Messages

Thanks!

I updated my OPNSense firewall and installed Zenarmor. Before I installed it, I did a health audit and there were no errors. After installation of Zenarmor, I did another health audit and find the following error:

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.7.9_1 (amd64) at Wed Nov 20 14:25:46 PST 2024
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 24.7.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.7.8 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 333)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x8cc5c942d7c5827a96087f872ae6ef860d1dd42172f226acf925b98181eda850)
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
os-cpu-microcode-intel 1.0
os-etpro-telemetry 1.7_5
os-google-cloud-sdk 1.0_1
os-sensei 1.18.3
os-sensei-agent 1.18.3
os-sensei-updater 1.17
os-sunnyvalley 1.4_3
os-theme-cicada 1.38
os-upnp 1.7
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" at 24.7.9_1 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

As of this afternoon, November 11, 2024, this option no longer works in Web Control Policies.

I can trigger it to block but when I go to save it, it resets to allow.

Thanks for getting back to me. I found it in the "web controls" settings.

Tonight I upgraded my Zenarmor firmware to 1.18.1 and notice there is no longer an option to block DOH in the settings.

I may missed this but did this change with the latest update? If so, why?

No issues with my Pixel 9.

You don't need to "unzip" the drive. Rufus will burn a USB drive using the downloaded "vga" file.

I did a fresh install of OPNsense 24.7.5_3 and reinstalled Zenarmor. It seems to work fine but both the plugins are showing the message (misconfigured) after them.

Before I reinstalled, I upgraded from the business edition to the community edition and saw that same
"misconfigured" error. I uninstalled Zenarmor before updating to the community edition then reinstalled after updating. Upon seeing the error I figured it was something in the upgrade hence the reinstall.

Is something actually "misconfigured" or is there a problem with the plugins?

No idea if this is even remotely related but I was having the same issue and it turns out I had bad ram in the appliance. Replaced it and am living happily ever after.

Good luck diagnosing and fixing your problem.

Thanks Franco.

I upgraded to the community version and the etc/sysctl.conf error went away. Then I downgraded to the business edition again and it's still showing the missing python library but I'm going to ignore it.

I think it's time to live happily ever after again.

Sam

I just installed Zenarmor on the Business version of OPNsense and ran an audit. Among the results I saw this error message: "os-sensei is missing a required shared library: libpython3.9.so.1.0". Any ideas how to fix?

It also shows this error message:
Error 2 occurred.
etc/sysctl.conf:
   size (299, 398)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x2cd9b73974f48f02a1ef533bc90d7ca94085875f27569dff11f6a1557929ab75)

The complete text of the audit follows:

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.4.1_3 at Thu Aug  8 12:46:34 PDT 2024
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 24.1.10 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1.10 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 398)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x2cd9b73974f48f02a1ef533bc90d7ca94085875f27569dff11f6a1557929ab75)
>>> Check installed repositories
SunnyValley
OPNsense
>>> Check installed plugins
os-OPNBEcore 1.4_1
os-dec-hw 1.0
os-etpro-telemetry 1.6_4
os-google-cloud-sdk 1.0_1
os-intrusion-detection-content-et-open 1.0.2_2
os-sensei 1.17.6
os-sensei-agent 1.17.5
os-sensei-updater 1.17
os-sunnyvalley 1.4_3
os-theme-cicada 1.35
os-upnp 1.5_6
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
os-sensei is missing a required shared library: libpython3.9.so.1.0
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense-business" has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

I installed Zenarmor on my OPNsense system and later used their uninstaller to remove it. After Zenarmor was removed it left "elasticsearch8" still installed on the system. It's showing up under Packages.

When I run an audit it shows that elasticsearch8 is still looking for 7 missing files. The audit log is below.

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.1.9_4 at Wed Jul 10 13:44:34 PDT 2024
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 24.1.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.1.8 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-dec-hw 1.0
os-etpro-telemetry 1.6_3
os-google-cloud-sdk 1.0_1
os-intrusion-detection-content-et-open 1.0.2_2
os-theme-cicada 1.35
os-upnp 1.5_6
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages:
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/elasticsearch.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/jvm.options.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/log4j2.properties.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/role_mapping.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/roles.yml.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/users.sample
elasticsearch8-8.11.3: missing file /usr/local/etc/elasticsearch/users_roles.sample
Checking all packages............. done
>>> Check for core packages consistency
Core package "opnsense" has 68 dependencies to check.
Checking packages: ..................................................................... done
***DONE***

Any idea how to remove elasticsearch8 from my system? Why isn't it removed with the Zemarmor uninstaller?

Which firmware was it and how did you fix it?

I'm having the same issue with both the "community" and the "business" editions.

I'm having the same issue here. I can backup to Google Drive from the settings part of the web interface but the daily, 1:00 am backups have stopped. I'm also running the business edition.

My last backup was 5/31