Messages

1

General Discussion / Re: Add DHCP Scope for VirtualIP

« on: October 29, 2023, 12:09:55 pm »

Thanks for your quick reply.
Unfortunately in my Network I have a L2 ETH2VDSL2ETH Bridge which is not VLAN segmentation ready.
What I want to achive was to have a separate Network controlled by my OPNsense while still offering the Fritz Repeaters the chance to communicate with the FritzBox using their separate 192.168.178.0/24 subnet.
I agree that distinquish between the two DHCP´s would not be possible for the devices on L2. Therefore my inititial thought was if I can only handout static DHCP reservations on the secondary Subnet 192.168.178.0/24.
So that only the two WiFi Repeaters in my Network will get the IP addresses out of this Subnet 192.168.178.0/24.
But I agree that this is a very uinique scenario.
Idealy a L2 segmentation via VLANs would be optimal but it´s unfortunately not possible in my scenario :-(

2

General Discussion / Add DHCP Scope for VirtualIP

« on: October 29, 2023, 11:33:06 am »

Hi OPNsense folks,

I just set up my OPNsense with one WAN and one LAN interface.
Due to reasons I wan´t to add a second L3 Network in the L2 domain of my LAN Inferface.
Therefore I have added a VirtualIP to the LAN Interface which workes as expected.
But now I struggle to add a DHCP Scope for the VirtualIP range.
The DHCP section just offers me to configure IP´s our of the basic LAN Scope 192.168.1.0/24.
But not for the VirtualIP Scope 192.168.178.0/24.
Is there a way to add a Scope for that IP range from the VirtualIP?

Unfortunately I havent found a solution in the forum.

Many thanks and kind regards

3

23.1 Legacy Series / Update infiately fetching base-23.1.6-amd64.txz

« on: May 06, 2023, 11:04:33 am »

Hi OPNsense Forum,

I just freshly Installed OPNsense on my Topton N5105 SOC.
The System is installed on a Samsung SATA SSD Drive.
I now have this issue for the second time.
I had to set up my unit again because it didn´t boot anymore after I interrupted the Update with the same problem multiple times.
The problem is also occurring with my freshly installed system.

Does anyone have an idea what Log Files I need to check or what can be done to debug this problem?

Please find as follows the current output of my SSH Session it´s already running for more than 48H.

The authenticity of host '192.168.1.1 (192.168.1.1)' can't be established.
ED25519 key fingerprint is SHA256:KGLCO8nT8ifEZt3DoKtzdC1/YUE7vfBMaDnn1tcsgaU.
This key is not known by any other names.
Are you sure you want to continue connecting (yes/no/[fingerprint])? yes
Warning: Permanently added '192.168.1.1' (ED25519) to the list of known hosts.
Last login: Fri May  5 13:01:04 2023 from 192.168.1.77
----------------------------------------------
|      Hello, this is OPNsense 23.1          |         @@@@@@@@@@@@@@@
|                                            |        @@@@         @@@@
| Website:      https://opnsense.org/        |         @@@\\\   ///@@@
| Handbook:     https://docs.opnsense.org/   |       ))))))))   ((((((((
| Forums:       https://forum.opnsense.org/  |         @@@///   \\\@@@
| Code:         https://github.com/opnsense  |        @@@@         @@@@
| Twitter:      https://twitter.com/opnsense |         @@@@@@@@@@@@@@@
----------------------------------------------

*** OPNsense.localdomain: OPNsense 23.1 ***

 LAN (igc0)      -> v4: 192.168.1.1/24
 WAN (igc3)      -> v4/DHCP4: xxx/23
                    v6/DHCP6: xxxx/64

 HTTPS: SHA256 55 02 92 8A 51 CB 90 8A A9 D9 DD 6A 00 CF E3 91
               41 2C F4 5B F4 3F 1E FA CA 5E 80 5E 2F 92 94 70
 SSH:   SHA256 Bivvj6mDw4Ez+Kag8s9dbJlX3BeDX5pqFuWcfpBiOTA (ECDSA)
 SSH:   SHA256 KGLCO8nT8ifEZt3DoKtzdC1/YUE7vfBMaDnn1tcsgaU (ED25519)
 SSH:   SHA256 2ABLOZ8r8nJ1b3gnUao75su+a4QDK0XLyFH9sSVPJMU (RSA)

  0) Logout                              7) Ping host
  1) Assign interfaces                    Shell
  2) Set interface IP address            9) pfTop
  3) Reset the root password            10) Firewall log
  4) Reset to factory defaults          11) Reload all services
  5) Power off system                   12) Update from console
  6) Reboot system                      13) Restore a backup

Enter an option: 12

Fetching change log information, please wait... fetch: transfer timed out
fetch: /usr/local/opnsense/changelog/changelog.txz appears to be truncated: 0/276200 bytes

This will automatically fetch all available updates and apply them.

This update requires a reboot.

