OPNsense
  • Home
  • Help
  • Search
  • Login
  • Register

  • OPNsense Forum »
  • Profile of henningkessler »
  • Show Posts »
  • Topics
  • Profile Info
    • Summary
    • Show Stats
    • Show Posts...
      • Messages
      • Topics
      • Attachments

Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

  • Messages
  • Topics
  • Attachments

Topics - henningkessler

Pages: [1]
1
24.1 Legacy Series / HAProxy does not start after upgrade to 24.1
« on: February 06, 2024, 08:15:00 am »
Hello,

 I just upgraded my opnsense box to OPNsense 24.1_1 and now HAproxy refuses to start. The syntax check says that there are no errors in the config. I tried to start the process from the CLI but I just get the same error message as in the system log:
Code: [Select]
/usr/local/etc/rc.d/haproxy: WARNING: failed to start haproxyAny idea what is going wrong?

Regards

Henning

2
23.1 Legacy Series / FreeRADIUS EAP-GTC Google LDAP
« on: February 24, 2023, 03:04:05 pm »
Hello,

I just did a small test and with only a few edits in eap, default and inner-tunnel config files I could configure the FreeRADIUS plugin to use Google LDAP as authentication source for my Unifi APs. Here are some more details https://www.nasirhafeez.com/freeradius-with-google-g-suite-workspace-secure-ldap-for-wpa2-enterprise-wifi. After a restart or reload pf the config in the webgui everything is gone of course. Is there a chance that the maintainer for the plugin can make this available in the gui?

Regards

Henning

3
22.1 Legacy Series / NUT package brocken?
« on: June 10, 2022, 03:17:34 pm »
I am not really sure when this did happen, but today I realized that the nut package seams to broken for me on two installations (HA-mode version 22.1.8_1). Each of them has an APC UPS attached to them via USB. Both can't connect to the UPS but the same configuration worked for me a couple of versions ago when I configured them.
nut.conf
Code: [Select]
# Please don't modify this file as your changes might be overwritten with
# the next update.
#
MODE=standalone
ups.conf
Code: [Select]
# Please don't modify this file as your changes might be overwritten with
# the next update.
#
[ber0ups02]
driver=usbhid-ups
port=auto
ignorelb
default.battery.runtime.low = 300
default.battery.charge.low = 25

which I run
Quote
upsc -l
from the command line it hangs and when I try to start the service
Code: [Select]
# service nut start
Network UPS Tools - UPS driver controller 2.8.0
Network UPS Tools - Generic HID driver 0.47 (2.8.0)
USB communication driver (libusb 1.0) 0.43
interrupt pipe disabled (add 'pollonly' flag to 'ups.conf' to get rid of this message)
Can't claim USB device [051d:0003]@0/0: Other error
Driver failed to start (exit status=1)
/usr/local/etc/rc.d/nut: WARNING: failed precmd routine for nut
this is the result. it looks like there is a driver issue....

4
21.7 Legacy Series / CARP and IPS Problem
« on: January 03, 2022, 12:13:57 pm »
Hello,

I am running two Supermircos SYS-5018D-FN8T in a HA cluster with OPNsense 21.7.7. I enabled IDS quite a while ago and wanted to switch to IPS. Unfortunately soon after enabling it CARP started flapping especially on the backup system. There had been already some posts which might related to the this problem but with no solution:
https://forum.opnsense.org/index.php?topic=20594.msg95804#msg95804
https://forum.opnsense.org/index.php?topic=20475.msg96098#msg96098

