Messages

I tried searching for the answer before hand and I couldn't find anything. Does anyone know how to set a lease to unlimited? I tried setting it to 0 and after a save the value was cleared.

Thanks in advance.

Any chance you have a link to the article that talked about the console window issue? I wasn't finding it by searching. If not, I want to say thanks for all the responses, it is greatly appreciated.

Yeah I realized it let me type when it did that, I literally only had to feed it the installer creds again and it returned that that same screen and hitting enter on uefi it went. However then I was plagued by the console window not taking the keyboard again lol.

Thanks the rebuild got me past the keyboard issue and then ran into this:



You see that or did I miss something in the guide?

Hmm, did you have to do anything special to run it as a gen 2? I have mine as a gen 1 mainly because I have had this firewall before they supported Gen2. I tried deploying a Gen 2 and I run into a couple issues, the console window stops taking keyboard input when trying to start the installation. Have you seen that before?

Does anyone know if its possible to update integration services  for Hyper-V 2016?

On my firewall I have it acting as the router for multiple VLANs, I am looking at configuring the firewall as 'High Available'. Should I use VIPS configured as CARP for all VLANs or only the primary 'LAN'?

I recently updated last night and come to find out clients were failing to join the wireless network. After much digging I found in the firewall where DHCP requests were being blocked. The interesting thing was there was no change to my firewall rules between VLANS. After about an hour of digging, I eventually restarted the DHCP relay service, and suddenly everything was fixed.

So the point of this post is to hopefully save someone else time if they use multiple VLANs and use the DHCP relay service. If you experience any issues try restarting the service.

I feel bad as I was unable to get a log file for this and didn't think of it until I couldn't go back far enough. I just hope someone finds this useful.

@Franco

I apologize for the wait its been crazy at work and at home. Your suggestion work, right after clearing everything started working perfectly. I guess something was just hung up in the cache.

@Bartjsmit
I am going to check the exact model today, I know its an Intel.

@Franco
I reset the data, so when I come back to reply with the correct model of NIC I will also check to see if I have netflow data flowing or not.

Thanks for both of the replies, sorry I didn't give more information on this post, had a busy morning.

Does anyone know, is Insight/Netflow still broken in the RC17.1? I am running 17.1, I see cache changing for Netflow but nothing ever appears in Insight.


***EDIT*** [Resolution]
For anyone curious or having the same issue, I purged my netflow cache, and right after doing so the Insight page had data once more and is functioning properly.

UPnP was moved to a plugin, as per their update notes:

"
The following services moved to individual plugins and need to be reinstalled in order to be used: SNMP, Load Balancer, Wake on LAN, Universal Plug and Play, IGMP Proxy.  Their respective configurations will be preserved by the system even if these plugins are not installed.
"

I too had the same issue, I simply removed the UPnP plugin and then went back re-added it. Went into my UPnP settings hit save and on the refresh the service was suddenly running again. Not sure what the issue might have been but possibly something due to the upgrade. I hope this helps you.

Awesome, thanks for the clarification!

Scenario

I built a group under Interface > Group for multiple interfaces. I then assigned firewall rules to that interface group. I also have a different firewall rule assigned to one of those interfaces that is part of the group.

End Scenario

My question is, what order are the rules processed in, individual interface first, Group rule first, or does it only process group rules?

I tried searching but I was curious if there was any word on if they plan on adding in a dashboard for viewing IDS information, such as LogStash?

Did they retain the API's from Suricata or do they have plans on integrating LogStash(Or another reporting dashboard) within the firewall itself?

I think it would awesome if they could integrate that kind of dashboard into OPNSense.