Messages

Thank You Franco!

This "Store intermediate" was checked. I unchecked it and works fine.

   Problem Solved!!!

Sorry, forgot:

OPNsense 22.4.1-amd64
FreeBSD 13.0-STABLE

Posting in general discussion, if wrong, just move to correct place, please.
  I have 1 year business license, but when I added nginx reverse proxy with Acme external cert, I can't properly update opnsense.  Getting this error:

...Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
34378686464:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1916:
pkg: https://opn-repo.routerperformance.net/repo/FreeBSD:13:amd64/packagesite.txz: Authentication error
Unable to update repository mimugmail
Error updating repositories!
pkg: Repository OPNsense cannot be opened....

I found that need to delete System > Trust > Authorities R3 (Acme Client).
Deleted, worked fine. Few days later same error is back. What I doing wrong?

Thank You

I'm trying from Opnsense LAN interface to LAN, because at the moment only LAN interface have 10 Gb/s network.

Yes, I also think it's simply iperf3 who failing, maybe it's some another way to check LAN speed?

@lilsense, You not reading what I writing? I told that have basic firewall with 2 WAN's.

Please don't offer thing wich already was offered in other posts.  I went thru them before making new topic.

I don't have any Virtual Ip's or zenarmor.

Because Mikrotik acts as switch only.  I have several Linux with 10Gb fibre cards, from any of them works fine.
  That's why I wondering why it's not working with 10Gb/s.

Linux - Mikrotik - Linux
Opnsense - Mikrotik - Linux.

tried -P 4, -P 8 ... nothing. Even worst.

[ ID] Interval           Transfer     Bitrate         Retr
[  5]   0.00-10.01  sec   944 MBytes   791 Mbits/sec    0             sender
[  5]   0.00-10.01  sec   944 MBytes   791 Mbits/sec                  receiver
[  7]   0.00-10.01  sec   945 MBytes   791 Mbits/sec    0             sender
[  7]   0.00-10.01  sec   945 MBytes   791 Mbits/sec                  receiver
[  9]   0.00-10.01  sec   944 MBytes   791 Mbits/sec    0             sender
[  9]   0.00-10.01  sec   944 MBytes   791 Mbits/sec                  receiver
[ 11]   0.00-10.01  sec   944 MBytes   791 Mbits/sec    0             sender
[ 11]   0.00-10.01  sec   944 MBytes   791 Mbits/sec                  receiver
[SUM]   0.00-10.01  sec  3.69 GBytes  3.17 Gbits/sec    0             sender
[SUM]   0.00-10.01  sec  3.69 GBytes  3.17 Gbits/sec                  receiver

When I trying from one Linux to other Linux, I getting all 10gb/s and without that -P 4

[ ID] Interval           Transfer     Bandwidth       Retr  Cwnd
[  4]   0.00-1.00   sec  1.09 GBytes  9.36 Gbits/sec    3    588 KBytes       
[  4]   1.00-2.00   sec  1.09 GBytes  9.33 Gbits/sec    0    632 KBytes       
[  4]   2.00-3.00   sec  1.09 GBytes  9.40 Gbits/sec    0    632 KBytes       
[  4]   3.00-4.00   sec  1.09 GBytes  9.41 Gbits/sec    0    740 KBytes       
[  4]   4.00-5.00   sec  1.09 GBytes  9.35 Gbits/sec    0    740 KBytes       
[  4]   5.00-6.00   sec  1.09 GBytes  9.39 Gbits/sec    0    740 KBytes       
[  4]   6.00-7.00   sec  1.09 GBytes  9.36 Gbits/sec    0    740 KBytes       
[  4]   7.00-8.00   sec  1.09 GBytes  9.36 Gbits/sec    0    740 KBytes       
[  4]   8.00-9.00   sec  1.09 GBytes  9.40 Gbits/sec    0    740 KBytes       
[  4]   9.00-10.00  sec  1.09 GBytes  9.39 Gbits/sec    0    740 KBytes       
- - - - - - - - - - - - - - - - - - - - - - - - -
[ ID] Interval           Transfer     Bandwidth       Retr
[  4]   0.00-10.00  sec  10.9 GBytes  9.37 Gbits/sec    3             sender
[  4]   0.00-10.00  sec  10.9 GBytes  9.37 Gbits/sec                  receiver

i seen in other post that need to disable suricata, it never was enabled.  Don't have special configuration, just using for 2 WAN's. Have ports forwarded and OpenVPN what not in use.

I bought DEC2750. Hope it 'sspec don't need.


Have 10G SFP+ SR Multimode Fibre Module- 10GBase-SR LC Transceivers (10Gtek).

I usi fibre cable to Mikrotik switch and fibtre cable to Gentoo Linux.

When I testing LANwith iperf3 from opnsense to gentoo, I can get max 3.32 Gbits/sec

I know, I will never need 10 Gbits, but why I can't get in LAN full speed? I done something wrong with setup or maybe its transceiver not arelly supported? In Linux systems they working fine.

Sorry about messy question, if need other details, just let me know.

Thank You!

Thank You @AdSchellevis!!!

I loged in.

Please close topic.

Thanks everyne. Email sent.

But still question how to reset password for shop.onsense.org ?

When got reset link, its open page to change password, but when I trying to change it, it open that weir page wich saying that link is expaired. And then going in loop. Simply not able to reset password... .

looks it was temporally issue with emails, as now it's sent. Problem was only with sales@opnsense.org email. rest emails are fine.

But problem with website still accours. I not able to reset password. Also disableded adblock, allow all cookies and trackings e.t.c. . Nothing. Its even still my primary IP address blocked - unable to open shop.opnsense.com . More likelly it was auto blocked as I tried to change password.

whatewer. I know that my side is fine.

I receiving/sending many emails in day, with everyone else it's fine.

Website I also tried from different browsers, no one works. ohh well. Who cares.

My SPF is correct. I don't know whos website is it: www.opnspf.net, but i'm not able to open it.

The mail system

<sales@opnsense.com>: host mail.deciso.cloud[2001:1af8:4700:a126:6::2] said:
    550 5.7.1 <sales@opnsense.com>: Recipient address rejected: Message
    rejected due to: SPF fail - not authorized. Please see
    http://www.openspf.net/Why?s=mfrom;id=changed@email.example;ip=2001:41d0:801:2000::21fd;r=sales@opnsense.com
    (in reply to RCPT TO command)

at the beginning it is normal page, but whe I trying to reset password, opening that wordpress page...

I dont have issues. Your mailserver have problems.

And when I trying to reset password, its opening strange page, attached screenshots. And over there is also mission impossible.

Its valid, just tested: SPF:   PASS with IP 51.89.148.*

To everyone else I ca send emails... . But why I even can change password in store website?