Messages

1

21.7 Legacy Series / Cronjob does not send mail

« on: November 18, 2021, 09:39:29 pm »

We have a production firewall and a backup firewall which are identically set up. A custom backup script is configured on each system, triggered by a cron job. On the production firewall, the cron job sends a mail. On the backup system, the mail is not being sent.

We cannot find the reason for that. Where in the system is the behavior of cron configured?

2

21.7 Legacy Series / Re: LDAP auth ins't working since update to 2.7.4

« on: October 31, 2021, 05:40:57 pm »

Thank you, that worked 

After reboot.

3

21.7 Legacy Series / Re: LDAP auth ins't working since update to 2.7.4

« on: October 31, 2021, 05:39:24 pm »

Thank you, that worked 

4

21.7 Legacy Series / Re: LDAP auth ins't working since update to 2.7.4

« on: October 31, 2021, 03:55:39 pm »

Same problem here (same?). We use a self signed root CA and TLS connection to the LDAP/Samba AD worked for long time. All of a sudden, with 21.7.4, it stopped working. We do not have an intermediate certificate.

5

20.7 Legacy Series / Cron <root@fw> periodic daily/weekly/monthly

« on: August 09, 2020, 09:54:24 am »

Hi, i feel a bit stupid because i cannot find out where these mails are coming from:

From root@fw  Mon Aug  3 03:01:43 2020
Return-Path: <root@fw>
X-Original-To: root
Delivered-To: root@fw
Received: by fw (Postfix, from userid 0)
        id A5FD9D9FB03; Mon,  3 Aug 2020 03:01:43 +0200 (CEST)
From: Cron Daemon <root@fw>
To: root@fw
Subject: Cron <root@fw> periodic daily
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>
Message-Id: <20200803010143.A5FD9D9FB03@fw>
Date: Mon,  3 Aug 2020 03:01:00 +0200 (CEST)
Status: RO

mail: illegal option -- E
Usage: mail [-iInv] [-s subject] [-c cc-addr] [-b bcc-addr] to-addr ...
            [- sendmail-options ...]
       mail [-iInNv] -f [name]
       mail [-iInNv] [-u user]

Sometime i fiddeled around with Cron jobs sending mail. Then it worked but later i found out that this mails aggregate over time for periodic daily/weekly/monthly.

I think i read all documentations and posts about Cron jobs in OpnSense but damn it i cannot change the behaviour. Would anyone like to find the mistake with me? I really appreciate this.

6

20.1 Legacy Series / Cron periodic daily mail: illegal option -- E

« on: June 21, 2020, 07:50:34 am »

Hi, recently we discovered the cron integration with Opnsense and tried all options. We found our solution and our cron jobs works fine. There is one thing which we could not fix which is possibly related to some of our tests.

Every night the cron job for "periodic daily" stops with complains about mail:

From root@fw  Sun Jun 21 03:01:39 2020
Return-Path: <root@fw>
X-Original-To: root
Delivered-To: root@fw
Received: by fw (Postfix, from userid 0)
        id 224C5D9FB03; Sun, 21 Jun 2020 03:01:39 +0200 (CEST)
From: Cron Daemon <root@fw>
To: root@fw
Subject: Cron <root@fw> periodic daily
X-Cron-Env: <SHELL=/bin/sh>
X-Cron-Env: <PATH=/etc:/bin:/sbin:/usr/bin:/usr/sbin>
X-Cron-Env: <HOME=/root>
X-Cron-Env: <LOGNAME=root>
X-Cron-Env: <USER=root>
Message-Id: <20200621010139.224C5D9FB03@fw>
Date: Sun, 21 Jun 2020 03:01:00 +0200 (CEST)
Status: RO

mail: illegal option -- E
Usage: mail [-iInv] [-s subject] [-c cc-addr] [-b bcc-addr] to-addr ...
            [- sendmail-options ...]
       mail [-iInNv] -f [name]
       mail [-iInNv] [-u user]

We cannot find the source for that. Could someone enlighten me?

Tobias

7

20.1 Legacy Series / Re: WAN Port slow

« on: April 18, 2020, 12:06:32 pm »

Solved it finally. I had a routed IP address on the Upstream Gateway to the bridged Fbox. With the new Fbox and 1Gbit bridging is not possible anymore. "Exposed Host" is the alternativ. On the firewall i changed noting, just switched to "Exposed host" in the Fbox.

A second Upstream Gateway in the 192. net solved the problem for me. Fbox is natting and the "old" gateway is still there (not as upstream) handling the routet IP address.

Don not know exactly where the problem was, but it is solved now

Thank you for your ideas.

8

20.1 Legacy Series / Re: WAN Port slow

« on: April 17, 2020, 09:26:30 am »

The new firewall is up and running. Nice 

But there is no change in speed 

Directly connected to Fritzbox speed is optimal. With Opnsense in between not. Just 200-300Mbit and 3-10Mbit upload.

I measure directly on the firewall at the WAN port. Changed the kabel already. Changed each apparently relevant setting in OpnSense. I'm at a bit of a loss.

What else could i optimize?
 

9

20.1 Legacy Series / Re: WAN Port slow

« on: April 15, 2020, 07:48:45 am »

I ordered this one: https://www.ipu-system.de/produkte/ipu675.html. Much to much of almost everything but who knows what comes up. Delivery from China does take a long time nowadays.

10

20.1 Legacy Series / Re: WAN Port slow

« on: April 12, 2020, 09:46:12 pm »

I am not sure which CPU/Setup would fit best für my needs.

What do you think about this one?

https://de.aliexpress.com/item/32920921042.html?gps-id=pcStoreLeaderboard&scm=1007.22922.122102.0&scm_id=1007.22922.122102.0&scm-url=1007.22922.122102.0&pvid=e2793994-0169-4314-98b1-dbbd6ef8189e&spm=a2g0o.store_home.smartLeaderboard_819228523.32920921042

11

20.1 Legacy Series / Re: WAN Port slow

« on: April 12, 2020, 08:27:44 pm »

Thank you, i'll talk to the https://www.apu-board.de/, lets see what they suggest. Thank you!

12

20.1 Legacy Series / Re: WAN Port slow

« on: April 12, 2020, 05:37:24 pm »

Ah, thats a point. Will look for a new hardware - any suggestions for 1Gbit?

13

20.1 Legacy Series / Re: WAN Port slow

« on: April 12, 2020, 05:26:21 pm »

Thanks! Checked them off and on (where disabled). No difference :/

I was thinking that the cpu is to slow. But top shows around 30-40% usage for python process.

14

20.1 Legacy Series / WAN Port slow

« on: April 12, 2020, 05:04:41 pm »

Hi, since we have cable with 1Gbit down/50Mbit up we experience slow net performance. If we connect directly to the cable modem (FritzBox 6591) we have around 800Mbit down/40Mbit up. If we go through our OPNsense Ghz small (SML20083D) we experience only ~100-200MBit/~4-10Mbit.

Our setup is straight forward, no special requirements. OpnSense is connect to the FritzBox via Exposed Host.

Very could we start to narrow down the problem?

15

18.1 Legacy Series / Re: Uncaught Error: Call to undefined function encrypt_data()

« on: May 26, 2018, 03:45:01 pm »

Manual backup from System/Configuration/Backup works fine.