Messages

1

General Discussion / Re: Opnsense box stops getting wan IP after 15 or 20 days

« on: April 30, 2022, 04:59:23 pm »

I wanted to move this to Zenarmor thread but did not know how, so I created a dup of this in that thread.

2

Zenarmor (Sensei) / Opnsense box stops getting wan IP after 15 or 20 days - Zenarmor error

« on: April 30, 2022, 04:57:17 pm »

I am running 21.1.6.
I have experienced twice in last month an a half that my router stopped receiving IPV4 WAN address from the AT&T pass thru modem. It does not lose the IPV6 address.
I had to reboot to get it back up and running.

What could cause this?
For troubleshooting this, what logs should I be looking into? I have Zenarmor- Sensei setup for LAN interface, and this is what I saw in the System Diagnostic Activity. Can this be the reason, "HeapDumpOnOutOfMemoryError"?
My box has 8 GIG of memory and Intel core i5 2.30 GHZ 4 core cpu.

• /usr/local/openjdk8/bin/java -Xms2g -Xmx2g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+AlwaysPreTouch -server -Xss1m -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djna.nosys=true -Djdk.io.permissionsUseCanonicalPath=true -Dio.netty.noUnsafe=true -Dio.netty.noKeySetOptimization=true -Dio.netty.recycler.maxCapacityPerThread=0 -Dlog4j.shutdownHookEnabled=false -Dlog4j2.disable.jmx=true -Dlog4j.skipJansi=true -XX:+HeapDumpOnOutOfMemoryError -Des.path.home=/usr/local/lib/elasticsearch -cp /usr/local/lib/elasticsearch/lib/* org.elasticsearch.bootstrap.Elasticsearch -d --pidfile=/var/run/elasticsearch/elasticsearch.pid -Epath.conf=/usr/local/etc/elasticsearch{VM Periodic Task Th}

3

General Discussion / Opnsense box stops getting wan IP after 15 or 20 days

« on: April 28, 2022, 05:50:12 pm »

I am running 21.1.6.
I have experienced twice in last month an a half that my router stopped receiving IPV4 WAN address from the AT&T pass thru modem. It does not lose the IPV6 address.
I had to reboot to get it back up and running.

What could cause this?
For troubleshooting this, what logs should I be looking into? I have Zenarmor- Sensei setup for LAN interface, and this is what I saw in the System Diagnostic Activity. Can this be the reason, "HeapDumpOnOutOfMemoryError"?
My box has 8 GIG of memory and Intel core i5 2.30 GHZ 4 core cpu.

• /usr/local/openjdk8/bin/java -Xms2g -Xmx2g -XX:+UseConcMarkSweepGC -XX:CMSInitiatingOccupancyFraction=75 -XX:+UseCMSInitiatingOccupancyOnly -XX:+AlwaysPreTouch -server -Xss1m -Djava.awt.headless=true -Dfile.encoding=UTF-8 -Djna.nosys=true -Djdk.io.permissionsUseCanonicalPath=true -Dio.netty.noUnsafe=true -Dio.netty.noKeySetOptimization=true -Dio.netty.recycler.maxCapacityPerThread=0 -Dlog4j.shutdownHookEnabled=false -Dlog4j2.disable.jmx=true -Dlog4j.skipJansi=true -XX:+HeapDumpOnOutOfMemoryError -Des.path.home=/usr/local/lib/elasticsearch -cp /usr/local/lib/elasticsearch/lib/* org.elasticsearch.bootstrap.Elasticsearch -d --pidfile=/var/run/elasticsearch/elasticsearch.pid -Epath.conf=/usr/local/etc/elasticsearch{VM Periodic Task Th}

4

22.1 Production Series / Re: IPv6 working properly???

« on: February 13, 2022, 04:52:03 pm »

I also have found since updating to 22.1 that RA would not start.
After much messing and many reboots, I removed the DNS servers entries I had in all the interfaces on RA and rebooted and it started working.
I then put them back again (to the DNS servers I wanted in there) and rebooted again.

Now it SEEMS to be back to normal.... in that RA starts on boot up and the problem has gone.... I think....

Chris

I am having the same issue. RA, what is this and where is it in GUI?

5

General Discussion / PiHole and Opnsense - which IP to use in the Opnsense System --> General DNS fi

« on: February 02, 2022, 01:14:29 pm »

I have a simple setup of Opnsense+PiHole.
I have assigned the IP of my PiHole to the DNS field in DHCP of Opnsense.
Should I use PiHole's IP in the System- Setting - General in the DNS field or use something like 9.9.9.9 in the system DNS box?

