Messages

1

20.7 Production Series / Resize OPNSense Partition

« on: September 22, 2020, 04:32:13 pm »

Question about OPNSense Partition Expansion. 

I have the paid Business Edition OPNSense and I deployed it to VMWware using the OVF Package.

However, the deployment has a small primary partition size.

If I resize the allocated partition size in vCenter. Is there a simple way to expand the partition size in the FreeBSD shell for OPNsense?  Short of reinstalling everything including plug ins and reimporting config on a custom install.

2

20.7 Production Series / PHP Error phpDynDNS.inc

« on: September 17, 2020, 09:39:40 pm »

PHP Warning:  Invalid argument supplied for foreach() in /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc on line 838

I've been seeing this problem detected a lot lately.

3

20.7 Production Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 04:37:10 am »

I only have a free license in a home learning / testing environment but thanks for the info.

Register for https://sunnyvalley.cloud and you'll find a surprise You can get a trial license for 7 days now - will be publicly announced next week.

Is the trial license the surprise lol

Sent from my SM-N986U using Tapatalk

4

20.7 Production Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 03:24:27 am »

I only have a free license in a home learning / testing environment but thanks for the info.

Sent from my SM-N986U using Tapatalk

5

20.7 Production Series / Re: Call for testing: official netmap kernel

« on: September 17, 2020, 12:54:22 am »

With the new build, should Interfaces Selection for Protected Interfaces be LAN only or can I add vmx0_VLAN's and ovpns OpenVPN Server interfaces also. Wasn't sure if LAN covered them all or not.
-I do have internal DNS server running on a Domain Controller on the LAN. Not sure if that matters for config.

This is a VMWare ESXi 7 environment if the VMX didn't give it away

6

20.7 Production Series / Re: Call for testing: netmap on 20.7

« on: August 02, 2020, 01:17:15 am »

A quick update:

I think this vmx bug has been resolved on FreeBSD 12-STABLE:

https://svnweb.freebsd.org/base?view=revision&revision=363163

Let's do some tests and I'll post some results.

If anyone out there is able to test 12/STABLE kernel with an ESX vmx interface, that'd also be great

I have ESXi 7.0 with Netmap crashing using vmxnet3 with Intrusion Detection and Sensei enabled. So if you think this test would fix it, I could give it a try. Let me know how to test.

7

20.7 Production Series / Crashing

« on: August 01, 2020, 05:15:17 am »

I found I was getting kernel panics and reboots when either Sensei was running or Intrusion Detection was enabled on my VMWare ESXi 7 OPNSense VM with vmx drivers for ethernet.

I know the Sensei one seems to be known, but not sure on the known IDS one with vmx on vmware 7.

8

Tutorials and FAQs / High Availability (CARP) on vSphere 7

« on: June 19, 2020, 10:04:50 pm »

I was just wondering if anyone has any good setup tutorials for an OPNSense HA Setup on vSphere 7?

If possible, can the CARP interface go over a local vSphere distributed switch without having to use a real physical interface?

9

19.7 Legacy Series / Re: dynDNS does not work after upgrade

« on: August 15, 2019, 03:59:33 pm »

Same here:
[14-Aug-2019 18:00:27 America/New_York] PHP Warning:  Invalid argument supplied for foreach() in /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc on line 758

10

19.1 Legacy Series / Re: Wol widget error after Update to 19.1.5

« on: April 14, 2019, 07:54:42 pm »

No, I can't reproduce this on 19.1.6 -- not with empty rules, not with one, not with many. What am I missing?


Cheers,
Franco

I am not sure... I also have the A Problem Has Been Detected pop-up on the dashboard with this:

[13-Apr-2019 10:26:32 America/New_York] Exception: Error at /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php:137 - count(): Parameter must be an array or an object that implements Countable (errno=2) in /usr/local/opnsense/mvc/app/controllers/OPNsense/Base/ApiControllerBase.php:85
Stack trace:
#0 [internal function]: OPNsense\Base\ApiControllerBase->APIErrorHandler(2, 'count(): Parame...', '/usr/local/opns...', 137, Array)
#1 /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php(137): count(Array)
#2 [internal function]: OPNsense\IDS\Api\SettingsController->searchInstalledRulesAction()
#3 [internal function]: Phalcon\Dispatcher->callActionMethod(Object(OPNsense\IDS\Api\SettingsController), 'searchinstalled...', Array)
#4 [internal function]: Phalcon\Dispatcher->dispatch()
#5 /usr/local/opnsense/www/api.php(26): Phalcon\Mvc\Application->handle()
#6 {main}


Also, I am using these if it makes a difference:

os-etpro-telemetry (installed)   1.3_1   42.5KiB   ET Pro Telemetry Edition

et_telemetry.token:  *******
snort_vrt.oinkcode: *******
snort_vrt.rulesfile: snortrules-snapshot-2990.tar.gz

11

19.1 Legacy Series / Re: Wol widget error after Update to 19.1.5

« on: April 13, 2019, 04:28:27 pm »

Hi mark,

19.1.6 is out addressing most and disabling warnings for now. Kinda unfortunate, but it is what it is.


Thanks,
Franco

Hey Franco, is this related to this?

Error at /usr/local/opnsense/mvc/app/controllers/OPNsense/IDS/Api/SettingsController.php:137 - count(): Parameter must be an array or an object that implements Countable (errno=2)

Error shows up in 19.1.6 when going to Services - > Intrusion Detection -> Administration -> Rules Tab.

12

19.1 Legacy Series / Re: OpenVPN Client (As a Gateway) Connection Issues 18.7.10 -> 19.1.x

« on: April 13, 2019, 04:54:20 am »

FYI issue is still occurring on 19.1.6

13

19.1 Legacy Series / Re: Wol widget error after Update to 19.1.5

« on: April 06, 2019, 01:13:36 am »

Yes, nice catch. Fixed the original post.

Seeing the same with DynDNS:
[05-Apr-2019 19:05:22 America/New_York] PHP Warning:  count(): Parameter must be an array or an object that implements Countable in /usr/local/etc/inc/plugins.inc.d/dyndns/phpDynDNS.inc on line 754

14

19.1 Legacy Series / Re: OpenVPN Client (As a Gateway) Connection Issues 18.7.10 -> 19.1.x

« on: April 04, 2019, 02:29:06 pm »

Exactly, it was trying to use the firewall IP (firewall hostname shown) as the source network in the tcpdump. Instead of the VPN client IP as the source.

I did. As I mentioned there are no OpenVPN interface NAT rules.  Those are gone and were added during testing.  It doesnt work. 

Look at the last screenshot on github link.


Sent from my SM-G973U using Tapatalk

15

19.1 Legacy Series / Re: OpenVPN Client (As a Gateway) Connection Issues 18.7.10 -> 19.1.x

« on: April 04, 2019, 01:27:24 pm »

Do you have only one client config or more?
Do you have also a server config?
When assigning interface don't use "OpenVPN" interface in NAT rules.
Why do you have don't pull routes ticked? Do you use policy based routing via gateway in firewall rules?

- 1 OpenVPN Client Config
- 3 OpenVPN Server Configs
- Yes, all traffic is not going over VPN Client. Only traffic from VLAN 100 is going over the VPN Client - Private Internet Access Gateway.