Messages

1

German - Deutsch / Re: Präferiertes GPON für Telekom FTTH

« on: November 19, 2024, 09:35:07 pm »

Wenn ich das richtig verstehe, lebst du in einem Mehrfamilienhaus. Falls ja, dann spricht der Vermieter kräftig mit wie das gemacht wird. Folgendes Dokument fasst es ganz gut zusammen wie das aussieht und welche Möglichkeiten es gibt.

https://www.telekom.de/hilfe/downloads/glasfaser-technik.pdf

Es gibt ein sfp bei der Telekom von Zyxel, das recht gut auch in anderen Routern zum laufen gebracht werden kann (Zyxel PMG3000-D20B), auf https://telekomhilft.telekom.de/t5/Festnetz-Internet/FTTH-ohne-Modem-SFP-GPON-Modul/td-p/5998739 gibts da mehr Details. Aber wie gesagt, das hängt von der Inhouse Verteilung ab ...

Und ansonsten gibts hier diesen Thread dazu https://forum.opnsense.org/index.php?topic=36491.msg213593#msg213593

Br br

2

24.7 Production Series / Re: SSH to opnsense broken on macOS sequoia

« on: September 27, 2024, 12:36:47 pm »

Hmmm, I can confirm that Sequoia 15.0  openssh runs fine with opnsense 24.7.4_1 /.5. No issues at all. both from my internal LAN and WLAN.

There is usually only one reason for such an error message - bad encryption or decryption. Aside of ssh implementation bugs (which is usually very unlikely) there is also the possibility of line or HW issue or brute force attacks... here, a detailed log would help ...

br br

3

24.7 Production Series / Re: Rights issue with locate in 24.7.1

« on: August 18, 2024, 05:10:32 pm »

OK, thanks this works also perfectly fine for me ...

Next time I will ask directly about a potential intention      its a shame to be second ....

br br

4

24.7 Production Series / Rights issue with locate in 24.7.1

« on: August 18, 2024, 10:44:40 am »

G'day,

I just noticed an exec rights issue with the 'locate' command in 24.7.1.

Executing as root eg 'locate newwanrc', it shows

Code: [Select]

locate: the locate database '/var/db/locate.database' is smaller than 256 bytes large.

To create a new database, please run the following command as root:

  /etc/periodic/weekly/310.locate

Executing then as root

  /etc/periodic/weekly/310.locate

It only outputs

Code: [Select]

Rebuilding locate database:
Must be root.
No database is created... Also the weekly update of this database is obviously not working

Before throwing something in Git: freebsd 14.1 issue or opnsense?

br br

5

24.7 Production Series / Re: Traceroute / ICMP issue after 24.7.1 update

« on: August 17, 2024, 09:36:33 am »

Hi there,

I can also confirm that the -icmp2 kernel works fine here, both ipv4 and ipv6

br br

6

24.7 Production Series / Update to 24.7.1: dyndns not starting after reboot?

« on: August 08, 2024, 01:39:43 pm »

G'day,

Updated just to 24.7.1 which ran smooth as usual. Time to say a big thank you to all who made this happen - Great job again!!!

A (small) heads up I would like to bring to your attention which is the dyndns service resp. GUI behavior once the system reboots after update.

I am running ddclient with native backend and my dyndns update runs in two steps, one for ipv4 and one for ipv6. In between, my provider (dedyn.io) demands for a ~5 min pause and it is throttling the update requests to this interval. Already after the 24.7 (and now also 24.7.1) upgrade reboot, I am running then in a kind of (race) condition showing a very inconsistent picture about the state of the dyndns service. Reproducible, after the update reboot

• the Dashboard widget shows dyndns as 'not running', ps says it runs. Dashboard value is not changing without manual interaction
• the dyndns services page shows the correct new ipv6 address and the old ipv4 address
• the interface overview widget shows for WAN the correct new ipv4 address and ipv6 address

So, the state of internet connection reads somewhat confusing after the update ....

