Messages

1

20.7 Production Series / Re: What happen to os-unbound-plus?

« on: August 03, 2020, 10:42:15 pm »

It is now part of R20.7 by default. See release notes of 20.7-RC1, approx. in the middle:

o unbound: integrate functionality formerly known as "unbound-plus" plugin (contributed by Michael Muenz)

https://forum.opnsense.org/index.php?topic=18198.0

2

General Discussion / Re: [Solved] Is UPNP miss configured or simply broken in it's implementation?

« on: June 30, 2020, 09:22:11 am »

Funny,

On my manual list I only have some LAN related rules, so your setup is not quite similar to mine with regards to NAT Outbound.

In my setup I do have automatically created rules that look very similar to yours. Don't you have any automatically created rules like that?

3

General Discussion / Re: Is UPNP miss configured or simply broken in it's implementation?

« on: June 29, 2020, 04:55:18 pm »

Did you try rebooting or flushing the state tables? I am never sure when flushing is actually necessary,  but will not harm I guess.

Verstuurd vanaf mijn SM-A715F met Tapatalk

4

General Discussion / Re: Is UPNP miss configured or simply broken in it's implementation?

« on: June 29, 2020, 04:23:32 pm »

You might do a test and assign a specific allow rule like I did. Either assign an IP or an IP range  like:

"allow 1024-65535 192.168.1.0/24 1024-65535"

5

General Discussion / Re: Is UPNP miss configured or simply broken in it's implementation?

« on: June 29, 2020, 03:36:54 pm »

With mentioned settings I got our PS4 running in 5 minutes time,  so the question is: what is different in your setup.

Are you trying to access your own gaming server or an 'outside' server? I am not the expert on that front, but in case of contacting your own server might be something with nat reflection or loop back?

Maybe someone else can chime in....



Verstuurd vanaf mijn SM-A715F met Tapatalk

6

General Discussion / Re: Is UPNP miss configured or simply broken in it's implementation?

« on: June 29, 2020, 03:21:35 pm »

Do you have any active firewall rules that might affect your setup?

7

General Discussion / Re: Is UPNP miss configured or simply broken in it's implementation?

« on: June 29, 2020, 11:20:34 am »

Should work with uPNP plugin by ticking the first two or three boxes in the configuration page and setting interfaces. If you do not tick the 'default deny' box, you do not need user specified permissions.

Cannot estimate why this would not work in your case.

8

General Discussion / Re: UPnP issues?

« on: June 29, 2020, 11:10:45 am »

You can install optional uPNP plugin which does not require any manual NAT configuration. The process is quite simple:

• Install optional upnp plugin
• enable service
• allow upnp port mapping
• set proper interfaces
• optionally check default deny and custom entry per IP for enhanced security

Example configuration below:

9

General Discussion / Re: Newbie Request First Firewall NAT Port Forward Settings Review

« on: June 11, 2020, 09:12:35 am »

Please note that Port on WAN address might be port 80 for http traffic, but your server in the internal network might be listinging on a completely different port.

Following might shed some light also:
https://docs.opnsense.org/manual/nat.html
https://forum.opnsense.org/index.php?topic=8783.0

I would not change reflection to something other than standard settings (as suggested in 2nd link) unless specifically necessary. I don't have much knowledge on it, but never seemed to have the need for it in my setup.

10

General Discussion / Re: Newbie Request First Firewall NAT Port Forward Settings Review

« on: June 10, 2020, 08:03:39 am »

Source, any. Destination should be WAN address. Target IP /port should be host within your network. Check the port where your host is listening for web traffic.

Nothing wrong with saving and testing. It is easy to delete or disable the rule at any time.

11

General Discussion / Re: Strict NAT on PC

« on: June 09, 2020, 12:14:20 am »

Don't bother with port forwarding as you probably don't know exact ports used by the game. Tried again with upnp and actually, the process is quite simple:

• Install optional upnp plugin
• enable service
• allow upnp port mapping
• set proper interfaces
• optionally check default deny and custom entry per IP for enhanced security

Don't know where I went wrong the first time. 

12

General Discussion / Re: Strict NAT on PC

« on: June 08, 2020, 04:15:09 pm »

PS4 has the same issue. It is called NAT type 3 by Sony. If you search this forum on "PS4 NAT type 3", there are suggestions that you should enable the uPNP plug-in. Fumbled around with it, but did not manage to get it working. As I only play offline on the PS4 I did not go delve deeper, but would be interested in a clear solution.