Proceed with this action? [y/N]: y

Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Updating database digests format: .......... done
New version of pkg detected; it needs to be installed first.
The following 1 package(s) will be affected (of 0 checked):

Installed packages to be UPGRADED:
        pkg: 1.18.4 -> 1.19.1_1

Number of packages to be upgraded: 1

4 MiB to be downloaded.
[1/1] Fetching pkg-1.19.1_1.pkg: .......... done
Checking integrity... done (0 conflicting)
[1/1] Upgrading pkg from 1.18.4 to 1.19.1_1...
[1/1] Extracting pkg-1.19.1_1: .......... done
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
All repositories are up to date.
Checking for upgrades (119 candidates): .......... done
Processing candidates (119 candidates): ...... done
The following 73 package(s) will be affected (of 0 checked):

New packages to be INSTALLED:
        easy-rsa: 3.1.2
        libidn2: 2.3.4
        libunistring: 1.1
        pkcs11-helper: 1.29.0

Installed packages to be UPGRADED:
        ca_root_nss: 3.87 -> 3.89
        curl: 7.87.0_1 -> 8.0.1
        dnsmasq: 2.88_1,1 -> 2.89_1,1
        dpinger: 3.2 -> 3.3
        e2fsprogs-libuuid: 1.46.5_1 -> 1.47.0
        filterlog: 0.6 -> 0.7
        glib: 2.74.4,2 -> 2.76.2,2
        icu: 72.1,1 -> 73.1,1
        ifinfo: 13.0 -> 13.0_1
        libcbor: 0.9.0 -> 0.10.2
        libcjson: 1.7.15 -> 1.7.15_1
        libfido2: 1.12.0 -> 1.13.0
        libnghttp2: 1.51.0 -> 1.52.0
        libpsl: 0.21.2 -> 0.21.2_3
        libxml2: 2.10.3_1 -> 2.10.4
        lighttpd: 1.4.67 -> 1.4.69
        monit: 5.32.0 -> 5.33.0
        mpd5: 5.9_13 -> 5.9_14
        nss: 3.87 -> 3.89
        openldap26-client: 2.6.3 -> 2.6.4
        openssh-portable: 8.9.p1_4,1 -> 9.2.p1,1
        openssl: 1.1.1s,1 -> 1.1.1t_2,1
        openvpn: 2.5.8 -> 2.6.3
        opnsense: 23.1 -> 23.1.7_2
        opnsense-update: 23.1 -> 23.1.6
        php81: 8.1.14 -> 8.1.18
        php81-ctype: 8.1.14 -> 8.1.18
        php81-curl: 8.1.14 -> 8.1.18
        php81-dom: 8.1.14 -> 8.1.18
        php81-filter: 8.1.14 -> 8.1.18
        php81-gettext: 8.1.14 -> 8.1.18
        php81-ldap: 8.1.14 -> 8.1.18
        php81-mbstring: 8.1.14 -> 8.1.18
        php81-pdo: 8.1.14 -> 8.1.18
        php81-phalcon: 5.1.4 -> 5.2.1
        php81-phpseclib: 3.0.18 -> 3.0.19
        php81-session: 8.1.14 -> 8.1.18
        php81-simplexml: 8.1.14 -> 8.1.18
        php81-sockets: 8.1.14 -> 8.1.18
        php81-sqlite3: 8.1.14 -> 8.1.18
        php81-xml: 8.1.14 -> 8.1.18
        php81-zlib: 8.1.14 -> 8.1.18
        py39-Babel: 2.11.0 -> 2.12.1
        py39-bottleneck: 1.3.5 -> 1.3.7_1
        py39-certifi: 2022.9.24 -> 2022.12.7
        py39-charset-normalizer: 3.0.1 -> 3.1.0
        py39-cryptography: 3.4.8,1 -> 3.4.8_1,1
        py39-cython: 0.29.32 -> 0.29.34
        py39-dnspython: 2.2.1_1,1 -> 2.3.0,1
        py39-idna: 3.4 -> 3.4_1
        py39-markupsafe: 2.1.1 -> 2.1.2
        py39-numexpr: 2.8.4 -> 2.8.4_1
        py39-numpy: 1.23.5_1,1 -> 1.24.1_1,1
        py39-pandas: 1.5.1,1 -> 1.5.3_1,1
        py39-requests: 2.28.1_1 -> 2.29.0
        py39-ujson: 5.0.0 -> 5.7.0
        py39-urllib3: 1.26.13,1 -> 1.26.15,1
        py39-vici: 5.9.9 -> 5.9.10
        py39-yaml: 5.4.1 -> 6.0
        python39: 3.9.16 -> 3.9.16_2
        radvd: 2.19_1 -> 2.19_2
        readline: 8.2.0 -> 8.2.1
        sqlite3: 3.40.1,1 -> 3.41.2,1
        squid: 5.7 -> 5.8
        strongswan: 5.9.9_1 -> 5.9.10_1
        sudo: 1.9.12p2 -> 1.9.13p3
        suricata: 6.0.9_1 -> 6.0.11_1
        syslog-ng: 3.38.1 -> 4.1.1
        unbound: 1.17.1_1 -> 1.17.1_2