Here is a rather larger part of my system.log of the backup machine:
Code: [Select]
2022-01-03T10:35:53 opnsense[98989] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:35:53 opnsense[98989] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:35:52 kernel lagg0: deletion failed: 3
2022-01-03T10:35:52 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:35:48 sshd[16828] Connection closed by XX.XX.1.63 port 58704 [preauth]
2022-01-03T10:35:34 opnsense[97418] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:35:34 opnsense[97418] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:35:33 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:35:12 opnsense[67818] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:35:12 opnsense[67818] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:35:12 kernel lagg0: deletion failed: 3
2022-01-03T10:35:12 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:34:48 sshd[37127] Connection closed by XX.XX.1.63 port 58486 [preauth]
2022-01-03T10:33:52 opnsense[83395] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:33:52 opnsense[83395] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:33:52 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:33:48 sshd[23598] Connection closed by XX.XX.1.63 port 58254 [preauth]
2022-01-03T10:33:42 opnsense[96228] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:33:42 opnsense[96228] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:33:41 kernel lagg0: deletion failed: 3
2022-01-03T10:33:41 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:32:48 sshd[70982] Connection closed by XX.XX.1.63 port 58006 [preauth]
2022-01-03T10:31:48 sshd[35199] Connection closed by XX.XX.1.63 port 57774 [preauth]
2022-01-03T10:31:44 opnsense[81256] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:31:44 opnsense[81256] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:31:43 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:31:38 opnsense[7406] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:31:38 opnsense[7406] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:31:38 kernel lagg0: deletion failed: 3
2022-01-03T10:31:38 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:31:37 opnsense[96787] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:31:37 opnsense[96787] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:31:36 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:31:32 opnsense[89950] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:31:32 opnsense[89950] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:31:32 kernel lagg0: deletion failed: 3
2022-01-03T10:31:32 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:31:08 opnsense[66145] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:31:08 opnsense[66145] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:31:07 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:30:48 sshd[94824] Connection closed by XX.XX.1.63 port 57534 [preauth]
2022-01-03T10:29:48 sshd[38799] Connection closed by XX.XX.1.63 port 57306 [preauth]
2022-01-03T10:29:09 opnsense[7800] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:29:09 opnsense[7800] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:29:08 kernel lagg0: deletion failed: 3
2022-01-03T10:29:08 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:29:01 opnsense[79098] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:29:01 opnsense[79098] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:29:00 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:28:48 sshd[11391] Connection closed by XX.XX.1.63 port 57078 [preauth]
2022-01-03T10:27:52 opnsense[93964] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:27:52 opnsense[93964] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:27:52 kernel lagg0: deletion failed: 3
2022-01-03T10:27:52 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:27:48 sshd[5844] Connection closed by XX.XX.1.63 port 56856 [preauth]
2022-01-03T10:27:24 opnsense[61991] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:27:24 opnsense[61991] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:27:24 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:26:52 opnsense[35605] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:26:52 opnsense[35605] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:26:51 kernel lagg0: deletion failed: 3
2022-01-03T10:26:51 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:26:49 opnsense[25692] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:26:49 opnsense[25692] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:26:49 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:26:48 sshd[93792] Connection closed by XX.XX.1.63 port 56628 [preauth]
2022-01-03T10:25:48 sshd[34365] Connection closed by XX.XX.1.63 port 56402 [preauth]
2022-01-03T10:25:22 opnsense[73718] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:25:22 opnsense[73718] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:25:22 kernel lagg0: deletion failed: 3
2022-01-03T10:25:22 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:24:48 sshd[63112] Connection closed by XX.XX.1.63 port 56164 [preauth]
2022-01-03T10:23:58 opnsense[3837] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:23:58 opnsense[3837] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:23:58 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:23:52 opnsense[11090] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:23:52 opnsense[11090] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:23:51 kernel lagg0: deletion failed: 3
2022-01-03T10:23:51 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:23:48 sshd[42952] Connection closed by XX.XX.1.63 port 55940 [preauth]
2022-01-03T10:23:29 opnsense[55021] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:23:29 opnsense[55021] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:23:29 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:23:22 opnsense[49096] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:23:22 opnsense[49096] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:23:21 kernel lagg0: deletion failed: 3
2022-01-03T10:23:21 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:22:48 opnsense[55945] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:22:48 opnsense[55945] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:22:48 sshd[58804] Connection closed by XX.XX.1.63 port 55700 [preauth]
2022-01-03T10:22:47 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:21:48 sshd[16849] Connection closed by XX.XX.1.63 port 55474 [preauth]
2022-01-03T10:21:32 opnsense[53008] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:21:32 opnsense[53008] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:21:32 kernel lagg0: deletion failed: 3
2022-01-03T10:21:32 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:21:24 opnsense[84927] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:21:24 opnsense[84927] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:21:23 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:21:02 opnsense[70315] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:21:02 opnsense[70315] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:21:01 kernel lagg0: deletion failed: 3
2022-01-03T10:21:01 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:20:48 sshd[48394] Connection closed by XX.XX.1.63 port 55246 [preauth]
2022-01-03T10:20:41 opnsense[92011] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:20:41 opnsense[92011] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:20:41 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:20:02 opnsense[98517] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:20:02 opnsense[98517] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:20:01 kernel lagg0: deletion failed: 3
