Topics

1

17.1 Legacy Series / Firewall keeps crashing while using WebGUI

« on: June 07, 2017, 10:28:51 pm »

Ever since the last couple updates (I think it started with 17.1.6) the firewall keeps crashing on my while I use the WebGUI or do anything on the command line. If I don't touch the firewall, it seems to be stable.

Today it is extremely bad, firewall crashes every couple of minutes.

The only weird things I can find in the system log are these:

Code: [Select]

Jun  7 21:40:45 gw1 configd.py: [599ea6f1-628c-4e00-a675-d586418490a4] Inline action failed with OPNsense/HAProxy OPNsense/HAProxy/haproxy.conf 'collections.OrderedDict object' has no attribute 'HAProxy' at Traceback (most recent call last):   File "/usr/local/opnsense/service/modules/processhandler.py", line 505, in execute     return ph_inline_actions.execute(self, inline_act_parameters)   File "/usr/local/opnsense/service/modules/ph_inline_actions.py", line 50, in execute     filenames = tmpl.generate(parameters)   File "/usr/local/opnsense/service/modules/template.py", line 309, in generate     raise render_exception Exception: OPNsense/HAProxy OPNsense/HAProxy/haproxy.conf 'collections.OrderedDict object' has no attribute 'HAProxy'

and this:

Code: [Select]

Jun  7 21:48:09 gw1 flowd_aggregate.py: flowd aggregate died with message Traceback (most recent call last):   File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 148, in run     aggregate_flowd(do_vacuum)   File "/usr/local/opnsense/scripts/netflow/flowd_aggregate.py", line 79, in aggregate_flowd     stream_agg_object.add(flow_record_cpy)   File "/usr/local/opnsense/scripts/netflow/lib/aggregates/source.py", line 105, in add     super(FlowSourceAddrDetails, self).add(flow)   File "/usr/local/opnsense/scripts/netflow/lib/aggregate.py", line 258, in add     self._update_cur.execute(self._update_stmt, flow) DatabaseError: database disk image is malformed

Regarding the last one, I disabled Netflow but that doesn't seem to help. The HAProxy log entry appears more often than the netflow one.

Any ideas?

2

17.1 Legacy Series / UPnP not working at all

« on: March 23, 2017, 02:22:19 pm »

Hi,

I enabled UPnP service, left the "default deny" unchecked. However, nothing seems to work. Tried various devices here that all use UPNP but the status of the UPNP service shows zero entries and the devices complain they can't set up port forwarding.

Not sure where to look for logs for this.

Any clues?

3

17.1 Legacy Series / Firewall not using DNS overrides?

« on: March 21, 2017, 03:42:14 pm »

Hi,

I configured DNS Forwarder and added a few host overrides, which works great from any client using the firewall as a DNS server. However, it is not working from the firewall itself, e.g. if I do a nslookup from the firewall shell, it sends the request to the forwarders instead of resolving through the host overrides.

Am I missing something here?

Thanks

4

17.1 Legacy Series / [SOLVED] Restrict access to management (HTTP/SSH)

« on: March 21, 2017, 03:40:37 pm »

I can't seem to find an option to restrict access to the firewall GUI and SSH. I can only enable or disable the options. How is this done?

5

17.1 Legacy Series / [REQ] - Logging for automatic rules (NAT)

« on: March 21, 2017, 02:00:30 pm »

Hi,

I am not sure if this is the right place to drop feature requests, but I'll give it a try:

Currently, when you add a new port forwarding rule and let it automatically create a corresponding firewall rule, that firewall rule has logging disabled and the rule can't be edited. So if I want logging, I would have to add the firewall rule manually and disable automatic rule creation.

Why not give me an option to enable logging on these auto-created rules?

Thanks

6

17.1 Legacy Series / Booting image from USB stops in the middle of the process

« on: March 20, 2017, 01:02:34 pm »

I am trying to install 17.1 from a USB stick (serial image). It seems to boot up for a while, lots of messages, but then stops at "Trying to mount root". It just hangs there and stops responding. Any ideas?

Thanks

7

17.1 Legacy Series / [SOLVED] SSH headless installation

« on: March 20, 2017, 11:41:46 am »

Hi,

is the new SSH headless installation option included in every image or do I need to download a specific one?

Thanks