1
23.7 Legacy Series / Re: 'Random' Traffic from FW to Internet
« on: October 30, 2023, 01:35:32 am »
Many thanks Meyergru. I should definitely isloate the IoT devices.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
23.7 Legacy Series / 'Random' Traffic from FW to Internet
« on: October 29, 2023, 06:23:37 pm »
I am wondering what the 'random' and seemingly constant flow of trafffic from my f/w to the internet is...
I understand the destination of 8.8.8.8 and port 53, and I can understand a packet with a destination port of 443, but the overall sense that I get is that there's something INSIDE my network that is chatting away. The network is used by my wife and I. I do have a few devices on the network - several Apple TVs, a PS4, a Macbook or two, a PC or two, and several WAPs (Netgear R7000 running DD-WRT).
Please see the attached file as I could not figure out how to embed an image in the post. :-(
I understand the destination of 8.8.8.8 and port 53, and I can understand a packet with a destination port of 443, but the overall sense that I get is that there's something INSIDE my network that is chatting away. The network is used by my wife and I. I do have a few devices on the network - several Apple TVs, a PS4, a Macbook or two, a PC or two, and several WAPs (Netgear R7000 running DD-WRT).
Please see the attached file as I could not figure out how to embed an image in the post. :-(
3
23.7 Legacy Series / Re: Errors on Update from Console
« on: October 16, 2023, 10:28:07 pm »
Hi Franco,
When I executed
I poked around the system until i found the culprit - the DHCP logs filled up the disk. Not sure I understand why but it bears some looking into. Anyways, I removed the DHCP logs and then ran the bootstrap command again and the system rebuilt. After the reboot, all is back to normal!
Thanks for your help.
Ryan
When I executed
Code: [Select]
opnsense-bootstrap -ithe system returned a disk full error.I poked around the system until i found the culprit - the DHCP logs filled up the disk. Not sure I understand why but it bears some looking into. Anyways, I removed the DHCP logs and then ran the bootstrap command again and the system rebuilt. After the reboot, all is back to normal!
Thanks for your help.
Ryan
4
23.7 Legacy Series / Re: Errors on Update from Console
« on: October 16, 2023, 07:32:25 pm »
Franco,
Thanks for the response.
I neglected to mention that the GUI is BLANK except for the menu. I've attached a PNG of the screen.
Below I've included the textual data that follows the initial authentication failure. This may be superfluous since I'm failing auth, I presume the remaining actions would also fail.
I've rebooted the machine several times - newbie default action. :-/
Thanks,
Ryan
Thanks for the response.
I neglected to mention that the GUI is BLANK except for the menu. I've attached a PNG of the screen.
Below I've included the textual data that follows the initial authentication failure. This may be superfluous since I'm failing auth, I presume the remaining actions would also fail.
Quote
Fetching change log information, please wait... Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
33505417900032:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
fetch: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/sets/changelog.txz: Authentication error
This will automatically fetch all available updates and apply them.
Proceed with this action? [y/N]: y
Updating OPNsense repository catalogue...
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/latest/meta.txz: Authentication error
repository OPNsense has no meta file, using default settings
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/latest/packagesite.pkg: Authentication error
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
34927034368:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
pkg-static: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/latest/packagesite.txz: Authentication error
Unable to update repository OPNsense
Error updating repositories!
Starting web GUI...done.
Generating RRD graphs...done.
I've rebooted the machine several times - newbie default action. :-/
Thanks,
Ryan
5
23.7 Legacy Series / Errors on Update from Console
« on: October 16, 2023, 04:17:36 pm »
Selected Option 12 from SSH menu
Fetching change log information, please wait... Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
56577144918016:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
fetch: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/sets/changelog.txz: Authentication error
I've seen some references to replacing the certificate but am not comfortable doing this without some sort of confirmation.
Thanks in advance.
Ryan
Fetching change log information, please wait... Certificate verification failed for /OU=GlobalSign Root CA - R3/O=GlobalSign/CN=GlobalSign
56577144918016:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1921:
fetch: https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/sets/changelog.txz: Authentication error
I've seen some references to replacing the certificate but am not comfortable doing this without some sort of confirmation.
Thanks in advance.
Ryan
Pages: [1]