Number of packages to be installed: 4
Number of packages to be upgraded: 69

The process will require 6 MiB more space.
90 MiB to be downloaded.
[1/73] Fetching unbound-1.17.1_2.pkg: .......... done
[2/73] Fetching php81-sqlite3-8.1.18.pkg: ... done
[3/73] Fetching php81-sockets-8.1.18.pkg: ..... done
[4/73] Fetching filterlog-0.7.pkg: . done
[5/73] Fetching dpinger-3.3.pkg: .. done
[6/73] Fetching lighttpd-1.4.69.pkg: .......... done
[7/73] Fetching libidn2-2.3.4.pkg: .......... done
[8/73] Fetching opnsense-update-23.1.6.pkg: ..... done
[9/73] Fetching py39-cryptography-3.4.8_1,1.pkg: .......... done
[10/73] Fetching openssl-1.1.1t_2,1.pkg: .......... done
[11/73] Fetching monit-5.33.0.pkg: .......... done
[12/73] Fetching nss-3.89.pkg: .......... done
[13/73] Fetching libunistring-1.1.pkg: .......... done
[14/73] Fetching py39-numpy-1.24.1_1,1.pkg: .......... done
[15/73] Fetching py39-markupsafe-2.1.2.pkg: .. done
[16/73] Fetching easy-rsa-3.1.2.pkg: ...... done
[17/73] Fetching py39-bottleneck-1.3.7_1.pkg: .......... done
[18/73] Fetching libcbor-0.10.2.pkg: .... done
[19/73] Fetching e2fsprogs-libuuid-1.47.0.pkg: ..... done
[20/73] Fetching py39-cython-0.29.34.pkg: .......... done
[21/73] Fetching openvpn-2.6.3.pkg: .......... done
[22/73] Fetching libnghttp2-1.52.0.pkg: .......... done
[23/73] Fetching py39-yaml-6.0.pkg: .......... done
[24/73] Fetching libxml2-2.10.4.pkg: .......... done
[25/73] Fetching php81-filter-8.1.18.pkg: ... done
[26/73] Fetching php81-8.1.18.pkg: .......... done
[27/73] Fetching py39-pandas-1.5.3_1,1.pkg: .......... done
[28/73] Fetching py39-dnspython-2.3.0,1.pkg: .......... done
[29/73] Fetching py39-urllib3-1.26.15,1.pkg: .......... done
[30/73] Fetching python39-3.9.16_2.pkg: .......... done
[31/73] Fetching icu-73.1,1.pkg: .......... done
[32/73] Fetching dnsmasq-2.89_1,1.pkg: .......... done
[33/73] Fetching py39-charset-normalizer-3.1.0.pkg: ........ done
[34/73] Fetching py39-requests-2.29.0.pkg: .......... done
[35/73] Fetching radvd-2.19_2.pkg: ....... done
[36/73] Fetching syslog-ng-4.1.1.pkg: .......... done
[37/73] Fetching py39-ujson-5.7.0.pkg: ...... done
[38/73] Fetching libpsl-0.21.2_3.pkg: ........ done
[39/73] Fetching py39-numexpr-2.8.4_1.pkg: .......... done
[40/73] Fetching libfido2-1.13.0.pkg: .......... done
[41/73] Fetching ca_root_nss-3.89.pkg: .......... done
[42/73] Fetching py39-vici-5.9.10.pkg: .. done
[43/73] Fetching php81-ctype-8.1.18.pkg: . done
[44/73] Fetching php81-simplexml-8.1.18.pkg: ... done
[45/73] Fetching libcjson-1.7.15_1.pkg: ..... done
[46/73] Fetching php81-session-8.1.18.pkg: ..... done
[47/73] Fetching pkcs11-helper-1.29.0.pkg: .......... done
[48/73] Fetching ifinfo-13.0_1.pkg: . done
[49/73] Fetching curl-8.0.1.pkg: .......... done
[50/73] Fetching php81-zlib-8.1.18.pkg: ... done
[51/73] Fetching php81-phalcon-5.2.1.pkg: .......... done
[52/73] Fetching php81-phpseclib-3.0.19.pkg: .......... done
[53/73] Fetching openssh-portable-9.2.p1,1.pkg: .......... done
[54/73] Fetching php81-dom-8.1.18.pkg: ........ done
[55/73] Fetching suricata-6.0.11_1.pkg: .......... done
[56/73] Fetching mpd5-5.9_14.pkg: .......... done
[57/73] Fetching sqlite3-3.41.2,1.pkg: .......... done
[58/73] Fetching php81-ldap-8.1.18.pkg: ..... done
[59/73] Fetching py39-Babel-2.12.1.pkg: .......... done
[60/73] Fetching openldap26-client-2.6.4.pkg: .......... done
[61/73] Fetching py39-certifi-2022.12.7.pkg: .......... done
[62/73] Fetching php81-xml-8.1.18.pkg: ... done
[63/73] Fetching php81-pdo-8.1.18.pkg: ....... done
[64/73] Fetching glib-2.76.2,2.pkg: .......... done
[65/73] Fetching php81-curl-8.1.18.pkg: ..... done
[66/73] Fetching php81-mbstring-8.1.18.pkg: .......... done
[67/73] Fetching opnsense-23.1.7_2.pkg: .......... done
[68/73] Fetching squid-5.8.pkg: .......... done
[69/73] Fetching strongswan-5.9.10_1.pkg: .......... done
[70/73] Fetching readline-8.2.1.pkg: .......... done
[71/73] Fetching sudo-1.9.13p3.pkg: .......... done
[72/73] Fetching php81-gettext-8.1.18.pkg: . done
[73/73] Fetching py39-idna-3.4_1.pkg: ......... done
Checking integrity... done (0 conflicting)
[1/73] Upgrading openssl from 1.1.1s,1 to 1.1.1t_2,1...
[1/73] Extracting openssl-1.1.1t_2,1: .......... done
[2/73] Upgrading readline from 8.2.0 to 8.2.1...
[2/73] Extracting readline-8.2.1: .......... done
[3/73] Upgrading python39 from 3.9.16 to 3.9.16_2...