2022-01-03T10:20:01 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:19:48 sshd[41827] Connection closed by XX.XX.1.63 port 55034 [preauth]
2022-01-03T10:19:16 opnsense[92403] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:19:16 opnsense[92403] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:19:15 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:19:01 opnsense[3307] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:19:01 opnsense[3307] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:19:01 kernel lagg0: deletion failed: 3
2022-01-03T10:19:01 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:18:49 opnsense[34989] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:18:49 opnsense[34989] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:18:48 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:18:48 sshd[64796] Connection closed by XX.XX.1.63 port 54808 [preauth]
2022-01-03T10:18:32 opnsense[4467] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:18:32 opnsense[4467] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:18:32 kernel lagg0: deletion failed: 3
2022-01-03T10:18:32 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:17:48 sshd[38482] Connection closed by XX.XX.1.63 port 54562 [preauth]
2022-01-03T10:17:29 opnsense[58194] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:17:29 opnsense[58194] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:17:29 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:16:55 opnsense[50281] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:16:55 opnsense[50281] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:16:54 kernel lagg0: deletion failed: 3
2022-01-03T10:16:54 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:16:48 sshd[66347] Connection closed by XX.XX.1.63 port 54342 [preauth]
2022-01-03T10:15:48 sshd[26582] Connection closed by XX.XX.1.63 port 54122 [preauth]
2022-01-03T10:15:29 opnsense[12709] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:15:29 opnsense[12709] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:15:28 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:15:22 opnsense[24209] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:15:22 opnsense[24209] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:15:22 kernel lagg0: deletion failed: 3
2022-01-03T10:15:22 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:15:00 opnsense[24685] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:15:00 opnsense[24685] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:14:59 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:14:52 opnsense[54438] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:14:52 opnsense[54438] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:14:52 kernel lagg0: deletion failed: 3
2022-01-03T10:14:52 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:14:48 sshd[9819] Connection closed by XX.XX.1.63 port 53888 [preauth]
2022-01-03T10:14:33 opnsense[45982] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:14:33 opnsense[45982] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:14:33 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:14:22 opnsense[45745] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:14:22 opnsense[45745] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:14:21 kernel lagg0: deletion failed: 3
2022-01-03T10:14:21 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:13:48 sshd[15876] Connection closed by XX.XX.1.63 port 53664 [preauth]
2022-01-03T10:13:22 opnsense[35345] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:13:22 opnsense[35345] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:13:22 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:12:48 sshd[92490] Connection closed by XX.XX.1.63 port 53436 [preauth]
2022-01-03T10:12:32 opnsense[22824] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:12:32 opnsense[22824] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:12:32 kernel lagg0: deletion failed: 3
2022-01-03T10:12:32 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:12:03 opnsense[70656] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:12:03 opnsense[70656] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:12:02 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:11:48 sshd[14449] Connection closed by XX.XX.1.63 port 53198 [preauth]
2022-01-03T10:10:48 sshd[13061] Connection closed by XX.XX.1.63 port 52970 [preauth]
2022-01-03T10:09:55 opnsense[11753] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:09:55 opnsense[11753] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:09:54 kernel lagg0: deletion failed: 3
2022-01-03T10:09:54 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:09:48 sshd[4448] Connection closed by XX.XX.1.63 port 52754 [preauth]
2022-01-03T10:09:45 /send_heartbeat.py[81521] unexpected result from https://opnsense.emergingthreats.net/api/v1/telemetry (http_code 403)
2022-01-03T10:08:48 sshd[42346] Connection closed by XX.XX.1.63 port 52520 [preauth]
2022-01-03T10:07:59 opnsense[8806] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:07:59 opnsense[8806] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:07:59 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:07:52 opnsense[57612] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:07:52 opnsense[57612] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:07:51 kernel lagg0: deletion failed: 3
2022-01-03T10:07:51 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:07:48 sshd[10962] Connection closed by XX.XX.1.63 port 52300 [preauth]
2022-01-03T10:07:26 opnsense[85579] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:07:26 opnsense[85579] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:07:26 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:07:22 opnsense[66863] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:07:22 opnsense[66863] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:07:21 kernel lagg0: deletion failed: 3
2022-01-03T10:07:21 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:06:48 sshd[68917] Connection closed by XX.XX.1.63 port 52078 [preauth]
2022-01-03T10:06:11 opnsense[82316] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:06:11 opnsense[82316] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:06:10 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:06:01 opnsense[15045] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:06:01 opnsense[15045] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:06:01 kernel lagg0: deletion failed: 3
2022-01-03T10:06:01 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:05:48 sshd[91170] Connection closed by XX.XX.1.63 port 51856 [preauth]
2022-01-03T10:05:35 opnsense[17263] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:05:35 opnsense[17263] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:05:34 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:05:31 opnsense[37282] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:05:31 opnsense[37282] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:05:31 kernel lagg0: deletion failed: 3
2022-01-03T10:05:31 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:04:48 sshd[20225] Connection closed by XX.XX.1.63 port 51610 [preauth]
2022-01-03T10:03:48 sshd[28497] Connection closed by XX.XX.1.63 port 51370 [preauth]
2022-01-03T10:03:01 opnsense[7286] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:03:01 opnsense[7286] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:03:00 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:02:48 sshd[89851] Connection closed by XX.XX.1.63 port 51134 [preauth]
