: mount pending error: blocks 112 files 0
2021-10-14T12:15:30 kernel WARNING: /mnt was not properly dismounted
2021-10-14T12:15:30 kernel uhub0: <0x8086 XHCI root HUB, class 9/0, rev 3.00/1.00, addr 1> on usbus0
2021-10-14T12:15:30 kernel Trying to mount root from ufs:/dev/gpt/rootfs [rw,noatime]...
2021-10-14T12:15:30 kernel ugen0.1: <0x8086 XHCI root HUB> at usbus0
2021-10-14T12:15:30 kernel pcm2: <Intel (0x2883) (HDMI/DP 8ch)> at nid 6 on hdaa0
2021-10-14T12:15:30 kernel pcm1: <Intel (0x2883) (HDMI/DP 8ch)> at nid 5 on hdaa0
2021-10-14T12:15:30 kernel pcm0: <Intel (0x2883) (HDMI/DP 8ch)> at nid 7 on hdaa0
2021-10-14T12:15:30 kernel hdaa0: <Intel (0x2883) Audio Function Group> at nid 1 on hdacc0
2021-10-14T12:15:30 kernel ada0: 30533MB (62533296 512 byte sectors)
2021-10-14T12:15:30 kernel ada0: Command Queueing enabled
2021-10-14T12:15:30 kernel ada0: 600.000MB/s transfers (SATA 3.x, UDMA6, PIO 8192bytes)
2021-10-14T12:15:30 kernel ada0: Serial Number DA5A07850B0802252365
2021-10-14T12:15:30 kernel ada0: <SATA SSD SBFM91.2> ACS-4 ATA SATA 3.x device
2021-10-14T12:15:30 kernel ada0 at ahcich1 bus 0 scbus1 target 0 lun 0
2021-10-14T12:15:30 kernel hdacc0: <Intel (0x2883) HDA CODEC> at cad 2 on hdac0
2021-10-14T12:15:30 kernel Timecounters tick every 1.000 msec
2021-10-14T12:15:30 kernel est0: <Enhanced SpeedStep Frequency Control> on cpu0
2021-10-14T12:15:30 kernel uart0: console (115200,n,8,1)
2021-10-14T12:15:30 kernel uart0: <16550 or compatible> port 0x3f8-0x3ff irq 4 flags 0x10 on acpi0
2021-10-14T12:15:30 kernel acpi_tz0: <Thermal Zone> on acpi0
2021-10-14T12:15:30 kernel acpi_button0: <Sleep Button> on acpi0
2021-10-14T12:15:30 kernel isa0: <ISA bus> on isab0
2021-10-14T12:15:30 kernel isab0: <PCI-ISA bridge> at device 31.0 on pci0
2021-10-14T12:15:30 kernel igb3: netmap queues/slots: TX 2/1024, RX 2/1024
2021-10-14T12:15:30 kernel igb3: Ethernet address:
2021-10-14T12:15:30 kernel igb3: Using MSI-X interrupts with 3 vectors
2021-10-14T12:15:30 kernel igb3: Using 2 RX queues 2 TX queues
2021-10-14T12:15:30 kernel igb3: Using 1024 TX descriptors and 1024 RX descriptors
2021-10-14T12:15:30 kernel igb3: <Intel(R) I211 (Copper)> port 0xb000-0xb01f mem 0xb1200000-0xb121ffff,0xb1220000-0xb1223fff irq 19 at device 0.0 on pci4
2021-10-14T12:15:30 kernel pci4: <ACPI PCI bus> on pcib4
2021-10-14T12:15:30 kernel pcib4: <ACPI PCI-PCI bridge> irq 19 at device 28.3 on pci0
2021-10-14T12:15:30 kernel igb2: netmap queues/slots: TX 2/1024, RX 2/1024
2021-10-14T12:15:30 kernel igb2: Ethernet address:
2021-10-14T12:15:30 kernel igb2: Using MSI-X interrupts with 3 vectors
2021-10-14T12:15:30 kernel igb2: Using 2 RX queues 2 TX queues