[3/73] Extracting python39-3.9.16_2: .......... done
[4/73] Installing libunistring-1.1...
[4/73] Extracting libunistring-1.1: .......... done
[5/73] Installing libidn2-2.3.4...
[5/73] Extracting libidn2-2.3.4: .......... done
[6/73] Upgrading py39-cryptography from 3.4.8,1 to 3.4.8_1,1...
[6/73] Extracting py39-cryptography-3.4.8_1,1: .......... done
[7/73] Upgrading py39-numpy from 1.23.5_1,1 to 1.24.1_1,1...
[7/73] Extracting py39-numpy-1.24.1_1,1: .......... done
[8/73] Upgrading libxml2 from 2.10.3_1 to 2.10.4...
[8/73] Extracting libxml2-2.10.4: .......... done
[9/73] Upgrading icu from 72.1,1 to 73.1,1...
[9/73] Extracting icu-73.1,1: .......... done
[10/73] Upgrading libcjson from 1.7.15 to 1.7.15_1...
[10/73] Extracting libcjson-1.7.15_1: .......... done
[11/73] Upgrading sqlite3 from 3.40.1,1 to 3.41.2,1...
[11/73] Extracting sqlite3-3.41.2,1: .......... done
[12/73] Upgrading py39-bottleneck from 1.3.5 to 1.3.7_1...
[12/73] Extracting py39-bottleneck-1.3.7_1: .......... done
[13/73] Upgrading libcbor from 0.9.0 to 0.10.2...
[13/73] Extracting libcbor-0.10.2: .......... done
[14/73] Upgrading py39-cython from 0.29.32 to 0.29.34...
[14/73] Extracting py39-cython-0.29.34: .......... done
[15/73] Upgrading libnghttp2 from 1.51.0 to 1.52.0...
[15/73] Extracting libnghttp2-1.52.0: .......... done
[16/73] Upgrading php81 from 8.1.14 to 8.1.18...
[16/73] Extracting php81-8.1.18: .......... done
[17/73] Upgrading libpsl from 0.21.2 to 0.21.2_3...
[17/73] Extracting libpsl-0.21.2_3: .......... done
[18/73] Upgrading py39-numexpr from 2.8.4 to 2.8.4_1...
[18/73] Extracting py39-numexpr-2.8.4_1: .......... done
[19/73] Upgrading ca_root_nss from 3.87 to 3.89...
[19/73] Extracting ca_root_nss-3.89: ...... done
[20/73] Upgrading py39-certifi from 2022.9.24 to 2022.12.7...
[20/73] Extracting py39-certifi-2022.12.7: .......... done
[21/73] Upgrading py39-idna from 3.4 to 3.4_1...
[21/73] Extracting py39-idna-3.4_1: .......... done
[22/73] Upgrading nss from 3.87 to 3.89...
[22/73] Extracting nss-3.89: .......... done
[23/73] Upgrading py39-markupsafe from 2.1.1 to 2.1.2...
[23/73] Extracting py39-markupsafe-2.1.2: .......... done
[24/73] Installing easy-rsa-3.1.2...
[24/73] Extracting easy-rsa-3.1.2: .......... done
[25/73] Upgrading e2fsprogs-libuuid from 1.46.5_1 to 1.47.0...
[25/73] Extracting e2fsprogs-libuuid-1.47.0: .......... done
[26/73] Upgrading py39-yaml from 5.4.1 to 6.0...
[26/73] Extracting py39-yaml-6.0: .......... done
[27/73] Upgrading py39-pandas from 1.5.1,1 to 1.5.3_1,1...
[27/73] Extracting py39-pandas-1.5.3_1,1: .......... done
[28/73] Upgrading py39-urllib3 from 1.26.13,1 to 1.26.15,1...
[28/73] Extracting py39-urllib3-1.26.15,1: .......... done
[29/73] Upgrading py39-charset-normalizer from 3.0.1 to 3.1.0...
[29/73] Extracting py39-charset-normalizer-3.1.0: .......... done
[30/73] Upgrading libfido2 from 1.12.0 to 1.13.0...
[30/73] Extracting libfido2-1.13.0: .......... done
[31/73] Upgrading php81-session from 8.1.14 to 8.1.18...
[31/73] Extracting php81-session-8.1.18: .......... done
[32/73] Installing pkcs11-helper-1.29.0...
[32/73] Extracting pkcs11-helper-1.29.0: .......... done
[33/73] Upgrading curl from 7.87.0_1 to 8.0.1...
[33/73] Extracting curl-8.0.1: .......... done
[34/73] Upgrading py39-Babel from 2.11.0 to 2.12.1...
[34/73] Extracting py39-Babel-2.12.1: .......... done
[35/73] Upgrading openldap26-client from 2.6.3 to 2.6.4...
[35/73] Extracting openldap26-client-2.6.4: .......... done
[36/73] Upgrading php81-pdo from 8.1.14 to 8.1.18...
[36/73] Extracting php81-pdo-8.1.18: .......... done
[37/73] Upgrading glib from 2.74.4,2 to 2.76.2,2...
[37/73] Extracting glib-2.76.2,2: .......... done
[38/73] Upgrading php81-mbstring from 8.1.14 to 8.1.18...
[38/73] Extracting php81-mbstring-8.1.18: .......... done
[39/73] Upgrading unbound from 1.17.1_1 to 1.17.1_2...
===> Creating groups.
Using existing group 'unbound'.
===> Creating users
Using existing user 'unbound'.
[39/73] Extracting unbound-1.17.1_2: .......... done
[40/73] Upgrading php81-sqlite3 from 8.1.14 to 8.1.18...
[40/73] Extracting php81-sqlite3-8.1.18: ......... done
[41/73] Upgrading php81-sockets from 8.1.14 to 8.1.18...
[41/73] Extracting php81-sockets-8.1.18: .......... done
[42/73] Upgrading filterlog from 0.6 to 0.7...
[42/73] Extracting filterlog-0.7: .... done
