Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - TimK

Pages: [1]

24.1 Legacy Series / Re: Unbound throwing sendto: invalid argument errors, Kea DHCP migration issues?

« on: August 19, 2024, 11:59:15 am »

Hi, I just wanted to say, that I had the exact same issue. Migrated to KEA, got one VLAN in ISC using static ARP entries. New clients in this VLAN got no internet connection under KEA.
After reactivating ISC DHCP for this interface and adding the static entry for the new client, all worked fine. I deactivated static arp entries in ISC and migrated the interface back to KEA for this VLAN and now also new clients work under KEA. So make sure in case of migration, to deactivate static arp in ISC first. There seems to be some issue with the ARP table.
I migrated the respective interface back to ISC, with KEA, no devices got connection to the network. There is definitely a bug somewhere. Unbound listens to all interfaces.

German - Deutsch / Re: Let's Encrypt mit selfhost.de und DNS-01 challenge

« on: August 12, 2024, 01:59:10 pm »

Hi, trying to issue a cert with DNS-01 in OPNsense ACME client, I can reproduce the issue with selfhost. I also replied in the issue tracker https://github.com/acmesh-official/acme.sh/issues/4291

has anyone got this to work at all?

22.1 Legacy Series / Re: Port forwarding not working (sometimes)

« on: April 07, 2022, 11:29:49 am »

Hi, since I checked Dynamic state reset in Firewall > Settings > Advanced all is fine and port forwarding works ever since.

22.1 Legacy Series / Re: Port forwarding not working (sometimes)

« on: February 28, 2022, 11:05:03 am »

Hi unfortunately today at 10:37 the issue occured again. Also, VPN went offline but was reachable shortly after. The DNS Record is resolved correctly. Any clues how I could debug this issue? Thank you for any hints.


2022-02-28T10:45:00 Error opnsense /usr/local/etc/rc.dyndns: Dynamic DNS: (Success) IP Address Updated Successfully!
2022-02-28T10:45:00 Error opnsense /usr/local/etc/rc.dyndns: Dynamic DNS: updating cache file /var/cache/dyndns_wan_baltic-hosting.de_0.cache: 85.233.15.97
2022-02-28T10:35:58 Notice opnsense plugins_configure newwanip (execute task : webgui_configure_do(   wan))
2022-02-28T10:35:58 Notice opnsense plugins_configure newwanip (execute task : vxlan_configure_interface())
2022-02-28T10:35:57 Error opnsense /usr/local/etc/rc.newwanip: warning: ignoring missing default tunable request: debug.pfftpproxy
2022-02-28T10:35:57 Notice opnsense plugins_configure newwanip (execute task : unbound_configure_do(   wan))
2022-02-28T10:35:57 Notice opnsense plugins_configure newwanip (execute task : openssh_configure_do(   wan))
2022-02-28T10:35:57 Notice opnsense plugins_configure newwanip (execute task : opendns_configure_do())
2022-02-28T10:35:57 Notice opnsense plugins_configure newwanip (execute task : ntpd_configure_do())
2022-02-28T10:35:55 Error opnsense /usr/local/etc/rc.newwanip: Dynamic DNS: (Success) IP Address Updated Successfully!
2022-02-28T10:35:55 Error opnsense /usr/local/etc/rc.newwanip: Dynamic DNS: updating cache file /var/cache/dyndns_wan_baltic-hosting.de_0.cache: 85.233.15.97
2022-02-28T10:35:54 Notice opnsense plugins_configure newwanip (execute task : dyndns_configure_do(   wan))
2022-02-28T10:35:54 Notice opnsense plugins_configure newwanip (   wan)
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: Resyncing OpenVPN instances for interface Internet.
2022-02-28T10:35:54 Notice opnsense plugins_configure vpn (execute task : openvpn_configure_do(   wan))
2022-02-28T10:35:54 Notice opnsense plugins_configure vpn (execute task : ipsec_configure_do(   wan))
2022-02-28T10:35:54 Notice opnsense plugins_configure vpn (   wan)
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: IP address change detected   killing states of old ip 85.233.18.218
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: The WAN_DHCP6 monitor address is empty   skipping.
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: The GW_LAN monitor address is empty   skipping.
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: The INTERNET_PPPOE monitor address is empty   skipping.
2022-02-28T10:35:54 Notice opnsense plugins_configure monitor (execute task : dpinger_configure_do())
2022-02-28T10:35:54 Notice opnsense plugins_configure monitor ()
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: ROUTING: creating /tmp/pppoe0_defaultgw using '185.111.71.254'
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: ROUTING: removing /tmp/pppoe0_defaultgw
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: ROUTING: setting IPv4 default route to 185.111.71.254
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: ROUTING: IPv4 default gateway set to wan
2022-02-28T10:35:54 Error opnsense /usr/local/etc/rc.newwanip: ROUTING: entering configure using 'wan'
2022-02-28T10:35:54 Notice opnsense plugins_configure hosts (execute task : unbound_hosts_generate())
2022-02-28T10:35:54 Notice opnsense plugins_configure hosts (execute task : dnsmasq_hosts_generate())
2022-02-28T10:35:54 Notice opnsense plugins_configure hosts ()
2022-02-28T10:35:53 Error opnsense /usr/local/etc/rc.newwanip: On (IP address: 85.233.15.97) (interface: Internet[wan]) (real interface: pppoe0).
2022-02-28T10:35:53 Error opnsense /usr/local/etc/rc.newwanip: IPv4 renewal is starting on 'pppoe0'
2022-02-28T10:30:00 Error opnsense /usr/local/etc/rc.dyndns: Dynamic DNS: (Success) IP Address Updated Successfully!
2022-02-28T10:30:00 Error opnsense /usr/local/etc/rc.dyndns: Dynamic DNS: updating cache file /var/cache/dyndns_wan_baltic-hosting.de_0.cache: 85.233.18.218
2022

