Messages

[write reduction]

Thanks Patrick !
You're right, it's a
Transcend TS256GMTE712A (série MTE712A)

I've made some write reduction (outbound DNS, tested rules, etc.) and since that, no more error.

Today
SMART/Health Information Log
============================
Critical Warning State:         0x00
 Available spare:               0
 Temperature:                   0
 Device reliability:            0
 Read only:                     0
 Volatile memory backup:        0
Temperature:                    325 K, 51.85 C, 125.33 F
Available spare:                100
Available spare threshold:      10
Percentage used:                13
Data units (512,000 byte) read: 858477
Data units written:             24738666
Host read commands:             4822576
Host write commands:            468806337
Controller busy time (minutes): 4513573
Power cycles:                   30
Power on hours:                 4823
Unsafe shutdowns:               24
Media errors:                   0
No. error info log entries:     0
Warning Temp Composite Time:    0
Error Temp Composite Time:      0
Temperature Sensor 1:           340 K, 66.85 C, 152.33 F
Temperature Sensor 2:           315 K, 41.85 C, 107.33 F
Temperature Sensor 3:           325 K, 51.85 C, 125.33 F
Temperature 1 Transition Count: 93
Temperature 2 Transition Count: 0
Total Time For Temperature 1:   4478
Total Time For Temperature 2:   0

It seems I've 12 TB in less than one year. Main of them are Outbound DNS level 3 (down to level 2).
This morning, here are statistics:

=== START OF SMART DATA SECTION ===
SMART/Health Information (NVMe Log 0x02, NSID 0xffffffff)
Critical Warning:                   0x00
Temperature:                        52 Celsius
Available Spare:                    100%
Available Spare Threshold:          10%
Percentage Used:                    13%
Data Units Read:                    662,615 [339 GB]
Data Units Written:                 24,519,123 [12.5 TB]
Host Read Commands:                 4,037,958
Host Write Commands:                465,833,667
Controller Busy Time:               4,513,538
Power Cycles:                       30
Power On Hours:                     4,677
Unsafe Shutdowns:                   24
Media and Data Integrity Errors:    0
Error Information Log Entries:      0
Warning  Comp. Temperature Time:    0
Critical Comp. Temperature Time:    0
Temperature Sensor 1:               66 Celsius
Temperature Sensor 2:               41 Celsius
Temperature Sensor 3:               52 Celsius
Thermal Temp. 1 Transition Count:   93
Thermal Temp. 1 Total Time:         4478

The main temperature of the firewall (in Dashboard) is 39.1°C, so 66°C for NVMe0 is strange, no?

I did many tests and there is no failure. AI suspected too much write on it, then I reduced rules log, rddtools and some settings.
Let see for next tests

After few days running, my DEC750 freeze.
Console port says something about
zfs: WARNING: Pool 'zroot' has encoutered an uncorrectable I/O failure and has been suspended

AI help me to check temperature was too high, so I changed place and now it seems to be ok (according to os-smart: max 68°C)

Anybody have an idea how to troubleshoot (console is not usable) ?

I know the path: in fact, this message help me (install AMD microcode) : https://forum.opnsense.org/index.php?msg=254780
Now, dashboard shows me temperature for each core (CPUx) and an AMD0 unit.

All in the title.
I'm unable to access to thermal sensors on a D750 appliance. Is it normal?

Edit: Solution is to install os-cpu-microcode-amd (see menu SYSTEM:FIRMWARE > Plugins)

I was using a PC with OPNsense since few years and the first thing I did, was to disabled root account in web GUI (System > Access > Users > Root). On the console screen, I was able to see logs and to connect with a second admin account and then, launch root access. that way permit to access CLI menu (with numbers to select pfTop, logs, reset, reboot, etc.)
Since I'm configuring an OPNsense applicance, I've to keep root account enabled and even if I block ssh access for it, it still able to connect on WEBGUI.
Did I miss something in my configuration?

I think it's not a memory leak, but the way FreeBSD manage memory (to avoid disk caching).
Solved (I hope... a crash with lagg0 has reset my statistics)

[Solved]

It working correctly, just have to wait few minuts.... Solved !
It's perfect answer to my problem.

I would to set up Unbound DNS to use joinDNS4.eu servers with family filter (86.54.11.12) with DoT
But, I would to use a non filtering server (86.54.11.100) for a specific domain (passetonhack.fr an educational website).

In Services: Unbound DNS: DNS over TLS -> I've configured the fitered DNS server
In Services: Unbound DNS: Query Forwarding -> I've configured and enabled the non filtering server for domain passetonhack.fr

However this seems to be not working. Any idea? Is it the correct process?

I've not enabled this service, only Unbound DNS.
But I'll have a look to a way to monitor precisely processes RAM consumption.

Hi there,

I manage my firewall with Zabbix since few days, because having lot of trouble (many crashes) on my OPNsense firewall. Well, after two days, it seems there is a memory leak, but maybe, the firewall will update it processes and release all the memory?
Are some of you able to share same graph to see the health of our firewalls? Datas are coming from Zabbix agent.

Thanks! You're probably right. BTW I use (Arch! sorry it's a kind of joke when my sentence start with BTW I use...😅) Vicuna theme.
You've solved my "enigm" 👍

Hello everybody,
This weekend I've worked on unbound dns configuration and it works well.
My only concern is about signification of colors.


If someone has the answer for these colors, I'm interested (I understand red is blocked and green passed)
Thanks ;)

That's right.
I use 25.7.2 and I've (again) this problem!

Tried with
http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense.tar.gz (initial working link)
ftp://ftp.ut-capitole.fr/blacklist/blacklists_for_pfsense_reducted.tar.gz
ftp://ftp.ut-capitole.fr/blacklist/blacklists.tar.gz