[43/73] Upgrading dpinger from 3.2 to 3.3...
[43/73] Extracting dpinger-3.3: .... done
[44/73] Upgrading lighttpd from 1.4.67 to 1.4.69...
===> Creating groups.
Using existing group 'www'.
===> Creating users
Using existing user 'www'.
[44/73] Extracting lighttpd-1.4.69: .......... done
[45/73] Upgrading opnsense-update from 23.1 to 23.1.6...
[45/73] Extracting opnsense-update-23.1.6: .......... done
[46/73] Upgrading monit from 5.32.0 to 5.33.0...
[46/73] Extracting monit-5.33.0: ....... done
[47/73] Upgrading openvpn from 2.5.8 to 2.6.3...
===> Creating groups.
Using existing group 'openvpn'.
===> Creating users
Using existing user 'openvpn'.
[47/73] Extracting openvpn-2.6.3: .......... done
[48/73] Upgrading php81-filter from 8.1.14 to 8.1.18...
[48/73] Extracting php81-filter-8.1.18: ......... done
[49/73] Upgrading py39-dnspython from 2.2.1_1,1 to 2.3.0,1...
[49/73] Extracting py39-dnspython-2.3.0,1: .......... done
[50/73] Upgrading dnsmasq from 2.88_1,1 to 2.89_1,1...
[50/73] Extracting dnsmasq-2.89_1,1: .......... done
[51/73] Upgrading py39-requests from 2.28.1_1 to 2.29.0...
[51/73] Extracting py39-requests-2.29.0: .......... done
[52/73] Upgrading radvd from 2.19_1 to 2.19_2...
[52/73] Extracting radvd-2.19_2: .......... done
[53/73] Upgrading syslog-ng from 3.38.1 to 4.1.1...
[53/73] Extracting syslog-ng-4.1.1: .......... done
[54/73] Upgrading py39-ujson from 5.0.0 to 5.7.0...
[54/73] Extracting py39-ujson-5.7.0: ......... done
[55/73] Upgrading py39-vici from 5.9.9 to 5.9.10...
[55/73] Extracting py39-vici-5.9.10: .......... done
[56/73] Upgrading php81-ctype from 8.1.14 to 8.1.18...
[56/73] Extracting php81-ctype-8.1.18: ........ done
[57/73] Upgrading php81-simplexml from 8.1.14 to 8.1.18...
[57/73] Extracting php81-simplexml-8.1.18: ......... done
[58/73] Upgrading ifinfo from 13.0 to 13.0_1...
[58/73] Extracting ifinfo-13.0_1: .... done
[59/73] Upgrading php81-zlib from 8.1.14 to 8.1.18...
[59/73] Extracting php81-zlib-8.1.18: ........ done
[60/73] Upgrading php81-phalcon from 5.1.4 to 5.2.1...
[60/73] Extracting php81-phalcon-5.2.1: ........ done
[61/73] Upgrading php81-phpseclib from 3.0.18 to 3.0.19...
[61/73] Extracting php81-phpseclib-3.0.19: ......... done
[62/73] Upgrading openssh-portable from 8.9.p1_4,1 to 9.2.p1,1...
[62/73] Extracting openssh-portable-9.2.p1,1: .......... done
[63/73] Upgrading php81-dom from 8.1.14 to 8.1.18...
[63/73] Extracting php81-dom-8.1.18: .......... done
[64/73] Upgrading suricata from 6.0.9_1 to 6.0.11_1...
[64/73] Extracting suricata-6.0.11_1: .......... done
[65/73] Upgrading mpd5 from 5.9_13 to 5.9_14...
[65/73] Extracting mpd5-5.9_14: .......... done
[66/73] Upgrading php81-ldap from 8.1.14 to 8.1.18...
[66/73] Extracting php81-ldap-8.1.18: ........ done
[67/73] Upgrading php81-xml from 8.1.14 to 8.1.18...
[67/73] Extracting php81-xml-8.1.18: ......... done
[68/73] Upgrading php81-curl from 8.1.14 to 8.1.18...
[68/73] Extracting php81-curl-8.1.18: .......... done
[69/73] Upgrading squid from 5.7 to 5.8...
===> Creating groups.
Using existing group 'squid'.
===> Creating users
Using existing user 'squid'.
===> Creating homedir(s)
===> Pre-installation configuration for squid-5.8
[69/73] Extracting squid-5.8: .......... done
[70/73] Upgrading strongswan from 5.9.9_1 to 5.9.10_1...
[70/73] Extracting strongswan-5.9.10_1: .......... done
[71/73] Upgrading sudo from 1.9.12p2 to 1.9.13p3...
[71/73] Extracting sudo-1.9.13p3: .......... done
[72/73] Upgrading php81-gettext from 8.1.14 to 8.1.18...
[72/73] Extracting php81-gettext-8.1.18: ........ done
[73/73] Upgrading opnsense from 23.1 to 23.1.7_2...
[73/73] Extracting opnsense-23.1.7_2: .......... done
Stopping configd...done
Resetting root shell
Updating /etc/shells
Unhooking from /etc/rc
Unhooking from /etc/rc.shutdown
Updating /etc/shells
Registering root shell
Hooking into /etc/rc
Hooking into /etc/rc.shutdown
Starting configd.
>>> Invoking update script 'refresh'
Migrated OPNsense\Core\Firmware from 1.0.0 to 1.0.1
Migrated OPNsense\Cron\Cron from 1.0.3 to 1.0.4
Migrated OPNsense\Proxy\Proxy from 1.0.5 to 1.0.6
Writing firmware setting...done.
Writing trust files...done.
Configuring login behaviour...done.
Configuring system logging...done.
Generating GIO modules cache
Compiling glib schemas
No schema files found: doing nothing.
=====
Message from easy-rsa-3.1.2:

