Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - ynth

#1
Hello

I am facing a strange situation when NAXSI blocks json request for a web site. The error message states that NAXSI is blocking due to id0=15..

The only way managed to bypass the error was to manually edit the ngix.conf file on location section and add the line :


location  / {
    SecRulesEnabled;
    BasicRule wl:19;
    BasicRule wl:15; --ADDED--


Which on next NGING reload from the gui will be gone.

As per the GitHub Rule 15 is the following :
invalid_json
id: 15
action: block
impact: pass-thru on BODY (json)
JSON is malformed (ie. missing } ]).


Is there any alternative to either disable NXSI Internal rule 15 or somehow to keep the added line on the nginx.conf file ?


Best Regards

#2
Ignore it. There is no issue.
My bad.
#3
Hello

Ignore it

Regards
#4
Hello

I did generate a new pair of API keys /secret for the node , applied to the OPNCentral for that node and now I can access the node.
#5
Hello

I am facing same issue today. It was working 3 days before and now web access to the host is not working with the message :
Please upgrade the node to the latest Business Edition and make sure your browser can connect to it

I have upgrade both central node and host to latest updates. Host access is working when trying to access with the url.

Versions
OPNsense 25.4-amd64
FreeBSD 14.2-RELEASE-p2
Licensed until   2025-05-11
os-OPNBEcore (installed)   1.5_1   197KiB   1   OPNsense   OPNsense Business Edition add-ons   
os-OPNcentral (installed)   1.11_1   1.01MiB   1   OPNsense   OPNsense central management
#6
General Discussion / Re: OPNsesnse 25.1.5_4 CE to BE
April 17, 2025, 12:53:02 PM
Hello

I followed those steps  on the current and working CE OPNsense :

Under System -> Firmware -> Settings I changed.

Change Mirror to Deciso (HTTPS, NL, Commercial)
Select Type = Business
Entered Subscription Key
Save and the update

After that the current OPNsense CE changed to BE.

So case is solved.

Regards


#7
General Discussion / OPNsesnse 25.1.5_4 CE to BE
April 15, 2025, 01:36:59 PM
Hello
I am straggling to upgrade an existing OPNsense F/W on VM with CE edition OPNsense 25.1.5_4-amd64 to Business.
Directly cannot be changed to BE. So I installed a new OPNSense with the official BE image v25.4  activated with the key and then import the config from the CE but does not work. Upon reboot BE plugin is declared as orphaned and cannot changed to BE.

Does anyone has any suggestion on how I can upgrade an existing OPNsence 25.1._4  CE to BE edition ?

Thanks