Messages

1

21.1 Legacy Series / Re: Wireguard not working after upgrade from 21.1.2 to 21.1.4

« on: April 03, 2021, 02:44:35 am »

Same here, Wireguard is working fine for me, the upgrade was problem-free.

2

20.7 Legacy Series / Re: Question about Upgrading to 20.7

« on: September 16, 2020, 07:52:42 pm »

Like the OP, I was holding back from upgrading as well, due to what seemed like a higher than normal quantity of upgrade-related issues with 20.7.  Did a backup and went ahead and upgraded from 20.1.x to 20.7 and then 20.7.2, all "in-place" upgrades using the built-in script from current version.  No issues thus far.  Wireguard works as well, which is what I was most concerned about breaking. 

3

20.1 Legacy Series / Re: syslog-ng

« on: April 24, 2020, 01:30:51 am »

I had a very stable machine (HP 290 w/Celeron G4900 3.1GHz 4GB RAM 16GB NVME) running 20.1.1, CPU use was typically about 15% and would occasionally bump up to 60%. The system ran for 60 days continuous uptime, no issues. 

I upgraded to 20.1.5 today, and it is now running at 60% CPU (idle) and spiking up to 100%, with temps 10-15 degrees C higher than before. 

The activity log shows the culprit is syslog-ng which is using 60+% of WCPU. 

Anyone else having this problem?  Wondering how to fix it, other than just shutting down the syslog service.

4

20.1 Legacy Series / Re: Question around Wireguard vs. OVPN routing / firewall difference..

« on: March 05, 2020, 02:58:17 am »

I've been using the Wireguard setup to connect local clients on the LAN to the internet via my VPN provider.  While we've had issues with some websites and streaming services that don't like the VPN connection, we've had zero issues with iCloud or Apple mail services. 

5

20.1 Legacy Series / Error when executing log script

« on: February 22, 2020, 04:08:29 pm »

When I go to System > Log Files > General, the script fails, no log files appear, and CPU usage spikes.  Under 'Backend" the logs show this:

Code: [Select]

configd.py: [753axxxx-xxx-xxxx-xxxx-xxxxxxxx3b65] Script action failed with Command '/usr/local/opnsense/scripts/systemhealth/queryLog.py --limit '20' --offset '0' --filter '' --module 'core' --filename 'system'' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 484, in execute stdout=output_stream, stderr=error_stream) File "/usr/local/lib/python3.7/subprocess.py", line 363, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/systemhealth/queryLog.py --limit '20' --offset '0' --filter '' --module 'core' --filename 'system'' returned non-zero exit status 1.
Something has become corrupted it seems.  What is my best course of action to correct this?

Thanks

6

General Discussion / Re: How to see what static IPs are active

« on: February 22, 2020, 04:17:02 am »

Also, if you go to Reporting > Traffic and then wait a minute the active IPs on your LAN will populate as it logs traffic per address, you might need to scroll down to see them.

7

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 17, 2020, 11:17:43 pm »

Oh, thanks for that!  That was the main problem with the configuration, somehow I missed the fact that the Gateway logic changed with the newer version(s).  After following your instructions from the linked thread, all looks to be functioning as it should.     

8

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 17, 2020, 07:51:27 pm »

Looks like you were on 19.1 before 20.1?

Correct.

9

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 17, 2020, 06:09:34 pm »

Once I confirmed that the Wireguard connection was working and internet was functional on the network through the VPN, I backed up the config and then upgraded again to 20.1.1
So far everything is still functional.  If it breaks, I'll revert Wireguard as suggested.
The only odd thing that I see (and it was this way before as well) is the Gateway shows "disabled" but "online" is green, also priority shows "defunct" as the default setting is 255, not sure if this should be different. 

10

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 17, 2020, 04:52:36 pm »

Can you try to revert WireGuard with opnsense-revert? You can read in the Docs how it works

Thanks for the help.  With the 20.1.1 update, it appeared that nothing had changed with the wireguard plugin, so I tried a complete -revert of the entire opnsense 20.1.1 update.  That went fine.  Rebooted, still the same issues with wireguard connection not allowing internet connections on the LAN.  The error in the code output above (`ifconfig:`) made me think that something had gotten corrupted with either the interface or gateway.  So, I deleted both of those, as well as the wireguard configuration and started over.  It appears to be running fine, so that was likely the problem.

Now, the test will be to upgrade to 20.1.1 and see if it breaks again.

11

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 17, 2020, 05:36:30 am »

Any ideas?

12

20.1 Legacy Series / Re: WireGuard client issues after update

« on: February 15, 2020, 10:00:17 pm »

OK, thanks.  Here's the output, IP addresses redacted:

Code: [Select]

$ /usr/local/etc/rc.d/wireguard restart   
[#] rm -f /var/run/wireguard/wg0.sock
[#] resolvconf -d wg0
[#] wireguard-go wg0
INFO: (wg0) 2020/02/15 15:22:28 Starting wireguard-go version 0.0.20200121
[#] wg setconf wg0 /tmp/tmp.b1mLyP2u/sh-np.KeKpO1
[#] ifconfig wg0 inet 10.xx.xx.xx/32 10.xx.xx.xx alias
[#] ifconfig wg0 inet6 fc00:xxxx:xxxx:xxxx::3:55c/128 alias
[#] ifconfig wg0 mtu 1420
[#] ifconfig wg0 up
[#] resolvconf -a wg0 -x
[#] route -q -n add -inet6 ::/1 -interface wg0
[#] route -q -n add -inet6 8000::/1 -interface wg0
[#] route -q -n add -inet 0.0.0.0/1 -interface wg0
[#] route -q -n add -inet 128.0.0.0/1 -interface wg0
[#] route -q -n add -inet xx.xx.xxx.xxx -gateway xx.xxx.xx.xx
[+] Backgrounding route monitor
ifconfig:  SIOCAIFGROUP: Operation not permitted

13

Tutorials and FAQs / Re: HOW TO WIREGUARD OPNsense CLIENT DEAD SIMPLE

« on: February 15, 2020, 03:25:59 pm »

Please Open a new thread for this

New topic in General created.

14

20.1 Legacy Series / [Solved] WireGuard client issues after update

« on: February 15, 2020, 03:24:15 pm »

Has anyone else had issues with Wireguard since the most recent update?  I’m running 20.1.1
It may be coincidental, however my Wireguard-Mullvad configuration, based on the routerperformance.net Azire write-up, was working well, but it suddenly prevents my network from internet access.  I'm not sure what exactly is happening, but nothing in my config has changed.  I've tried starting over, to no avail, I have no internet access as soon as I turn on the VPN, and it returns as soon as I turn it off.

15

20.1 Legacy Series / Re: Help to install WireGuard plugin

« on: February 15, 2020, 02:30:47 am »

How are the plugin installed?

I have OPNsense 20.1.1-i386

If I go to System : Firmware : Plugin I can't find the WireGuard plugin listed

How I install the WireGuard plugin?

On what device do you have OPNsense installed? Does it require the i386 32-bit version?