Messages

1

19.7 Production Series / OPNsense stops responding

« on: December 12, 2019, 01:00:21 pm »

I have a CARP setup with 2 OPNsense firewalls, and every 1-3 days the master firewall stops responding, no GUI, no PING and the backup becomes master.

Only the CLI on the console is responding, and with that I can reboot the main firewall, and then it works again for 1-3 days before it dies again.

There is no crash reports in the GUI, both firewalls are running 19.7.3 Business Edition.

2

18.1 Legacy Series / Re: [SOLVED] Cannot install opnsense 18.1

« on: May 17, 2018, 04:56:05 pm »

Thanks for the tip about Fitlet 2, I had to combine the 2 inputs from jelly-ck and gbitglenn

So I ended up with:

hint.hpet.0.clock=0
hint.ahci.0.msi=2
hint.ahcich.0.sata_rev=2
hint.sdhci_pci.0.disabled=1
hint.sdhci_pci.1.disabled=1

OPNsense is now up and running on Flitlet 2 

3

18.1 Legacy Series / Re: Improved security headers?

« on: May 17, 2018, 12:57:49 pm »

Great, thanks   

4

18.1 Legacy Series / Improved security headers?

« on: May 15, 2018, 11:51:22 pm »

Is it possible to add the following security headers to web GUI?

X-Content-Type-Options
X-XSS-Protection
X-Frame-Options
Content-Security-Policy

or as wishlist for future updates

5

18.1 Legacy Series / Re: Has anyone had a problem-free upgrade from OPNsense 17.7.12 to 18.1?

« on: February 01, 2018, 12:00:33 am »

Smooth upgrade from 17.7.12 to 18.1 from SSH.

Running on Fitlet A10.

6

17.1 Legacy Series / <SOLVED> Apinger dont start after update to 17.1.7

« on: June 14, 2017, 04:52:51 pm »

Sorry for the late reply, I got distracted by more pressing maters.

The problem still existed after update to 17.1.8, the logs says:

apinger: No usable targets found, exiting

The default gateway seems to be correctly configured. I edit the gateway (edit/save) without changing a thing the problem goes away.

7

17.1 Legacy Series / <SOLVED> Apinger dont start after update to 17.1.7

« on: May 18, 2017, 06:37:07 pm »

After updating to 17.1.7 the Apinger service (Gateway Monitoring Daemon) dont start, and cannot be startet manually.

8

16.7 Legacy Series / Re: Primary firewall crashes in HA setup

« on: October 09, 2016, 05:58:38 pm »

truss from openvpn and filterlog

9

16.7 Legacy Series / Re: Primary firewall crashes in HA setup

« on: October 09, 2016, 05:58:04 pm »

Now it happened again, we have been "lucky" with the updates to OPNsense - they reset the process when the firewall reboots.

Logs attached.

10

16.7 Legacy Series / Re: Primary firewall crashes in HA setup

« on: September 20, 2016, 05:45:09 pm »

7 days in average, it can happen after 4 days but also first after 10.

I will get a top and dmesg output next time it happens.

11

16.7 Legacy Series / Primary firewall crashes in HA setup

« on: September 15, 2016, 04:40:21 pm »

We have two opnsense boxes in HA setup, and every 6-7 day the primary firewall "crashes" (it does not generate a crash report).

When it happens we notices it by our VPN users cannot get access, the primary have stopped processing trafic and does not accept connections (GUI/SSH cannot be accessed).

On the secundary firewall, in "Firewall / Virtual IPs / Status" shows that it have taken control of all 3 CARP interfaces as master. So all normal trafic flows.

The CLI/Console on the primary firewall is working, so the problem can be fixed by selecting reboot in the menu, then the primary firewall comes up agian, and resumes the CARP interfaces as master, and the secundary becomes slave.

6-7 days later, it starts over agian..

12

17.1 Legacy Series / Re: [CALL FOR TESTING] Phalcon 3.0

« on: September 11, 2016, 11:44:00 pm »

Installed phalcon-3.0.1 on 16.7.3 amd64,

Have navigated the whole GUI and everything seems to work as supposed.

13

16.1 Legacy Series / Re: [SOLVED] Migrate from PFsense to OPNsense

« on: August 09, 2016, 04:16:09 pm »

No, it was not related to that in fact I had no errors in the HA setup.

I created business support ticket, and got help from Deciso. It was a good experience, very friendly and knowledgeable people. Jos helped me and found the cause quickly.

It turns out that our internet router with dual business connection, does not allow/accept the carp traffic between the 2 wan interfaces. Therefore can the secoundary OPNsense box not see that the primary WAN interface is up and thinks it is down and then puts its own as master and ends up with 2 masters on the WAN.

We have "injected" a switch between the OPNsense boxes and the internet router, and now it works just fine with failover and everything.

14

16.1 Legacy Series / Re: Migrate from PFsense to OPNsense

« on: July 27, 2016, 05:35:54 pm »

Cant find anything off, no errors that stand out.

Do you think this will help me? https://www.deciso.com/business-support/ (as in they can solve the problem)

15

16.1 Legacy Series / Re: Migrate from PFsense to OPNsense

« on: July 26, 2016, 12:16:39 pm »

The backup not being configured I don't know. There are some people here using HA extensively, maybe they can shed a light. And Ad is our expert on HA. I cannot be of too much help.

Do you have a step for step guide to setting up carp/HA on OPNsense? I'm thinking on the small differences there where on the openvpn setup from pfsense to opnsense, if there is some differences here too.