13

20.1 Legacy Series / Reporter reports swap_pager IO issue after each reboot, but OPNsense runs fine

« on: May 01, 2020, 10:29:11 am »

Hi all,

Just updated to last V20.1.6 version which required a reboot. Last few reboots after firmware updates I notice that the Bug Reporter reports an issue, which I diligently submit through the crash report feature. As this is more or less a black hole, I am wondering if I need to submit this issue as a genuine bug on the Github, or if it is something that is specifically related to my hardware or setup. Don't really know how long this has been going on, but I got the feeling that this has been playing since initial 20.1 update.

Anyone got pointers where to look further?

Hardware / firmware:
* OPNsense 20.1.6-amd64
* APU2D4 bios    v4.11.0.5
* KINGSTON SUV500MS120G mSATA drive


Last few lines of the automated bug report:

Waiting (max 60 seconds) for system process `vnlru' to stop... done
Waiting (max 60 seconds) for system process `bufdaemon' to stop... done
Waiting (max 60 seconds) for system process `syncer' to stop...
Syncing disks, vnodes remaining... 3 2 0 0 done
All buffers synced.
swap_pager: I/O error - pagein failed; blkno 2130660,size 4096, error 5
panic: swap_pager_force_pagein: read from swap failed
cpuid = 0
__HardenedBSD_version = 1100056 __FreeBSD_version = 1102000
version = FreeBSD 11.2-RELEASE-p18-HBSD  f08b5f14327(stable/20.1)
KDB: stack backtrace:
db_trace_self_wrapper() at db_trace_self_wrapper+0x2b/frame 0xfffffe0120af5700
vpanic() at vpanic+0x17c/frame 0xfffffe0120af5760
panic() at panic+0x43/frame 0xfffffe0120af57c0
swapoff_one() at swapoff_one+0x7d5/frame 0xfffffe0120af5850
swapoff_all() at swapoff_all+0x117/frame 0xfffffe0120af5890
bufshutdown() at bufshutdown+0x3d4/frame 0xfffffe0120af58e0
kern_reboot() at kern_reboot+0x198/frame 0xfffffe0120af5930
sys_reboot() at sys_reboot+0x447/frame 0xfffffe0120af5980
amd64_syscall() at amd64_syscall+0xa38/frame 0xfffffe0120af5ab0
fast_syscall_common() at fast_syscall_common+0x101/frame 0xfffffe0120af5ab0
--- syscall (55, FreeBSD ELF64, sys_reboot), rip = 0x40a0b4a11da, rsp = 0x74fde2f7afc8, rbp = 0x74fde2f7b030 ---
KDB: enter: panic
panic.txt0600005613652636352  7154 ustarrootwheelswap_pager_force_pagein: read from swap failedversion.txt0600007013652636352  7543 ustarrootwheelFreeBSD 11.2-RELEASE-p18-HBSD  f08b5f14327(stable/20.1)

14

20.1 Legacy Series / Re: 20.1.6 No VLAN Network connectivity 1min after reboot - how to revert?

« on: April 30, 2020, 10:58:21 pm »

https://wiki.opnsense.org/manual/opnsense_tools.html

15

Hardware and Performance / Re: PCENGINES APU[1-5] Coreboot SeaBIOS Open Source Firmware

« on: April 13, 2020, 01:02:08 pm »

A setting that I previously set in OPNsense that MIGHT make a difference in network performance was to disable Energy Efficient Ethernet for the 3 NICs.
It doesn't seem to work when the value is set in /etc/sysctl.conf.local, so I set it in the GUI.
System -> Settings -> Tunables
I added the variables dev.igb.0.eee_disabled (and 1 and 2) and set to a value of 1
I don't want the NICs to go to sleep because I'll probably get network errors or lose packets as the NIC wakes up.
I wonder with ASPM enabled whether the NICs are more aggressively trying to go to sleep to save power.
The NICs don't use that much power, so I want the NICs to always be active.

Just a thought.

Got interested in the tunables you mentioned, so did some research via Google. Came across a very extensive network tuning description. Just sharing:

https://calomel.org/freebsd_network_tuning.html