Messages

I've seen the same timeout issue with just the regular Crowdsec setup, and with my Zoraxy plug-in (bouncer) on my reverse proxy.  The decisions didn't show and I just got the spinning wheel of death.  I think I only had to refresh the view by clicking on something else, then going back to it in the GUI.

Now if I can just get it to stop punching itself in the face....
(Meaning, it tells me to update to 1.8.2, identifies itself as being at 1.8.1_2, and telling me everything is fine, even after reinstalling it all).

Well first, I don't know why you're using the Community Edition for business, but secondly, your list appears that it would be a FreeBSD issue and/or the providers of the packages that would need to update them, wouldn't it? OPN isn't the developer for packages/plugins and they are actually quite active in letting FreeBSD know about issues that are problematic.

Things like Unbound don't have to be used in the firewall.  I don't use it on OPN, I maintain recursive DNS servers separate from OPN that use Unbound.  Instead, you could use another package other than keeping it on the firewall, or alternative that's offered in OPN. Disabling SSH should be your go-to anyways, so it can't even be used, and only turn it on when/if you need it.

Franco is really, really good about getting updates out as quickly as they are available, but they aren't necessarily his responsibility for updating them.

And if you wait for every package to be patched, you're essentially going to play whack a mole, because there's always something found, something fixed.  The PHP2Shell vulns have been around for 10 years, and they were only discovered because AI found them, not a hacktivist.  So, you'd be waiting forever to put something into production.

Yeah, I read that too which is what's perplexing and filtering doesn't seem to be consistent, because I have multiple DNS names in my exception alias, and one of them is this domain we are at, lol.  But others simply won't go through.  The only thing I can figure is what I saw in the referenced post about Crowdsec hosting in Ireland which I tend to receive a lot of port scanning and it's on my GeoIP blocklist. I confirmed it's GeoIP blocking, because I can disable the rule and everything is accessible.

I even forced the tables to update after making the changes in SSH, and it didn't update.

I'll double check the rule I have in place, as I believe that I have my Interface set to 'any' and see how that impacts my exceptions.

Referencing this post: https://forum.opnsense.org/index.php?topic=47580.0

I was trying to get a GeoIP exception list to work, which I can't seem to get to work, and restarted the Crowdsec service to restart from the Dashboard Services.  When I did that, Crowdsec refused to start, even after rebooting the OPN machine.

Following that post, I found it odd that I had to disable the ruleset to get it started. 

1.Has there been a workaround planned or in place that I am missing, and...
2.Has anyone had any luck with creating an exception list by DNS names?  I even asked Grok about solutions, which was to put my alias in a network group alias and replace my rule with that group.  It told me that IPs were preferred, but domain names sometimes have multiple providers/IPs and that's going to be more time consuming.  It's just easier to disable GeoIP, get what I want, then re-enable it. Not a great solution, and yes my rule is above the GeoIP rule.

Well, themes need to be maintained. Got downvoted on a discussion about services widget on Reddit so please throw actual usable ideas around instead of saying it's really bad. There are people who really like it too and said so, which is way less common than people complaining :)

Improved the colouring a little with the below patch, but in the end the theme is fully in charge which was the main design point to avoid complains it looks silly in themes and can't be overridden by themes.

# opnsense-patch https://github.com/opnsense/core/commit/ace8f12f51


Cheers,
Franco

My only issue with it is apparently theme-based colors, lol.


https://imgur.com/a/Lr8YMi9

@Patrick, can you get into Services->NUT->Configuration? I am seeing a crash when I try. I can get into Diagnostics and it shows my UPS status, so it appears that NUT is running. I tried uninstalling and reinstalling the NUT plugin, but that did not fix it.

Having the same issue (I just posted about above).

- Nut is finally working again with the default packages.

Unfortunately, it's not for me.  I had NUT previously installed using the latest OPN version prior to this one (26.1.11_10) but wasn't providing any diagnostic information, so I uninstalled it and did not revert to the previous version.

Rebooted prior to my 26.7 upgrade this morning after removing the intel-microcode plugin (after reading about the issues it was apparently causing during upgrade), and upgraded to 26.7 without issue.

So, I tried to install NUT after reading this post, and the configurations apparently remain even after uninstalling from yesterday, because the only thing that works is the diagnostics page.  The configuration page throws an error which I sent the issue via the OPNSense report button off.

I have nothing outlandishly installed on OPN, so there is still an issue with this plugin that perhaps you can see with my config that I reported.

Edit: (Patrick, I didn't see the other posts past your acknowledgement of NUT issues, lol)

After several months of using opnsense and a couple of firmware updates to it, I still get this issue:

https://forum.opnsense.org/index.php?topic=41676.msg204737#msg204737

I just experienced it today. Is this not yet fixed?

Here are some logs that triggered today:

https://gist.github.com/kevindd992002/bd55652b9847ca0af03e0d3c24f45957

The WAN gateway never went online until either I restarted the VM or manually renewed the WAN connection in the opnsense GUI.

I had this problem when I lost internet connectivity before, and it was dpinger not coming back up, so the service had to be started and it worked.  It was later a non-issue for me, as I believe it was corrected after an update, but was back in maybe version 23 into 24?

What are you using as DNS?

Are you country blocking?

Odd... so all of a sudden they reappeared out of thin air in the Overview.

The only thing I did was unplug my ONT transceiver to add a fan housing to it and plugged it back in.

¯\_(ツ)_/¯

At least you still have your Interfaces, mine all disappeared, lol.

Sounds like https://forum.opnsense.org/index.php?topic=45194.0

Accessing the area in that post gives me no errors, no pop-ups and my two Gateways are present, as is on the Dashboard widget, so I am not experiencing this issue.
I am also online (as i am typing these), but it's just the Interfaces, not the Gateways that have gone missing completely.

As I already stated, I removed and re-added it, and nothing showed up.

The interfaces on the overview may need the table expanded as well or including downed interfaces

There was nothing changed, and all of my interfaces were there showing by default.  I've already put it to show All, there is nothing there anymore.

Updated this morning, and the Interfaces are gone, which also is not theme specific.  Also tried removing/re-adding it back to the dashboard, and the interfaces are no longer listed  Gateways are still there and visible.

Edit:  Just also noticed that the 'Overview' tab (Interfaces > Overview) is also missing all the interfaces listed, which is probably why the dashboard isn't showing as well?

Did you inquire about this on the 8311 Discord server?  They are pretty helpful over there too.