--
NOTE: easy-rsa will require you to initialize a pki ONLY UPON FIRST USE.
The packaging itself no longer does this because that would confuse easy-rsa,
and easy-rsa expects the vars not to be per-installation, but per-PKI.

ONLY for the very first run for a new PKI, do something such as:

  easyrsa --pki-dir=~/my_new_pki init-pki # DANGEROUS - DESTROYS ~/my_new_pki
  which will copy vars.example both into ~/my_new_pki
  and create another copy named ~/my/new_pki/vars for you to edit for this PKI.

  Then, edit ~/my/new_pki/vars to set the defaults.

After upgrades, use other commands, explained by running: easyrsa help.
to explain options such as --pki-dir (see above), run: easyrsa help options
=====
Message from py39-urllib3-1.26.15,1:

--
Since version 1.25 HTTPS connections are now verified by default which is done
via "cert_reqs = 'CERT_REQUIRED'".  While certificate verification can be
disabled via "cert_reqs = 'CERT_NONE'", it's highly recommended to leave it on.

Various consumers of net/py-urllib3 already have implemented routines that
either explicitly enable or disable HTTPS certificate verification (e.g. via
configuration settings, CLI arguments, etc.).

Yet it may happen that there are still some consumers which don't explicitly
enable/disable certificate verification for HTTPS connections which could then
lead to errors (as is often the case with self-signed certificates).

In case of an error one should try first to temporarily disable certificate
verification of the problematic urllib3 consumer to see if that approach will
remedy the issue.
=====
Message from openvpn-2.6.3:

--
Note that OpenVPN now configures a separate user and group "openvpn",
which should be used instead of the NFS user "nobody"
when an unprivileged user account is desired.

It is advisable to review existing configuration files and
to consider adding/changing user openvpn and group openvpn.
=====
Message from dnsmasq-2.89_1,1:

--
To enable dnsmasq, edit /usr/local/etc/dnsmasq.conf and
set dnsmasq_enable="YES" in /etc/rc.conf[.local]

