Topics

Code Select Expand

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 21.7.3_1 (amd64/OpenSSL) at Thu Sep 30 14:07:04 UTC 2021
Fetching changelog information, please wait... Certificate verification failed for /C=NL/ST=Zuid-Holland/L=Middelharnis/O=OPNsense
4281915764736:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
fetch: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/changelog.txz.sig: Authentication error
Updating OPNsense repository catalogue...
Certificate verification failed for /C=NL/ST=Zuid-Holland/L=Middelharnis/O=OPNsense
625717841920:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:

I tried different mirrors.

Twice this month, I have lost WAN.  PPPoE was still running (according to the UI), but restarting it fixed it.
Then today UBound stopped for no apparent reason.

I expect services to restart, when there is a problem.  Or at least allow for a restart if certain conditions are not met, like pinging an external server.

After upgrading, I'm getting an infinite loop of
Python 3.7 jid was killed. Out of swap space.
I can't get past that, so my network is down.

I run Shaper, and I have two Queues.  Priority (for my VOIP phone) and Default.

What I want to do is pass Torrent traffic into a third Queue, called Low Priority.  Since many Torrent clients support SOCKS, I figured the solution would be to set up a SOCK5 server on OpenSense, and have that tunnelled through the Shaper Queue.

Question is, the best way to do that.  Maybe have a Alias IP on the LAN, which SOCKS binds to, and filter by that?

After updating to 19.1.9, a lot of web pages refused to load, yet I could ping out.  It was an MTU issue.

For 1500 MTU over PPPoE, I had the MTU set to 1508, which has worked until now.

I upgraded to 19.1, but now no internet on the LAN.

From the LAN, I can connect to the console (ssh).
From the console, I can ping public addresses.

But from the LAN, no access to public addresses.