2021-10-14T12:15:30 kernel igb2: Using 1024 TX descriptors and 1024 RX descriptors
2021-10-14T12:15:30 kernel igb2: <Intel(R) I211 (Copper)> port 0xc000-0xc01f mem 0xb1300000-0xb131ffff,0xb1320000-0xb1323fff irq 18 at device 0.0 on pci3
2021-10-14T12:15:30 kernel pci3: <ACPI PCI bus> on pcib3
2021-10-14T12:15:30 kernel pcib3: <ACPI PCI-PCI bridge> irq 18 at device 28.2 on pci0
2021-10-14T12:15:30 kernel igb1: netmap queues/slots: TX 2/1024, RX 2/1024
2021-10-14T12:15:30 kernel igb1: Ethernet address:
2021-10-14T12:15:30 kernel igb1: Using MSI-X interrupts with 3 vectors
2021-10-14T12:15:30 kernel igb1: Using 2 RX queues 2 TX queues
2021-10-14T12:15:30 kernel igb1: Using 1024 TX descriptors and 1024 RX descriptors
2021-10-14T12:15:30 kernel igb1: <Intel(R) I211 (Copper)> port 0xd000-0xd01f mem 0xb1400000-0xb141ffff,0xb1420000-0xb1423fff irq 17 at device 0.0 on pci2
2021-10-14T12:15:30 kernel pci2: <ACPI PCI bus> on pcib2
2021-10-14T12:15:30 kernel pcib2: [GIANT-LOCKED]
2021-10-14T12:15:30 kernel pcib2: <ACPI PCI-PCI bridge> irq 17 at device 28.1 on pci0
2021-10-14T12:15:30 kernel igb0: netmap queues/slots: TX 2/1024, RX 2/1024
2021-10-14T12:15:30 kernel igb0: Ethernet address:
2021-10-14T12:15:30 kernel igb0: Using MSI-X interrupts with 3 vectors
2021-10-14T12:15:30 kernel igb0: Using 2 RX queues 2 TX queues
2021-10-14T12:15:30 kernel igb0: Using 1024 TX descriptors and 1024 RX descriptors
2021-10-14T12:15:30 kernel igb0: <Intel(R) I211 (Copper)> port 0xe000-0xe01f mem 0xb1500000-0xb151ffff,0xb1520000-0xb1523fff irq 16 at device 0.0 on pci1
2021-10-14T12:15:30 kernel pci1: <ACPI PCI bus> on pcib1
2021-10-14T12:15:30 kernel pcib1: <ACPI PCI-PCI bridge> irq 16 at device 28.0 on pci0
2021-10-14T12:15:30 kernel hdac0: <Intel (0x2284) HDA Controller> mem 0xb1610000-0xb1613fff irq 22 at device 27.0 on pci0
2021-10-14T12:15:30 kernel pci0: <encrypt/decrypt> at device 26.0 (no driver attached)
2021-10-14T12:15:30 kernel usbus0: 5.0Gbps Super Speed USB v3.0
2021-10-14T12:15:30 kernel usbus0 on xhci0
2021-10-14T12:15:30 kernel xhci_interrupt: host controller halted
2021-10-14T12:15:30 kernel usbus0: waiting for BIOS to give up control
2021-10-14T12:15:30 kernel xhci0: 32 bytes context size, 64-bit DMA
2021-10-14T12:15:30 kernel xhci0: <Intel Braswell USB 3.0 controller> mem 0xb1600000-0xb160ffff irq 20 at device 20.0 on pci0
2021-10-14T12:15:30 kernel ahcich1: <AHCI channel> at channel 1 on ahci0
2021-10-14T12:15:30 kernel ahcich0: <AHCI channel> at channel 0 on ahci0
2021-10-14T12:15:30 kernel ahci0: AHCI v1.31 with 2 6Gbps ports, Port Multiplier not supported
2021-10-14T12:15:30 kernel ahci0: <AHCI SATA controller> port 0xf060-0xf07f mem 0xb1615000-0xb16157ff irq 19 at device 19.0 on pci0