2022-01-03T10:02:47 opnsense[35560] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:02:47 opnsense[35560] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:02:47 kernel lagg0: deletion failed: 3
2022-01-03T10:02:47 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:02:34 opnsense[55499] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:02:34 opnsense[55499] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:02:33 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:01:48 sshd[72502] Connection closed by XX.XX.1.63 port 50912 [preauth]
2022-01-03T10:01:47 opnsense[95828] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:01:47 opnsense[95828] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:01:47 kernel lagg0: deletion failed: 3
2022-01-03T10:01:47 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:00:50 opnsense[90334] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:50 opnsense[90334] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:00:50 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:00:48 sshd[45402] Connection closed by XX.XX.1.63 port 50692 [preauth]
2022-01-03T10:00:47 opnsense[22346] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:47 opnsense[22346] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:00:46 kernel lagg0: deletion failed: 3
2022-01-03T10:00:46 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:00:36 opnsense[92514] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:36 opnsense[92514] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:00:36 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:00:32 opnsense[82847] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:32 opnsense[82847] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:00:31 kernel lagg0: deletion failed: 3
2022-01-03T10:00:31 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T10:00:29 opnsense[74533] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:29 opnsense[74533] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T10:00:29 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T10:00:22 opnsense[77233] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T10:00:22 opnsense[77233] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T10:00:21 kernel lagg0: deletion failed: 3
2022-01-03T10:00:21 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:59:52 opnsense[11159] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:59:52 opnsense[11159] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:59:51 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:59:48 sshd[48200] Connection closed by XX.XX.1.63 port 50466 [preauth]
2022-01-03T09:59:21 opnsense[18360] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:59:21 opnsense[18360] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:59:21 kernel lagg0: deletion failed: 3
2022-01-03T09:59:21 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:58:48 sshd[33641] Connection closed by XX.XX.1.63 port 50240 [preauth]
2022-01-03T09:58:48 opnsense[91975] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:58:48 opnsense[91975] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:58:47 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:58:44 opnsense[20331] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:58:44 opnsense[20331] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:58:44 kernel lagg0: deletion failed: 3
2022-01-03T09:58:44 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:57:48 sshd[30629] Connection closed by XX.XX.1.63 port 49998 [preauth]
2022-01-03T09:57:35 opnsense[85189] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:57:35 opnsense[85189] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:57:35 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:57:32 opnsense[97950] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:57:32 opnsense[97950] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:57:31 kernel lagg0: deletion failed: 3
2022-01-03T09:57:31 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:57:19 opnsense[8335] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:57:19 opnsense[8335] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:57:19 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:57:15 opnsense[97566] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:57:15 opnsense[97566] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:57:14 kernel lagg0: deletion failed: 3
2022-01-03T09:57:14 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:56:51 opnsense[32087] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:56:51 opnsense[32087] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:56:50 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:56:48 sshd[14119] Connection closed by XX.XX.1.63 port 49778 [preauth]
2022-01-03T09:56:45 opnsense[38427] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:56:45 opnsense[38427] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:56:44 kernel lagg0: deletion failed: 3
2022-01-03T09:56:44 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:55:57 opnsense[25629] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:55:57 opnsense[25629] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:55:56 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:55:48 sshd[36309] Connection closed by XX.XX.1.63 port 49548 [preauth]
2022-01-03T09:55:22 opnsense[80852] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:55:22 opnsense[80852] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:55:22 kernel lagg0: deletion failed: 3
2022-01-03T09:55:22 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:54:48 sshd[33242] Connection closed by XX.XX.1.63 port 49318 [preauth]
2022-01-03T09:53:48 sshd[16988] Connection closed by XX.XX.1.63 port 49078 [preauth]
2022-01-03T09:53:10 opnsense[4792] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:53:10 opnsense[4792] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:53:09 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:53:02 opnsense[88197] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:53:02 opnsense[88197] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:53:01 kernel lagg0: deletion failed: 3
2022-01-03T09:53:01 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:52:55 opnsense[46132] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:52:55 opnsense[46132] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:52:54 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:52:48 sshd[8266] Connection closed by XX.XX.1.63 port 48844 [preauth]
2022-01-03T09:52:08 opnsense[27935] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:52:08 opnsense[27935] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "BACKUP" for vhid 5
2022-01-03T09:52:08 kernel lagg0: deletion failed: 3
2022-01-03T09:52:08 kernel carp: 5@lagg0: MASTER -> BACKUP (more frequent advertisement received)
2022-01-03T09:51:48 sshd[1830] Connection closed by XX.XX.1.63 port 48618 [preauth]
2022-01-03T09:50:48 sshd[29721] Connection closed by XX.XX.1.63 port 48384 [preauth]
2022-01-03T09:49:48 sshd[95649] Connection closed by XX.XX.1.63 port 48156 [preauth]
2022-01-03T09:49:43 opnsense[62992] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Resyncing OpenVPN instances for interface XX.XX.1.254 - LAN CARP.
2022-01-03T09:49:43 opnsense[62992] /usr/local/etc/rc.syshook.d/carp/20-openvpn: Carp cluster member "XX.XX.1.254 - LAN CARP (5@lagg0)" has resumed the state "MASTER" for vhid 5
2022-01-03T09:49:42 kernel carp: 5@lagg0: BACKUP -> MASTER (master timed out)
2022-01-03T09:48:48 sshd[14573] Connection closed by XX.XX.1.63 port 47930 [preauth]
2022-01-03T09:47:48 sshd[59518] Connection closed by XX.XX.1.63 port 47700 [preauth]

