Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - TestUserPleaseIgnore

#1
I am currently implementing NordVPN on an OPNsense firewall, following Nord's official configuration guide for OPNsense 21 (available at: https://support.nordvpn.com/hc/en-us/articles/20397569418129-OPNsense-21-setup-with-NordVPN). While the guide is somewhat dated, I believe it remains applicable in principle.

The challenge I'm encountering is inconsistent routing behavior. The VPN connection to NordVPN establishes reliably, indicating that the OpenVPN client configuration is likely correct. However, traffic routing is erratic: at times, it adheres to the configured firewall rules and traverses the VPN as intended, while at other times, it bypasses these rules entirely, defaulting to the LAN interface. Intriguingly, I've observed that deleting and re-adding a firewall rule temporarily restores proper routing. Yet, this fix is fleeting—any subsequent configuration changes or a system reboot typically reverts the setup to its malfunctioning state.

I suspect the issue may stem from rule application, timing discrepancies, or an underlying configuration conflict. Could you recommend specific logs I might analyze to diagnose this behavior further? Are there particular settings I should scrutinize to ensure proper operation? Additionally, any insights into potential missteps in my configuration would be greatly appreciated.

Thank you for your expertise!
#2
Still getting the:
'Zroot' has encountered a I/O failure and has been suspended.

Have not got the other one yet.

So in playing with it, and watching I looks to me its crashing when it needs to write the ram disk to the physical disk. Could this be an issue with ZFS?

I have a new disk coming from Amazon, and I've put in a new stick of ram.
#3
Ran for roughly 48 hours then got the same crash. Any further ideas?
#4
Would running off a USB thumb drive be a suitable test for a while?
#5
Sorry it didn't attach correctly
#6
What logs Can i provide? I keep getting a few consistant errors.
One is :
kern.ipc.maxpipekva exceeded see tuning(7)
'Zroot' has encountered a I/o failure and has been suspended.

Disk passes smart, Ram passes ram test. And no issues prior to my move to .5.

I've attached logs if anyone would be kind enough to tell me what I've done wrong.
#7
Quote from: doktornotor on August 24, 2024, 06:01:52 PM
Uhm, no... those are images for testing, nothing released now. If you have some vintage HW which has /dev/agpgart and running <24.7.2 and do not want to play with kernel hints on boot or potentially reinstalling, just leave it alone. If you cannot live without updating, only use the method mentioned in this post.

I tested this on a modern CPU 5700G and it still happened. Its not about hardware age.
#8
Does this mean its safe to use the firmware update in the GUI at this time?
#9
Quote from: mifi42 on August 23, 2024, 02:28:08 PM
I am using dvd  (iso image for DVD+R)

Quote from: franco on August 23, 2024, 02:18:18 PM
Which image types are you guys using here.. DVD or VGA?


Cheers,
Franco

I used VGA.
#10
I am willing to test it.

ZFS: yes
HW: Baracuda 220a (Intel Atom based d525)
Age: Based on CPU 10-12 years (Barracuda says it was sold new until 2016)
VM: No.
Kernel or corepackage: default

#11
Mine was identical to the OPs, maybe one of us could upgrade again to 24.7.2 and try to get you logs?
#12
Quote from: doktornotor on August 22, 2024, 05:05:57 PM
Quote from: TestUserPleaseIgnore on August 22, 2024, 04:30:23 PM
My box is/was a BARRACUDA BBS190A.

I dont think this device has an AGP port?

Well, it probably has some on-board graphics which presents as AGP to the system.

https://github.com/freebsd/freebsd-src/blob/main/sys/dev/agp/agp.c#L829
https://man.freebsd.org/cgi/man.cgi?query=agp&sektion=4&format=html

I think even the $14 on Ebay is too much for this kind of HW.
https://www.msi.com/Motherboard/N3150I-ECO/

For a good LMAO, see this video: https://www.youtube.com/watch?v=BKDRnu7KAKw - this things looks like a serious fire hazard to me and another WTF from Barracuda.


Quote from: rackenthogg on August 22, 2024, 05:05:13 PM
So reinstalling OPNSense with UFS filesystem is the fix?

If it's the above hardware, I'd reinstall it into a shredder.

Sorry I got the SKU wrong - its a BMF220a

https://servers4less.com/bmf220a-barracuda-im-firewall-220-1-x-vga-1-x-keyboard-1-x-10-100base-tx/?srsltid=AfmBOooz7IMXsHzVaYZvXeeg0x6_VUo4LlyN17G3oL46h4fffM9uepXL
#13
I've got the hardware that I've got, if you want to donate a new box to me I'd gladly take it.
#14
I am having the same error, what information do you need?

My box is/was a BARRACUDA BMF220A.

I dont think this device has an AGP port?