Further options and actions are documented inside
/usr/local/etc/rc.d/dnsmasq

SECURITY RECOMMENDATION
~~~~~~~~~~~~~~~~~~~~~~~
It is recommended to enable the wpad-related options
at the end of the configuration file (you may need to
copy them from the example file to yours) to fix
CERT Vulnerability VU#598349.
You may need to manually remove /usr/local/etc/syslog-ng.conf if it is no longer needed.
You may need to manually remove /usr/local/etc/ssh/sshd_config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/classification.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/reference.config if it is no longer needed.
You may need to manually remove /usr/local/etc/suricata/suricata.yaml if it is no longer needed.
You may need to manually remove /usr/local/etc/squid/squid.conf if it is no longer needed.
=====
Message from strongswan-5.9.10_1:

--
The default strongSwan configuration interface have been updated to vici.
To use the stroke interface by default either compile the port without the vici option or
set 'strongswan_interface="stroke"' in your rc.conf file.
=====
Message from opnsense-23.1.7_2:

--
I'm no chicken
Checking integrity... done (0 conflicting)
Deinstallation has been requested for the following 1 packages:

Installed packages to be REMOVED:
        icu: 73.1,1

Number of packages to be removed: 1

The operation will free 53 MiB.
[1/1] Deinstalling icu-73.1,1...
[1/1] Deleting files for icu-73.1,1: .......... done
Checking all packages: .......... done
The following package files will be deleted:
        /var/cache/pkg/pkg-1.19.1_1~1a5ad82529.pkg
        /var/cache/pkg/unbound-1.17.1_2.pkg
        /var/cache/pkg/pkg-1.19.1_1.pkg
        /var/cache/pkg/unbound-1.17.1_2~7ebb0056b5.pkg
        /var/cache/pkg/php81-sqlite3-8.1.18~208e7a7085.pkg
        /var/cache/pkg/filterlog-0.7~3e486c2784.pkg
        /var/cache/pkg/php81-sqlite3-8.1.18.pkg
        /var/cache/pkg/php81-sockets-8.1.18~f9273f4d46.pkg
        /var/cache/pkg/php81-sockets-8.1.18.pkg
        /var/cache/pkg/filterlog-0.7.pkg
        /var/cache/pkg/dpinger-3.3~f23cd72f13.pkg
        /var/cache/pkg/dpinger-3.3.pkg
        /var/cache/pkg/lighttpd-1.4.69~34adbbdc0a.pkg
        /var/cache/pkg/nss-3.89.pkg
        /var/cache/pkg/openssl-1.1.1t_2,1.pkg
        /var/cache/pkg/lighttpd-1.4.69.pkg
        /var/cache/pkg/libidn2-2.3.4~8277d16597.pkg
        /var/cache/pkg/libidn2-2.3.4.pkg
        /var/cache/pkg/opnsense-update-23.1.6~567a865e3e.pkg
        /var/cache/pkg/py39-cryptography-3.4.8_1,1.pkg
        /var/cache/pkg/opnsense-update-23.1.6.pkg
        /var/cache/pkg/py39-cryptography-3.4.8_1,1~8f66e9abc1.pkg
        /var/cache/pkg/openssl-1.1.1t_2,1~0cbd9bb6bc.pkg
        /var/cache/pkg/monit-5.33.0~f186f9f348.pkg
        /var/cache/pkg/nss-3.89~22ec9001eb.pkg
        /var/cache/pkg/monit-5.33.0.pkg
        /var/cache/pkg/libunistring-1.1~fac69bf754.pkg
        /var/cache/pkg/easy-rsa-3.1.2.pkg
        /var/cache/pkg/py39-numpy-1.24.1_1,1.pkg
        /var/cache/pkg/libunistring-1.1.pkg
        /var/cache/pkg/py39-numpy-1.24.1_1,1~29f069451f.pkg
        /var/cache/pkg/py39-markupsafe-2.1.2~029b761214.pkg
        /var/cache/pkg/easy-rsa-3.1.2~b32d34861e.pkg
        /var/cache/pkg/py39-markupsafe-2.1.2.pkg
        /var/cache/pkg/py39-bottleneck-1.3.7_1~02e545e273.pkg
        /var/cache/pkg/libcbor-0.10.2~2b52e2b91c.pkg
        /var/cache/pkg/py39-bottleneck-1.3.7_1.pkg
        /var/cache/pkg/libcbor-0.10.2.pkg
        /var/cache/pkg/e2fsprogs-libuuid-1.47.0~6373132c78.pkg
        /var/cache/pkg/py39-cython-0.29.34~3c0c3c3fb7.pkg
        /var/cache/pkg/openvpn-2.6.3.pkg
        /var/cache/pkg/e2fsprogs-libuuid-1.47.0.pkg
        /var/cache/pkg/php81-8.1.18~6e6318e87d.pkg
        /var/cache/pkg/py39-cython-0.29.34.pkg
        /var/cache/pkg/openvpn-2.6.3~1726aaad2f.pkg
        /var/cache/pkg/libnghttp2-1.52.0~e4d7532885.pkg
        /var/cache/pkg/libnghttp2-1.52.0.pkg
        /var/cache/pkg/py39-yaml-6.0~4d1640da29.pkg
        /var/cache/pkg/py39-yaml-6.0.pkg
        /var/cache/pkg/libxml2-2.10.4~5ff10b3325.pkg
        /var/cache/pkg/libxml2-2.10.4.pkg
        /var/cache/pkg/php81-filter-8.1.18~608573ece2.pkg
        /var/cache/pkg/php81-filter-8.1.18.pkg
        /var/cache/pkg/php81-8.1.18.pkg
        /var/cache/pkg/py39-pandas-1.5.3_1,1~79f15233c9.pkg
        /var/cache/pkg/py39-pandas-1.5.3_1,1.pkg
        /var/cache/pkg/py39-dnspython-2.3.0,1~cb23cea769.pkg
        /var/cache/pkg/py39-dnspython-2.3.0,1.pkg
        /var/cache/pkg/py39-urllib3-1.26.15,1~4e89421b49.pkg
        /var/cache/pkg/py39-urllib3-1.26.15,1.pkg
        /var/cache/pkg/python39-3.9.16_2~0a5587b3ae.pkg