5
20.7 Legacy Series / NGINX plugin does not copy cert to /keys for TCP stream proxy
« on: January 11, 2021, 12:13:38 pm »
Hello,

I am trying to configure a TCP stream proxy for LDAP with the NGINX plugin using a cert from the lets encrypt plugin. Unfortunately starting Nginx always fails with the following error:
Code: [Select]
cannot load certificate "/usr/local/etc/nginx/key/f5e949f2-0d6b-42a8-8c52-9706945f9454.pem": BIO_new_file() failed (SSL: error:02001002:system library:fopen:No such file or directory:fopen('/usr/local/etc/nginx/key/f5e949f2-0d6b-42a8-8c52-9706945f9454.pem','r') error:2006D080:BIO routines:BIO_new_file:no such file)
this is the nginx conf:
Code: [Select]
...
stream {
...

    # UPSTREAM SERVERS
    upstream upstream123dd4ddf4c74e86bce785b2817d5096 {
        hash $remote_addr consistent;
        server IP:636 weight=1 max_conns=5 max_fails=2 fail_timeout=20;
        server IP:636 weight=1 max_conns=5 max_fails=2 fail_timeout=20;
    }

    # upstream maps


    include opnsense_stream_vhost_plugins/*.conf;

    # servers
    server {
        listen  63636 ssl;
        listen  [::]:63636 ssl;

        access_log  /var/log/nginx/stream_f5e949f2-0d6b-42a8-8c52-9706945f9454.access.log main;
        error_log  /var/log/nginx/stream_f5e949f2-0d6b-42a8-8c52-9706945f9454.error.log info;

        ssl_client_certificate /usr/local/etc/nginx/key/f5e949f2-0d6b-42a8-8c52-9706945f9454_ca.pem;
        ssl_verify_client off;
        ssl_certificate_key /usr/local/etc/nginx/key/f5e949f2-0d6b-42a8-8c52-9706945f9454.key;
        ssl_certificate /usr/local/etc/nginx/key/f5e949f2-0d6b-42a8-8c52-9706945f9454.pem;
        ssl_protocols TLSv1.2 TLSv1.3;
        ssl_dhparam /usr/local/etc/dh-parameters.4096;
        ssl_ciphers 'ECDHE-ECDSA-CAMELLIA256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-CAMELLIA256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-ECDSA-CAMELLIA128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-CAMELLIA128-GCM-SHA256:ECDHE-ECDSA-AES256-SHA384:ECDHE-ECDSA-CAMELLIA256-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-CAMELLIA256-SHA384:ECDHE-ECDSA-AES128-SHA256:ECDHE-ECDSA-CAMELLIA128-SHA256:ECDHE-RSA-AES128-SHA256';
        ssl_session_timeout 1d;
        ssl_session_cache shared:sslcachef5e949f20d6b42a88c529706945f9454:50m;
        ssl_session_tickets off;
        ssl_prefer_server_ciphers on;

        proxy_ssl on;
        proxy_pass upstream123dd4ddf4c74e86bce785b2817d5096;
        proxy_protocol off;

    }
}
...