6

Zenarmor (Sensei) / Re: Elastic search won't start on 22.1

« on: February 01, 2022, 03:53:55 pm »

Hi,

What if you install ubench manually?

pkg install -fy ubench

When I try to install ubench manually it gave the beloww out put, but I think after running pkg clean something good happened. The configuration went on and completed.
pkg install -y ubench
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.
Checking integrity... done (0 conflicting)
The most recent versions of packages are already installed


Thank you for the pkg clean suggestion, I believe that worked.

7

Zenarmor (Sensei) / Re: Elastic search won't start on 22.1

« on: February 01, 2022, 01:26:40 pm »

Hi,

Can you share the commands output;

pkg clean
pkg update
pkg search ubench

I have reinstalled Zenarmor but did not configure again yet because of the ubench error I got yesterday.

pkg clean output
root@router:~ # pkg clean
The following package files will be deleted:
        /var/cache/pkg/os-sunnyvalley-1.2_1~c903d6c917.txz
        /var/cache/pkg/os-sensei-1.10.1~2e63a9cffd.txz
        /var/cache/pkg/os-sunnyvalley-1.2_1.txz
        /var/cache/pkg/os-sensei-updater-1.10.txz
        /var/cache/pkg/os-sensei-1.10.1.txz
        /var/cache/pkg/os-sensei-updater-1.10~9249ba3dac.txz
        /var/cache/pkg/ubench-0.32~bbd4f2ad21.txz
        /var/cache/pkg/ubench-0.32.txz
        /var/cache/pkg/os-sensei-agent-1.10.5~f5aa1cfce9.txz
        /var/cache/pkg/os-sensei-agent-1.10.5.txz
The cleanup will free 48 MiB

Proceed with cleaning the cache? [y/N]: y

oot@router:~ # pkg update
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
SunnyValley repository is up to date.
All repositories are up to date.

pkg search ubench
ubench-0.32                    Unix Benchmark Utility for CPU(s) and memory

By the way, I hit Y to pkg clean and cleaned out the pkgs.

8

Zenarmor (Sensei) / Re: Elastic search won't start on 22.1

« on: February 01, 2022, 01:04:06 am »

I got the same issue on 22.1 after I updated sunnyvalley to 1.2.1, os-sesi to 1.10.1.
So, I uninstalled and reinstalled zenarmor, while coiffuring ZI get the error  in hardware configuration "We could not locate ubench package, tried to install it, and installation did not work.".

Help pls.

9

General Discussion / Re: LAN and IOT VLAN firewall rules

« on: January 19, 2022, 12:45:04 am »

@chemlud
@jp0469

Thank you. I believe I got this working.

10

General Discussion / Re: LAN and IOT VLAN firewall rules

« on: January 18, 2022, 04:07:25 pm »

Thanks, I moved that to the top. How about rest of IOT and LAN rules look?

11

General Discussion / LAN and IOT VLAN firewall rules

« on: January 18, 2022, 03:11:16 pm »

I have created a LAN and VLAN-IOT setup for my home office.
I simply want VLAN-IOT subnet to just have internet access but not the LAN access.
I am not an IT person and not sure the rules I created, with help of the Opnsense forum and internet, are valid and protects my network.

I would appreciate any feedback.

LAN Rules


IOT Rules


Aliases

12

22.1 Production Series / Re: IPS Crashes During Upload Portion of Speedtest

« on: January 16, 2022, 02:23:44 am »

I saw the same thing, not sure if IPS crashed but WAN stopped getting IP address and it shoed in dashboard WAN IP 0.0.0.0. This is after running speed test.
I installed 21.7 and after some updates I am at 21.7.7 and I will stay here until things get better.

13

Intrusion Detection and Prevention / Re: Intrusion Prevention System setup in my firewall

« on: January 08, 2022, 05:48:42 pm »

Your link does not work,
but this guide helped me:
https://homenetworkguy.com/how-to/configure-intrusion-detection-opnsense/#_

Thanks, I used the same link. I updated my link.
Did you use LAN or WAN  setup? Did you make two policies, one for Alert and one for Drop?

14

Intrusion Detection and Prevention / Re: Intrusion Prevention System setup in my firewall

« on: January 08, 2022, 05:24:12 pm »

Your link does not work,
but this guide helped me:
https://homenetworkguy.com/how-to/configure-intrusion-detection-opnsense/#_

Thanks, I used the same link. I updated my link.
Did you use LAN or WAN  setup?

15

Intrusion Detection and Prevention / Intrusion Prevention System setup in my firewall

« on: January 08, 2022, 04:40:41 am »

I am planning to follow this guide to enable Intrusion Prevention System using this guide. Will this give me basic protection?

https://homenetworkguy.com/how-to/configure-intrusion-detection-opnsense/#_