2021-10-14T12:15:30 kernel vgapci0: Boot video device
2021-10-14T12:15:30 kernel vgapci0: <VGA-compatible display> port 0xf000-0xf03f mem 0xb0000000-0xb0ffffff,0xc0000000-0xcfffffff irq 16 at device 2.0 on pci0
2021-10-14T12:15:30 kernel pci0: <ACPI PCI bus> on pcib0
2021-10-14T12:15:30 kernel pcib0: <ACPI Host-PCI bridge> port 0xcf8-0xcff on acpi0
2021-10-14T12:15:30 kernel acpi_timer0: <24-bit timer at 3.579545MHz> port 0x408-0x40b on acpi0
2021-10-14T12:15:30 kernel Timecounter "ACPI-safe" frequency 3579545 Hz quality 850
2021-10-14T12:15:30 kernel Event timer "i8254" frequency 1193182 Hz quality 100
2021-10-14T12:15:30 kernel Timecounter "i8254" frequency 1193182 Hz quality 0
2021-10-14T12:15:30 kernel attimer0: <AT timer> port 0x40-0x43,0x50-0x53 irq 0 on acpi0
2021-10-14T12:15:30 kernel Event timer "RTC" frequency 32768 Hz quality 0
2021-10-14T12:15:30 kernel atrtc0: registered as a time-of-day clock, resolution 1.000000s
2021-10-14T12:15:30 kernel atrtc0: Warning: Couldn't map I/O.
2021-10-14T12:15:30 kernel atrtc0: <AT realtime clock> port 0x70-0x77 on acpi0
2021-10-14T12:15:30 kernel cpu0: <ACPI CPU> on acpi0
2021-10-14T12:15:30 kernel unknown: I/O range not supported
2021-10-14T12:15:30 kernel acpi0: Power Button (fixed)
2021-10-14T12:15:30 kernel acpi0: <ALASKA A M I > on motherboard
2021-10-14T12:15:30 kernel cryptosoft0: <software crypto> on motherboard
2021-10-14T12:15:30 kernel efirtc0: registered as a time-of-day clock, resolution 1.000000s
2021-10-14T12:15:30 kernel efirtc0: <EFI Realtime Clock> on motherboard
2021-10-14T12:15:30 kernel nexus0
2021-10-14T12:15:30 kernel [ath_hal] loaded
2021-10-14T12:15:30 kernel 000.000054 [4344] netmap_init netmap: loaded module
2021-10-14T12:15:30 kernel random: fast provider: "Intel Secure Key RNG"
2021-10-14T12:15:30 kernel random: registering fast source Intel Secure Key RNG
2021-10-14T12:15:30 kernel module_register_init: MOD_LOAD (vesa, 0xffffffff812907f0, 0) error 19
2021-10-14T12:15:30 kernel kbd0 at kbdmux0
2021-10-14T12:15:30 kernel random: entropy device external interface
2021-10-14T12:15:30 kernel wlan: mac acl policy registered
2021-10-14T12:15:30 kernel Timecounter "TSC" frequency 1600053280 Hz quality 1000
2021-10-14T12:15:30 kernel Launching APs: 3 1 2
2021-10-14T12:15:30 kernel ioapic0 <Version 2.0> irqs 0-114 on motherboard
2021-10-14T12:15:30 kernel random: unblocking device.
2021-10-14T12:15:30 kernel FreeBSD/SMP: 1 package(s) x 4 core(s)
2021-10-14T12:15:30 kernel FreeBSD/SMP: Multiprocessor System Detected: 4 CPUs
2021-10-14T12:15:30 kernel WARNING: L1 data cache covers fewer APIC IDs than a core (0 < 1)