Is this a bug or am I holding it wrong?

Henning

6
20.1 Legacy Series / DHCP Failover Troubleshooting
« on: August 15, 2020, 03:50:23 pm »
Hello,

I have an installation where I run DHCP with failover on 5 different Interfaces. On three of them everything is running as it should but on the other two DHCP state is set on recover on both sides with the other peer set as unknown-state. As for troubleshooting I did everything which is listed here https://docs.netgate.com/pfsense/en/latest/highavailability/dhcp-failover-troubleshooting.html but still no luck.

Has someone else any other tips or instructions I could try?

Regards

Henning

7
German - Deutsch / Telekom IPv6 endloser renew
« on: June 15, 2020, 05:15:06 pm »
Hallo,

Nachdem IPv6 an meinem ADSL Anschluss der Telekom lang halbwegs problemlos funktioniert hat (Einrichtung nach https://docs.opnsense.org/manual/how-tos/ipv6_dsl.html), ist mir seit gestern aufgefallen das permanent die IPv6 Adresse erneuert wird:
Code: [Select]
2020-06-15T17:09:57 configd.py: [0fb34a55-97c6-43c2-9970-93d830c6d2fa] Show log
2020-06-15T17:09:55 configd.py: [015978b3-82c5-4622-8312-01211854eb95] New IPv6 on pppoe0
2020-06-15T17:09:53 configd.py: [95fa9549-993f-4f2b-a9cb-7e92071cf70e] New IPv6 on pppoe0
2020-06-15T17:09:51 configd.py: [ff2cd119-f604-4f41-b1aa-89bf1688a329] New IPv6 on pppoe0
2020-06-15T17:09:48 configd.py: [e20f47d0-cc9d-46d3-ae5e-277cd3b2af38] New IPv6 on pppoe0
2020-06-15T17:09:46 configd.py: [33785606-da95-456f-b719-3129a66f03f6] New IPv6 on pppoe0
2020-06-15T17:09:44 configd.py: [346acd6c-067a-4101-b4fd-91f1e6485ab0] New IPv6 on pppoe0
2020-06-15T17:09:42 configd.py: [bdd02580-61d6-4edd-9d21-db5369272253] New IPv6 on pppoe0
2020-06-15T17:09:39 configd.py: [99b9c282-5327-4ced-9e97-df2b373f6201] New IPv6 on pppoe0
2020-06-15T17:09:37 configd.py: [1abd0b63-ddfd-4a2e-9466-c163a626f458] New IPv6 on pppoe0
2020-06-15T17:09:35 configd.py: [1c38df23-60ee-4227-8e63-5ed593e3a729] New IPv6 on pppoe0
2020-06-15T17:09:33 configd.py: [138e2c9e-ff33-4ae3-91d5-dffbf24fc6d8] New IPv6 on pppoe0
2020-06-15T17:09:30 configd.py: [c47db9e4-4388-43e2-b2b5-f5349a90d31d] New IPv6 on pppoe0
2020-06-15T17:09:28 configd.py: [2ca23137-9a2f-4a98-93aa-1c6ebd08289c] New IPv6 on pppoe0
2020-06-15T17:09:26 configd.py: [89e19975-4ef6-4cf7-b9a1-652d0f1e3549] New IPv6 on pppoe0
2020-06-15T17:09:23 configd.py: [a986bd9d-e382-4f12-a629-965ee5203860] New IPv6 on pppoe0
2020-06-15T17:09:21 configd.py: [6322d5c4-2763-4557-b9e6-61747be608d8] New IPv6 on pppoe0
2020-06-15T17:09:19 configd.py: [d3ee9140-5772-4564-b550-97ac466e8ebb] New IPv6 on pppoe0
2020-06-15T17:09:17 configd.py: [1beb8c8a-e22e-4079-8693-603eb2c55491] New IPv6 on pppoe0
2020-06-15T17:09:14 configd.py: [77e5b4df-99a8-44dc-8b88-1c90ad3ff1bc] New IPv6 on pppoe0
2020-06-15T17:09:12 configd.py: [82c360e8-364d-42a9-95f3-4cbc0c691bee] New IPv6 on pppoe0
2020-06-15T17:09:10 configd.py: [e6791ef5-eaeb-41d1-a5f2-e0330b8b5fda] New IPv6 on pppoe0
2020-06-15T17:09:08 configd.py: [4ccfe9a9-4e6c-43ba-a03e-b18bb283c1f8] New IPv6 on pppoe0
2020-06-15T17:09:05 configd.py: [11fb3e74-bc05-4097-9388-b18b50d7cc73] New IPv6 on pppoe0
2020-06-15T17:09:03 configd.py: [b100a94e-8308-46be-a47b-b46fb27603a1] New IPv6 on pppoe0
2020-06-15T17:09:01 configd.py: [59a2f606-187b-4378-9f37-cb1c3ca9f96a] New IPv6 on pppoe0
2020-06-15T17:08:58 configd.py: [c54ccfb1-a452-41c8-bcad-635f6b860b3a] New IPv6 on pppoe0
2020-06-15T17:08:56 configd.py: [0adc9d30-7d24-476f-94b2-97377a89e440] New IPv6 on pppoe0
2020-06-15T17:08:54 configd.py: [227d4883-ee15-41c9-a5f4-541d98847686] New IPv6 on pppoe0

