Messages

I changed some rules from alert fnf to drop individually at first before I figured how to use policies. There is the text "We strongly advice you to use policies instead of single rule adjustment" or similar.

Is it normal that the text stays there or should it dissappear once you've changed all the rules to their default? I changed each one back to alert by hand, since there is no reset all to default button? I don't see any rules with drop action anymore using the search, but the text is still there.

I think that message is just a general recommendation and not dynamically removed after rule changes. If there are no drop actions left in the rules, the configuration should already be fine.

I updated my OPNSense firewall and installed Zenarmor. Before I installed it, I did a health audit and there were no errors. After installation of Zenarmor, I did another health audit and find the following error:

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 24.7.9_1 (amd64) at Wed Nov 20 14:25:46 PST 2024
>>> Root file system: zroot/ROOT/default
>>> Check installed kernel version
Version 24.7.8 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 24.7.8 is correct.
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
   size (299, 333)
   sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x8cc5c942d7c5827a96087f872ae6ef860d1dd42172f226acf925b98181eda850)
>>> Check installed repositories
OPNsense (Priority: 11)
SunnyValley (Priority: 7)
>>> Check installed plugins
os-cpu-microcode-intel 1.0
os-etpro-telemetry 1.7_5
os-google-cloud-sdk 1.0_1
os-sensei 1.18.3
os-sensei-agent 1.18.3
os-sensei-updater 1.17
os-sunnyvalley 1.4_3
os-theme-cicada 1.38
os-upnp 1.7
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency Monkey Mart
Core package "opnsense" at 24.7.9_1 has 69 dependencies to check.
Checking packages: ...................................................................... done
***DONE***

You can compare the current file with a backup or default version to identify changes. Reverting or adjusting settings might resolve the health audit error.