Messages

OPNsense 25.1.7_4-amd64
FreeBSD 14.2-RELEASE-p3
OpenSSL 3.0.16

ntopng refuses to start as noted:

2025-05-26T11:40:15-04:00   Error   ntopng   26/May/2025 11:40:15 [Redis.cpp:159] ERROR: to specify a redis server other than the default   
2025-05-26T11:40:15-04:00   Error   ntopng   26/May/2025 11:40:15 [Redis.cpp:156] ERROR: Please start it and try again or use -r   
2025-05-26T11:40:15-04:00   Error   ntopng   26/May/2025 11:40:15 [Redis.cpp:155] ERROR: ntopng requires redis server to be up and running   
2025-05-26T11:40:14-04:00   Error   ntopng   26/May/2025 11:40:14 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:13-04:00   Error   ntopng   26/May/2025 11:40:13 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:12-04:00   Error   ntopng   26/May/2025 11:40:12 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:11-04:00   Error   ntopng   26/May/2025 11:40:11 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:10-04:00   Error   ntopng   26/May/2025 11:40:10 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:09-04:00   Error   ntopng   26/May/2025 11:40:09 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:08-04:00   Error   ntopng   26/May/2025 11:40:08 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:07-04:00   Error   ntopng   26/May/2025 11:40:07 [Redis.cpp:100] ERROR: Connection error [Connection refused]   
2025-05-26T11:40:06-04:00   Error   ntopng   26/May/2025 11:40:06 [Redis.cpp:100] ERROR: Connection error [Connection refused]

some more digging shows redis failing:
2025-05-26T11:43:59-04:00   Warning   redis   Failed listening on port 6379 (tcp), aborting.   
2025-05-26T11:43:59-04:00   Warning   redis   Warning: Could not create server TCP listening socket track6:6379: Name does not resolve   
2025-05-26T11:43:59-04:00   Warning   redis   WARNING: The TCP backlog setting of 511 cannot be enforced because kern.ipc.somaxconn is set to the lower value of 128.   
2025-05-26T11:43:59-04:00   Notice   redis   Running mode=standalone, port=6379.   
2025-05-26T11:43:59-04:00   Notice   redis   monotonic clock: POSIX clock_gettime   
2025-05-26T11:43:59-04:00   Notice   redis-server   Configuration loaded   
2025-05-26T11:43:59-04:00   Notice   redis-server   Redis version=7.2.8, bits=64, commit=00000000, modified=0, pid=32198, just started   
2025-05-26T11:43:59-04:00   Notice   redis-server   oO0OoO0OoO0Oo Redis is starting oO0OoO0OoO0Oo   
2025-05-26T11:43:42-04:00   Warning   redis   Failed listening on port 6379 (tcp), aborting.

any ideas?

i have been reading the docs and continue to look through them...trying to figure how opncentral is deployed.  is it a cloud based system provided by Deciso?

i have a macbook running 15.3.2 and i am trying to connect via the included console cable.  i cannot seem to get it to connect.  some pointers would be appreciated.

so with some more exprimentation...i deleted the port forwards and wan rules...lt the system sit for 5 minutes and then recreated the port forwards...a few minutes later the rules appeared in wan properly.  IME BSD sometimes jsut get flaky in the firewall someteims(hit it a few times with pfsense too)...it seems to have settled down now...will keep an eye on it.

over the past three days traffic from my remote servers stopped working.  it too me a while to figure out what was not right..but finally after digging i found the automatic firewall rules for the wan interface got deleted after the upgrade.  once i re-created the wan firewall rule for the port forwards traffic began flowing again.  As a test i deleted the port forward rebooted the firewall and then recreated the port forwards...the traffic was blocked..after another reboot no forwarded traffic was allowed..i had to create the wan firewall rule to allow the port forward.

If the appliance does not get updates, it probably lacks an internet connection, maybe because you only connected it to your LAN and WAN has no connection.

You could manually add a default gateway over you actual router.

the appliance is in California and i am accessing it from Maryland..:)

that's an odd fix...do i have to have ipv6 off all the time?  there are several sites the client accesses that are ipv6 only...aka they do not have an ipv4 address.

If the appliance does not get updates, it probably lacks an internet connection, maybe because you only connected it to your LAN and WAN has no connection.

You could manually add a default gateway over you actual router.

the appliance is in California and i am accessing it from Maryland..:)

I have a dec appliance(it's a couple of years olkdd) and for some reason it is refusing to upgrade:

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 24.1.10_8 at Sat Aug 31 09:29:01 PDT 2024
Fetching changelog information, please wait... fetch: transfer timed out
fetch: /usr/local/opnsense/changelog/changelog.txz appears to be truncated: 0/144860 bytes
Updating OPNsense repository catalogue...
Waiting for another process to update repository OPNsense
All repositories are up to date.
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking for upgrades (0 candidates): . done
Processing candidates (0 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.

Any ideas?

Got it worked put

i sit corrected...i now see ipv6 addresses populating...thanks!

comcast business...router is bridged.  under Linux dhcpv6 works perfectly....i cannot get it working in Opnsense.  i have tried all the tips i can find...pointers are appreciated.  prefux is set to /55 which works under linux based firewalls.

about a year ago i purchased an opnsense racl appliance9the model escapes me at the moment).  did these last gen devices not ship with zfs by default?

i cannot get ipv6 to work with comcast business.  i have it set to prefix delegation at a /55 and tried a prefix hint and without a prefix hint.  modem is in bridge mode.

True but that's not what I was looking for...:)

can the community edition do ssl interception so the contents can be checked by ips or is that only business edition?