so geht es endlos weiter...

hier mal ein Log

Code: [Select]
2020-06-15T17:10:43 dhcp6c[94655]: reset timer for pppoe0 to 0.982245
2020-06-15T17:10:43 dhcp6c[94655]: server ID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00, pref=-1
2020-06-15T17:10:43 dhcp6c[94655]: get DHCP option DNS, len 32
2020-06-15T17:10:43 dhcp6c[94655]:   status code: no addresses
2020-06-15T17:10:43 dhcp6c[94655]: get DHCP option status code, len 43
2020-06-15T17:10:43 dhcp6c[94655]:   IA_NA: ID=0, T1=0, T2=0
2020-06-15T17:10:43 dhcp6c[94655]: get DHCP option identity association, len 59
2020-06-15T17:10:43 dhcp6c[94655]:   DUID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00
2020-06-15T17:10:43 dhcp6c[94655]: get DHCP option server ID, len 26
2020-06-15T17:10:43 dhcp6c[94655]:   DUID: 00:01:00:01:25:bf:1e:ec:dc:58:bc:e0:0a:3a
2020-06-15T17:10:43 dhcp6c[94655]: get DHCP option client ID, len 14
2020-06-15T17:10:43 dhcp6c[94655]: receive advertise from fe80::de38:e1ff:fe10:bb8b%pppoe0 on pppoe0
2020-06-15T17:10:43 dhcp6c[94655]: reset a timer on pppoe0, state=SOLICIT, timeo=0, retrans=1030
2020-06-15T17:10:43 dhcp6c[94655]: send solicit to ff02::1:2%pppoe0
2020-06-15T17:10:43 dhcp6c[94655]: set option request (len 4)
2020-06-15T17:10:43 dhcp6c[94655]: set elapsed time (len 2)
2020-06-15T17:10:43 dhcp6c[94655]: set identity association
2020-06-15T17:10:43 dhcp6c[94655]: set client ID (len 14)
2020-06-15T17:10:43 dhcp6c[94655]: a new XID (256156) is generated
2020-06-15T17:10:43 dhcp6c[94655]: Sending Solicit
2020-06-15T17:10:43 dhcp6c[94655]: got an expected reply, sleeping.
2020-06-15T17:10:43 dhcp6c[94655]: removing server (ID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00)
2020-06-15T17:10:43 dhcp6c[94655]: removing an event on pppoe0, state=REQUEST
2020-06-15T17:10:43 dhcp6c[94655]: script "/var/etc/dhcp6c_wan_script.sh" terminated
2020-06-15T17:10:43 opnsense: plugins_configure hosts (execute task : unbound_hosts_generate())
2020-06-15T17:10:43 opnsense: plugins_configure hosts (execute task : dnsmasq_hosts_generate())
2020-06-15T17:10:43 opnsense: plugins_configure hosts ()
2020-06-15T17:10:43 opnsense: /usr/local/etc/rc.newwanipv6: The command '/sbin/route add -host -'inet6' '2606:4700:4700::1001' 'fe80::de38:e1ff:fe10:bb8b%'' returned exit code '71', the output was 'route: fe80::de38:e1ff:fe10:bb8b%: hostname nor servname provided, or not known'
2020-06-15T17:10:43 opnsense: /usr/local/etc/rc.newwanipv6: The command '/sbin/route add -host -'inet6' '2606:4700:4700::1111' 'fe80::de38:e1ff:fe10:bb8b%'' returned exit code '71', the output was 'route: fe80::de38:e1ff:fe10:bb8b%: hostname nor servname provided, or not known'