2021-10-14T12:15:30 kernel ACPI APIC Table: <ALASKA A M I >
2021-10-14T12:15:30 kernel Event timer "LAPIC" quality 600
2021-10-14T12:15:30 kernel avail memory = 1947013120 (1856 MB)
2021-10-14T12:15:30 kernel real memory = 2147483648 (2048 MB)
2021-10-14T12:15:30 kernel TSC: P-state invariant, performance statistics
2021-10-14T12:15:30 kernel VT-x: PAT,HLT,MTF,PAUSE,EPT,UG,VPID
2021-10-14T12:15:30 kernel Structured Extended Features3=0xc000000<IBPB,STIBP>
2021-10-14T12:15:30 kernel Structured Extended Features=0x2282<TSCADJ,SMEP,ERMS,NFPUSG>
2021-10-14T12:15:30 kernel AMD Features2=0x101<LAHF,Prefetch>
2021-10-14T12:15:30 kernel AMD Features=0x28100800<SYSCALL,NX,RDTSCP,LM>
2021-10-14T12:15:30 kernel Features2=0x43d8e3bf<SSE3,PCLMULQDQ,DTES64,MON,DS_CPL,VMX,EST,TM2,SSSE3,CX16,xTPR,PDCM,SSE4.1,SSE4.2,MOVBE,POPCNT,TSCDLT,AESNI,RDRAND>
2021-10-14T12:15:30 kernel Features=0xbfebfbff<FPU,VME,DE,PSE,TSC,MSR,PAE,MCE,CX8,APIC,SEP,MTRR,PGE,MCA,CMOV,PAT,PSE36,CLFLUSH,DTS,ACPI,MMX,FXSR,SSE,SSE2,SS,HTT,TM,PBE>
2021-10-14T12:15:30 kernel Origin="GenuineIntel" Id=0x406c4 Family=0x6 Model=0x4c Stepping=4
2021-10-14T12:15:30 kernel CPU: Intel(R) Celeron(R) CPU J3160 @ 1.60GHz (1600.05-MHz K8-class CPU)
2021-10-14T12:15:30 kernel HardenedBSD: initialize and check features (__HardenedBSD_version 1200059 __FreeBSD_version 1201000).
2021-10-14T12:15:30 kernel VT(vga): resolution 640x480
2021-10-14T12:15:30 kernel FreeBSD clang version 8.0.1 (tags/RELEASE_801/final 366581) (based on LLVM 8.0.1)
2021-10-14T12:15:30 kernel root@sensey:/usr/obj/usr/src/amd64.amd64/sys/SMP amd64
2021-10-14T12:15:30 kernel FreeBSD 12.1-RELEASE-p20-HBSD #0 e4fc5be9c3d(stable/21.7)-dirty: Thu Sep 2 10:30:36 CEST 2021
2021-10-14T12:15:30 kernel FreeBSD is a registered trademark of The FreeBSD Foundation.
2021-10-14T12:15:30 kernel The Regents of the University of California. All rights reserved.
2021-10-14T12:15:30 kernel Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994
2021-10-14T12:15:30 kernel Copyright (c) 1992-2019 The FreeBSD Project.
2021-10-14T12:15:30 kernel Copyright (c) 2013-2019 The HardenedBSD Project.
2021-10-14T12:15:30 kernel ---<<BOOT>>---
2021-10-14T12:15:30 syslogd kernel boot file is /boot/kernel/kernel
2021-10-14T11:45:21 dhclient[79295] bound to xxx.xxx.xxx.xxx -- renewal in 21600 seconds.
2021-10-14T11:45:21 dhclient[64545] Creating resolv.conf
2021-10-14T11:45:21 dhclient[79295] DHCPACK from xxx.xxx.xxx.xxx
2021-10-14T11:45:21 dhclient[79295] DHCPREQUEST on igb1 to xxx.xxx.xxx.xxx port 67
2021-10-14T09:47:31 /flowd_aggregate.py[22728] vacuum done
2021-10-14T09:47:31 /flowd_aggregate.py[22728] vacuum interface_086400.sqlite