        /var/cache/pkg/icu-73.1,1~6bf6e9eae2.pkg
        /var/cache/pkg/python39-3.9.16_2.pkg
        /var/cache/pkg/icu-73.1,1.pkg
        /var/cache/pkg/dnsmasq-2.89_1,1~61457a6cf8.pkg
        /var/cache/pkg/dnsmasq-2.89_1,1.pkg
        /var/cache/pkg/py39-charset-normalizer-3.1.0~51672a96fc.pkg
        /var/cache/pkg/py39-charset-normalizer-3.1.0.pkg
        /var/cache/pkg/py39-requests-2.29.0~910d2e94e4.pkg
        /var/cache/pkg/radvd-2.19_2~5ee37e99ba.pkg
        /var/cache/pkg/py39-requests-2.29.0.pkg
        /var/cache/pkg/radvd-2.19_2.pkg
        /var/cache/pkg/syslog-ng-4.1.1~3456c485b9.pkg
        /var/cache/pkg/syslog-ng-4.1.1.pkg
        /var/cache/pkg/py39-ujson-5.7.0~b59962f2f7.pkg
        /var/cache/pkg/py39-ujson-5.7.0.pkg
        /var/cache/pkg/libpsl-0.21.2_3~d6b9c8692e.pkg
        /var/cache/pkg/libpsl-0.21.2_3.pkg
        /var/cache/pkg/py39-numexpr-2.8.4_1~b4edd41ba6.pkg
        /var/cache/pkg/libfido2-1.13.0~f23e8beeca.pkg
        /var/cache/pkg/py39-numexpr-2.8.4_1.pkg
        /var/cache/pkg/ca_root_nss-3.89~2e9bb56e74.pkg
        /var/cache/pkg/libfido2-1.13.0.pkg
        /var/cache/pkg/ca_root_nss-3.89.pkg
        /var/cache/pkg/py39-vici-5.9.10~38c36e4898.pkg
        /var/cache/pkg/py39-vici-5.9.10.pkg
        /var/cache/pkg/php81-ctype-8.1.18~6fcc4bd43e.pkg
        /var/cache/pkg/php81-ctype-8.1.18.pkg
        /var/cache/pkg/php81-simplexml-8.1.18~7692254a68.pkg
        /var/cache/pkg/php81-simplexml-8.1.18.pkg
        /var/cache/pkg/libcjson-1.7.15_1~435f9a6c60.pkg
        /var/cache/pkg/libcjson-1.7.15_1.pkg
        /var/cache/pkg/php81-session-8.1.18~c288f2c01b.pkg
        /var/cache/pkg/php81-session-8.1.18.pkg
        /var/cache/pkg/pkcs11-helper-1.29.0~dc6bb9e79d.pkg
        /var/cache/pkg/ifinfo-13.0_1~bbbf1eee8e.pkg
        /var/cache/pkg/pkcs11-helper-1.29.0.pkg
        /var/cache/pkg/ifinfo-13.0_1.pkg
        /var/cache/pkg/curl-8.0.1~0299f1183b.pkg
        /var/cache/pkg/curl-8.0.1.pkg
        /var/cache/pkg/php81-zlib-8.1.18~3bd927326d.pkg
        /var/cache/pkg/php81-zlib-8.1.18.pkg
        /var/cache/pkg/php81-phalcon-5.2.1~e83577e83a.pkg
        /var/cache/pkg/php81-phalcon-5.2.1.pkg
        /var/cache/pkg/php81-phpseclib-3.0.19~9f71aa0819.pkg
        /var/cache/pkg/php81-phpseclib-3.0.19.pkg
        /var/cache/pkg/openssh-portable-9.2.p1,1~9759ccd2a7.pkg
        /var/cache/pkg/php81-dom-8.1.18~d29460d705.pkg
        /var/cache/pkg/openssh-portable-9.2.p1,1.pkg
        /var/cache/pkg/php81-dom-8.1.18.pkg
        /var/cache/pkg/suricata-6.0.11_1~2cf3cee147.pkg
        /var/cache/pkg/mpd5-5.9_14~db0e0264bc.pkg
        /var/cache/pkg/suricata-6.0.11_1.pkg
        /var/cache/pkg/mpd5-5.9_14.pkg
        /var/cache/pkg/sqlite3-3.41.2,1~a2bb406adc.pkg
        /var/cache/pkg/sqlite3-3.41.2,1.pkg
        /var/cache/pkg/php81-ldap-8.1.18~4c7efa5ff4.pkg
        /var/cache/pkg/php81-ldap-8.1.18.pkg
        /var/cache/pkg/py39-Babel-2.12.1~6bdb26f466.pkg
        /var/cache/pkg/py39-Babel-2.12.1.pkg
        /var/cache/pkg/openldap26-client-2.6.4~cb21b576e0.pkg
        /var/cache/pkg/php81-xml-8.1.18.pkg
        /var/cache/pkg/openldap26-client-2.6.4.pkg
        /var/cache/pkg/py39-certifi-2022.12.7~5ce6c6d0a7.pkg
        /var/cache/pkg/php81-xml-8.1.18~cadf8cebaf.pkg
        /var/cache/pkg/py39-certifi-2022.12.7.pkg
        /var/cache/pkg/php81-pdo-8.1.18~557f989538.pkg
        /var/cache/pkg/php81-pdo-8.1.18.pkg
        /var/cache/pkg/glib-2.76.2,2~cd317bf45f.pkg
        /var/cache/pkg/glib-2.76.2,2.pkg
        /var/cache/pkg/php81-curl-8.1.18~37e44f094c.pkg
        /var/cache/pkg/php81-curl-8.1.18.pkg
        /var/cache/pkg/php81-mbstring-8.1.18~3054956199.pkg
        /var/cache/pkg/php81-mbstring-8.1.18.pkg
        /var/cache/pkg/opnsense-23.1.7_2~5e5f1e558d.pkg
        /var/cache/pkg/squid-5.8~df916416c5.pkg
        /var/cache/pkg/opnsense-23.1.7_2.pkg
        /var/cache/pkg/squid-5.8.pkg
        /var/cache/pkg/strongswan-5.9.10_1~c4e0b508fc.pkg
        /var/cache/pkg/strongswan-5.9.10_1.pkg
        /var/cache/pkg/readline-8.2.1~7d9e97a515.pkg
        /var/cache/pkg/readline-8.2.1.pkg
        /var/cache/pkg/sudo-1.9.13p3~fd1f644db2.pkg
        /var/cache/pkg/sudo-1.9.13p3.pkg
        /var/cache/pkg/php81-gettext-8.1.18~80b3dae2dc.pkg
        /var/cache/pkg/py39-idna-3.4_1~60e082b354.pkg
        /var/cache/pkg/php81-gettext-8.1.18.pkg
        /var/cache/pkg/py39-idna-3.4_1.pkg
The cleanup will free 94 MiB
Deleting files: .......... done
All done
Nothing to do.
Starting web GUI...done.
Generating RRD graphs...done.
Fetching base-23.1.6-amd64.txz: ...


All ideas are welcome :-)
Many Thanks and kind regards