22.1 Legacy Series / Re: Port forwarding not working (sometimes)

« on: February 15, 2022, 02:06:43 pm »

Aye. Thank you sir.

22.1 Legacy Series / Re: Port forwarding not working (sometimes)

« on: February 15, 2022, 01:21:08 pm »

Done. Currently NAT workes (I needed to do a reboot of the VM, afterwards the system got a new IP and for the moment it works..).

what to do now?

22.1 Legacy Series / Port forwarding not working (sometimes)

« on: February 14, 2022, 04:55:20 pm »

Hi, I have a strange issue with port forwarding a reverse proxy from my DMZ and I need your help for debugging.
Occasionally the ports 443 and 80 are not reachable from the internet. The port forwarding for VPN (Wireguard) is always (!) working fine. Just my website I am hosting is not reachable from the outside. From inside or VPN everything is fine. I also asked my ISP if they are blocking any ports and they said no. If I reload the PppoE connection, it (sometimes) resolves the issue. This also provides a new IP address by the ISP.

My Setup is quite straight worward:

There is a Webserver hosting a Nextcloud in VLAN1. There is a DMZ with a reverse proxy with ports 80 and 443 forwarded and I use dynamic dns to resolve my domain to my IP address. Again, this works like a charm for Wireguard. Only 443 and 80 brake...

As you can see, there is also a port forwarding rule for VPN.

Reflection for port forwarding is activated

Sometimes if I reload the connection, It works again (but not today. Be my guest to try yourself https://nextcloud.baltic-hosting.de)

Dynamic DNS is also working and the IP is correctly resolved.

WAN interface Setup

I am open for any ideas how to debug this issue. I tried to trace the WAN interface for connections. But it got me no clue what is wrong. Mostly the issue appears if I restart the machine hosting the Firewall. Sometimes it happens out of nothing (I guess it has something to do with the ISP changing the IP but again VPN is working without issues and it references to se same domain) $:-\$

Thank you for any help.

Pages: [1]