6

General Discussion / Re: DNS server used by OPNsense itself

« on: January 23, 2021, 07:39:12 pm »

Oh ok!

Will it get fixed / will there be any issues if I remove the DNS option in VPN -> Wireguard -> Local -> DNS Server
And just specify the DNS server on my client side config only? Or is that a required field?

7

General Discussion / Re: DNS server used by OPNsense itself

« on: January 23, 2021, 07:35:15 pm »

Hi Franco, yes I am using Wireguard

8

General Discussion / DNS server used by OPNsense itself

« on: January 23, 2021, 01:56:58 pm »

So in system -> settings -> general I have 1.1.1.1 as my DNS.
'Allow DNS server list to be overridden by DHCP/PPP on WAN' is NOT checked.
'Do not use the local DNS service as a nameserver for this system' is NOT checked.

I also have unbound DNS enabled.
In my DHCP settings I have set the DNS as 192.168.1.3, this is the only place I have set 192.168.1.3 for any DNS settings. (apart from WireGuard config)

Now I'd assume that only DHCP clients would use 192.168.1.3 but it appears that OPNsense itself is also using it as it's default DNS server? When I run 'dig' on the command line it is using 192.168.1.3 by default, also '/etc/resolv.conf' has 192.168.1.3. If 192.168.1.3 is offline then dig does not work.

How do I make OPNsense use either 1.1.1.1 as it's DNS or 127.0.0.1 (unbound)?

9

General Discussion / Re: Port Forwarding

« on: May 06, 2020, 02:00:04 pm »

Have you definitely check the 'enable' and the 2 'Allow Port Mapping' options?

Do you have 'Default deny' checked?

Do you know if the Cell Spot actually uses UPNP or not?

10

General Discussion / Re: Recommendation for analysing the Firewall Logs

« on: May 06, 2020, 01:56:15 pm »

Check out PF ELK https://github.com/3ilson/pfelk

11

General Discussion / Re: Traffic Shaping / Bandwidth Limiting

« on: May 06, 2020, 01:51:08 pm »

You need 2 pipes, one for in and one for out, limit to 60Mbit. Then you need two queues, one for in, one for out. On queues you need to set the masks correct to evenly share accross users. Then two rules for in and out matching direction and client IPs.

Could you give me a pointer as to which masks I need for the pipes and queues and which directions I should add to the rules?

12

General Discussion / Traffic Shaping / Bandwidth Limiting

« on: May 05, 2020, 10:15:08 pm »

What I'm trying to achieve:
1) Limit the max download bandwidth to ANY SINGLE client to 50mbps
2) Limit the TOTAL download bandwidth to 60mbps

I've managed to do both separately with 2 pipes but I can't get both pipes to work at the same time, any tips?
I've attached a picture of my settings for the total 60mbps settings, and for the 50 per client setting I changed the bandwidth setting to 50 and set the mask to destination.

(Separately, are queues required when you don't need weighting / is there any point in using the queue when you only have one for a pipe, since you can just add the pipe to the rule instead or the queue?)

13

Hardware and Performance / Re: NanoPi R2S

« on: April 09, 2020, 07:26:30 pm »

Thanks!

14

Hardware and Performance / Re: OPNsense 20.1 on NanoPI R1S (H5)

« on: March 26, 2020, 10:47:29 am »

Will it work on the new one? https://www.friendlyarm.com/index.php?route=product/product&product_id=282

15

Hardware and Performance / NanoPi R2S

« on: March 26, 2020, 10:18:39 am »

https://www.friendlyarm.com/index.php?route=product/product&product_id=282

Would this be able to run OPNsense? If so, what would be the performance compared to something like an Intel J3060?