Messages

1

17.7 Legacy Series / SSH doesn't work

« on: October 09, 2017, 07:18:35 pm »

Dear Folks,

in the past it works, now it doesn't any more:
login to console via ssh.
When I try to login, the message appears:

Code: [Select]

"----------------------------------------------
|      Hello, this is OPNsense 17.7          |         @@@@@@@@@@@@@@@
|                                            |        @@@@         @@@@
| Website: https://opnsense.org/        |         @@@\\\   ///@@@
| Handbook: https://docs.opnsense.org/   |       ))))))))   ((((((((
| Forums: https://forum.opnsense.org/  |         @@@///   \\\@@@
| Lists: https://lists.opnsense.org/  |        @@@@         @@@@
| Code: https://github.com/opnsense  |         @@@@@@@@@@@@@@@
----------------------------------------------

This account is currently not available.".
In System/Settings/Administration there is in deed ssh access enabled with password login.

Any ideas how to solve this?

Cheers,
Andy

2

16.7 Legacy Series / Re: ssh login blocked

« on: March 18, 2017, 01:43:03 pm »

Bingo that was it!
Issue solved 

Thanks fabian!

3

16.7 Legacy Series / Re: ssh login blocked

« on: March 18, 2017, 11:28:33 am »

Since it was working in the past and I didn't change anything of th fw rules, I suspect it's the latter one. How can I unblock ssh login after too many failed attempts?

4

16.7 Legacy Series / Re: ssh login blocked

« on: March 17, 2017, 10:08:50 pm »

thanks.
activated root login permission, but no change. #its still impossible to get a connection via ssh neither as root nor via other user login.
Ssh times out as the server doesn't respond apparently.

5

16.7 Legacy Series / Re: ssh login blocked

« on: March 17, 2017, 09:37:17 pm »

password yes
root no

6

16.7 Legacy Series / [SOLVED] ssh login

« on: March 17, 2017, 09:16:25 pm »

Hi folks,

this might be a stupid question:
I have tried too many times to login via ssh apparently with a wrong password.
As a consequence ssh seems to block any login attempt now.
Does anybody know how I can unblock this ?

Code: [Select]

Received disconnect from 192.168.1.1 port 22:2: Too many authentication failures
Connection to defiant-nw closed by remote host.
Thanks in advance,
Andy

7

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: August 17, 2016, 10:35:18 pm »

Avoiding VLAN for IPTV and using a managed switch feeding the IPTV stream separately to the opnsense box by a physical interface worked for me. Thiis workaround is now in place and seems to work stable.
Somehow IGMP Proxy doesn't cooperate with VLAN interfaces any more, but well with physical ones (se bug tracker).

Cheers and thanks a lot for your help,
Andy

8

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 26, 2016, 07:15:44 pm »

Hi Franco,

I can imagine the preparations demand loads of energy and time 

And thanks to still hanging on to this topic !

Unfortunately the patch didn't work :-(
Any other options?

Cheers,
Andy

9

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 25, 2016, 04:31:47 pm »

I will wait for the 16.7, hopefully i'll work there again. Lets hope and see 

10

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 15, 2016, 09:47:15 am »

OK sent via PN.


Cheers,
Andy

11

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 06, 2016, 07:14:23 pm »

No improvement unfortunately.
I have also compared the backup xml files from prior the upgrade and after. They are identical.
Maybe something under the hood changed? Kernel,... ?
Sorry my limited capabilities to help but I am not an expert.
Please let me know if you need any further information as input.

Cheers and have a nice evening,
Andy

12

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 06, 2016, 04:44:40 pm »

Ok -- I will try if the downgrade helps. If not I will be back here soon :-)

Cheers,
Andy

13

16.1 Legacy Series / Re: IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 06, 2016, 04:10:12 pm »

Hi Franco,

thanks for your quick reaction!
It was just the version below when it was still working, thus 16.1.17.

Is there any way to downgrade to specifically 16.1.17 for the time being?
Otherwise I would assume I have to install the last image and avoid any updates, but this of course is not the preferred solution from security point of view.

Besides of this small flaw I have to say its really a great piece of software!

Cheers,
Andy

14

16.1 Legacy Series / [SOLVED] IGMP Proxy does not work any more after update to OPNsense 16.1.18

« on: July 05, 2016, 09:26:19 pm »

Hi Folks,

unfortunately I realized the igmp proxy fails to start after the update to 16.1.18.
With the previous version everything worked fine.

Now in the log the error message is:
igmpproxy[86381]: There must be at least 2 Vif's where one is upstream.

Thats very annoying - especially since I didn't change anything.

Any help would be very welcome!

Thanks a lot in advance
Andy

15

General Discussion / IPTV/multicast floods wifi interface

« on: May 17, 2016, 02:28:09 pm »

Dear experts,

I have a opnsense box as follows:
WAN: iptv/internet separated by vlans (via FTH)
LAN: local lan, including one IPTV receiver
WIFI: guest wifi, separate subnet from LAN. Wifi card is built into pfsense box

Everything is running well, except:
When the IPTV receiver is on and receives broadcast (via multicast and IGMP proxy in opnsense), then it seems that all multicasts are also sent to the wifi interface and not only to the LAN.
This obviously floods my guest wifi with useless data, as there is no IPTV receiver in the wifi.

I have no clue why the multicasts are also directed to the wifi and not only to the LAN, because in the IGMP proxy there is only entered the LAN subnet.

Has anybody an idea how I can block the multicast packets from entering the wifi interface?

Thanks for your help in advance,
andy