Messages

1

23.7 Legacy Series / Re: OpenVPN: Client Specific Overrides - Ifconfig-push problem

« on: August 24, 2023, 11:20:50 am »

10.160.71.2/32

The command " Ifconfig-push" has indeed to be removed.

Setting the field to 10.160.71.2/32 only works like a charm.

Thanks a lot.

Cheers,
Michele.

2

23.7 Legacy Series / OpenVPN: Client Specific Overrides - Ifconfig-push problem

« on: August 24, 2023, 10:23:46 am »

Hi.
Just upgraded to latest version 23.7.2.
I read in this topic https://forum.opnsense.org/index.php?topic=35149.0 that to push static IP to clients in the tunnel we just have to use the "IPv4 Tunnel Network" field.
Well, I just copied the command "ifconfig-push 10.160.71.2 255.255.255.255" and receive the error "please specify a valid network segment or address (IPv4/IPv6)" (see screenshot).

What am I doing wrong?

Thanks a lot,
Michele.

3

23.1 Legacy Series / Re: fw update check stuck or very slow (> 5 minutes)

« on: April 05, 2023, 03:26:19 pm »

Looking at another thread dealing with much the same issue -- try using a different mirror. The DE mirror seems to not have issues. I am going to confirm later today on a second system. I finally got my first test system updated over night using its default mirror (assuming the US since that is where I am), but it took over 8 hours to do.

That's what I did few hours ago and it worked!
I used Aalbrog University mirror and it was ok. Default mirror, don't know what it is, stucks.

Thanks for reply,
Michele.

4

23.1 Legacy Series / Re: fw update check stuck or very slow (> 5 minutes)

« on: April 05, 2023, 10:13:27 am »

Same issue here.
I have 3 opnsense installations in 3 different places and all of them have the same problem.
I setup Google DNS in Settings -> General and then flagged "Do not use the local DNS service as a nameserver for this system" in DNS server options as suggested in other threads.
Unfortunately the problem persists in all of 3 installations.

I tried a system update from the Gui (from version 23.1.1 to 23.1.5) and the download speed is really slow. At a certain point procedure stucks at number 16 (fetching DNSmask) and nothing happens.
Anyone knows what's going on?

Hopre to hear good news about it very soon.

Best regards,
Michele.

5

22.1 Legacy Series / Re: Warning on Intrusion Detection logs

« on: June 08, 2022, 04:45:14 pm »

The error messages seem to say that there are errors because stuff isn't enabled.  You could delete these messages from the log file.

I really can't find a way to "delete" those messages, at least via GUI. Anyway my usual goal is to find the reason why I have certain error logs first and then, eventually, find a way to delete them.

Or maybe enable stuff ...

Ok, I could do that: would you be so kind to indicate me how to?

Thanks.

6

22.1 Legacy Series / Re: Warning on Intrusion Detection logs

« on: June 08, 2022, 03:13:03 pm »

Looks like it's just enabling protocols to monitor for which is not a bad thing unless you explicitly don't want those protocols looked at.

It may be just like that but log messages are indentified as "ERROR".
I'd like to know why these errors come up and how to remove them.

Cheers.

7

22.1 Legacy Series / Warning on Intrusion Detection logs

« on: June 06, 2022, 12:03:30 pm »

Hi.
I noticed several warnings on Intrusion Detection logs after update to version 22.1.8_1.
Warnings are like these (some examples):

• [ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol http2 enable status not set, so enabling by default.
• [ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol rdp enable status not set, so enabling by default.
• [ERRCODE: SC_ERR_CONF_YAML_ERROR(242)] - App-Layer protocol mqtt enable status not set, so enabling by default.
• [...]

I know those are "just" warnings but do I have to worry about?

Thanks a lot,
Michele

8

22.1 Legacy Series / Re: Alias based firewall rules doesn't work after upgrade to 22.1.8

« on: May 26, 2022, 04:07:07 pm »

I can confirm the same problem with some aliases. Especially I did have problems with network aliases (e.g. 192.168.20.0/24). Everything started working again after reverting to version 22.1.7_1.
I hope developer team can solve it in newer versions.

Have a nice day,
Michele.

9

Virtual private networks / How to force OpenVPN clients to disconnect after a certain amount of time

« on: October 27, 2021, 05:02:35 pm »

Hi guys.
I have lots of Openvpn clients who leave connections open even if they don't use for hours and some of them also go home leaving VPN connections open!
Is there a way in server or client side or both to setup a timeout so that after e.g. 60 minutes without utilization clients automatically disconnects from server?

Thanks a lot.

Michele.

10

21.1 Legacy Series / Re: Problems after 21.7.1_1 update

« on: June 22, 2021, 03:20:16 pm »

Thanks to all of you guys! 

Cheers,

Michele.

11

21.1 Legacy Series / Re: Problems after 21.7.1_1 update

« on: June 22, 2021, 10:21:35 am »

It looks like it was a browser issue.
I did the update using Google Chrome and had the problems mentioned in my thread.
Then I tried to open the gui with Mozilla Firefox and everything seems to be ok. Update check is ok, alla services are up and running.
Maybe the 21.1.7_1 update did something around the gui and something went wrong...

12

21.1 Legacy Series / Problems after 21.7.1_1 update

« on: June 22, 2021, 10:07:34 am »

I read some other threads and saw that this update caused some problems.
I did the update, something has gone wrong or better, update log in the gui stopped but the firewall did the reboot.
When the firewall rebooted the update check stucks (see image attached).
I tried re-installing the 21.1.7_1 packed with no luck and it seems to not work properly.
I also launched "/usr/local/opnsense/scripts/firmware/health.sh" but everything is ok. I tried to launch it from the gui but it doesn't work.

What else can I do to restore normal behaviour?

Thanks a lot,
Michele.

13

General Discussion / Re: How to set up sarg with opnsense?

« on: September 30, 2020, 07:00:14 pm »

Hi Raxid.
Unfortunately I have no more installations with Sarg and to tell the truth I really can't remember whether I had the plugin in the gui or not.

Sorry not to be able to give you some help.

Michele.

14

20.7 Legacy Series / Re: Upgrade no more available

« on: September 12, 2020, 07:35:56 pm »

Thanks Franco.
I've a couple of machines to be upgraded.
I'll report back.

Cheers,

Michele.

15

20.7 Legacy Series / Re: Upgrade no more available

« on: September 07, 2020, 11:09:41 am »

Ah ok.
So what should I do in case I would face a signature error again?

Thanks again.

Michele.