When manually restarting dyndns service on the dashboard service widget, nothing changes
When manually stopping dyndns and starting on the configuration page, the widget on the dashboard gets then the correct new ipv4 and ipv6 addresses; on the service configuration page, still the old ipv4 address is shown.
When manually restarting dyndns for a second time, everything is OK again.

So it takes in my case up to 10 min and two manual interactions until GUI values for WAN addresses are shown consistent to the reality.

I am aware that a fix of this is somewhat shaky as the service restart behavior is different from system to system
but perhaps over time, some optimization could be considered for this.

Br br

7

24.7 Production Series / Re: New Dashboard short-comings

« on: August 02, 2024, 03:03:27 pm »

not to bother anyone with minor details and typos. But

Code: [Select]

# opnsense-patch -c plugins dd68ab68d


runs a bit better 

br br

8

23.7 Legacy Series / Re: Dual-Stack: IPv6 on Telekom (Germany) link - Clients get no external IPv6 addres

« on: November 30, 2023, 05:03:47 pm »

The DMZ and LAN Addresses are shown 2003:XXXX in your post. So: can you show the field to see whether prefix ID 0 and 1 are properly assigned to the ipv6 address on the DMZ and LAN interface?

What do you mean with IPv6 has not configured yet?

ipv6 on servers:  Assuming servers with Linux with ipv6 activated, you should then have at least a configuration on /etc/network/interfaces like

iface eth0 inet6 auto

Otherwise you won't get any ipv6 address on the servers

9

23.7 Legacy Series / Re: Dual-Stack: IPv6 on Telekom (Germany) link - Clients get no external IPv6 addres

« on: November 30, 2023, 04:29:40 pm »

Hi,

Assuming you have an up and running PPPoE connection with VLAN7 properly configured?!

Normally, manual configuration for router advertising  is not required, should be unchecked in a first step

'request ipv6 prefix only' I have also unchecked

Can you share whether the ipv6 prefixes on your LAN and DMZ interface look as expected, i.e. have the assigned Prefix ID? (0 resp. 1)

Your servers on LAN and DMZ: How are they supposed to get an IPv6 address on their interfaces?

Br br

10

German - Deutsch / Re: Telekom: Dual Stack IPv4/IPv6 Anschluss PPPoe - richtige Settings?

« on: November 19, 2023, 02:04:14 pm »

Neben der Grundkonfiguration (siehe Mail von Maurice) wäre dann im zweiten Schritt noch die Frage
- welche Form der Anbindung es sein soll (Modem (welches?) oder ein weiterer Router davor (Fritz!Box, dann mit double NAT (wäre eher weniger zu empfehlen)
- Welche Services sollen darüber laufen (IP Telefonie und/oder Magenta TV)
- (...)

Br br

11

German - Deutsch / Re: OPNSense as Router an Netcologne MultiCable - Fragen

« on: November 13, 2023, 03:42:46 pm »

Ist der netcologne Anschluss denn auf Routerfreiheit konfiguriert? mW geht ansonsten der Bridge Modus gar nicht. Hab letztes Jahr mal einem Kollegen geholfen und dabei hat sich diese Anleitung als hilfreich erwiesen

https://www.tutonaut.de/routerfreiheit-eigene-fritzbox-6690-bei-netcologne-einrichten/

12

23.7 Legacy Series / Re: OPNsense 23.7.7 Upgrade Problem

« on: October 25, 2023, 03:04:30 pm »

Can confirm @meyergru 's experience: No third party package, no upgrade hiccups

br br

13

23.1 Legacy Series / Re: ddclient New opnsense backend and desec

« on: August 09, 2023, 05:54:27 pm »

Done

14

23.7 Legacy Series / Re: Strange error message while updating 23.7 --> 23.7.1

« on: August 08, 2023, 08:01:32 pm »

See here
https://forum.opnsense.org/index.php?topic=35113.105

15

23.7 Legacy Series / Re: Upgrade 23.7 -> 23.7.1 syslog-ng Undefined symbol "random_choice_generator_parse

« on: August 08, 2023, 08:00:01 pm »

See here
https://forum.opnsense.org/index.php?topic=35113.105