2020-06-15T17:10:43 opnsense: plugins_configure dhcp (execute task : dhcpd_dhcp_configure(,inet6))
2020-06-15T17:10:43 opnsense: plugins_configure dhcp (,inet6)
2020-06-15T17:10:43 opnsense: /usr/local/etc/rc.newwanipv6: On (IP address: 2003:cd:efff:4b13:de58:bcff:fee0:a3a) (interface: WAN[wan]) (real interface: pppoe0).
2020-06-15T17:10:43 opnsense: /usr/local/etc/rc.newwanipv6: IPv6 renewal is starting on 'pppoe0'
2020-06-15T17:10:42 dhcp6c: dhcp6c REQUEST on pppoe0 - running newipv6
2020-06-15T17:10:42 dhcp6c[94655]: executes /var/etc/dhcp6c_wan_script.sh
2020-06-15T17:10:42 dhcp6c[94655]: reset a timer on pppoe0, state=INIT, timeo=0, retrans=196
2020-06-15T17:10:42 dhcp6c[94655]: remove an IA: NA-0
2020-06-15T17:10:42 dhcp6c[94655]: IA NA-0 is invalidated
2020-06-15T17:10:42 dhcp6c[94655]: status code for NA-0: no addresses
2020-06-15T17:10:42 dhcp6c[94655]: make an IA: NA-0
2020-06-15T17:10:42 dhcp6c[94655]: nameserver[1] 2003:180:2::53
2020-06-15T17:10:42 dhcp6c[94655]: nameserver[0] 2003:180:2:6000::53
2020-06-15T17:10:42 dhcp6c[94655]: Received REPLY for REQUEST
2020-06-15T17:10:42 dhcp6c[94655]: get DHCP option DNS, len 32
2020-06-15T17:10:42 dhcp6c[94655]:   status code: no addresses
2020-06-15T17:10:42 dhcp6c[94655]: get DHCP option status code, len 43
2020-06-15T17:10:42 dhcp6c[94655]:   IA_NA: ID=0, T1=0, T2=0
2020-06-15T17:10:42 dhcp6c[94655]: get DHCP option identity association, len 59
2020-06-15T17:10:42 dhcp6c[94655]:   DUID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00
2020-06-15T17:10:42 dhcp6c[94655]: get DHCP option server ID, len 26
2020-06-15T17:10:42 dhcp6c[94655]:   DUID: 00:01:00:01:25:bf:1e:ec:dc:58:bc:e0:0a:3a
2020-06-15T17:10:42 dhcp6c[94655]: get DHCP option client ID, len 14
2020-06-15T17:10:42 dhcp6c[94655]: receive reply from fe80::de38:e1ff:fe10:bb8b%pppoe0 on pppoe0
2020-06-15T17:10:42 dhcp6c[94655]: reset a timer on pppoe0, state=REQUEST, timeo=0, retrans=963
2020-06-15T17:10:42 dhcp6c[94655]: send request to ff02::1:2%pppoe0
2020-06-15T17:10:42 dhcp6c[94655]: set option request (len 4)
2020-06-15T17:10:42 dhcp6c[94655]: set elapsed time (len 2)
2020-06-15T17:10:42 dhcp6c[94655]: set identity association
2020-06-15T17:10:42 dhcp6c[94655]: set status code
2020-06-15T17:10:42 dhcp6c[94655]: set server ID (len 26)
2020-06-15T17:10:42 dhcp6c[94655]: set client ID (len 14)
2020-06-15T17:10:42 dhcp6c[94655]: a new XID (b7a5b) is generated
2020-06-15T17:10:42 dhcp6c[94655]: Sending Request
2020-06-15T17:10:42 dhcp6c[94655]: picked a server (ID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00)
2020-06-15T17:10:41 dhcp6c[94655]: reset timer for pppoe0 to 0.981837
2020-06-15T17:10:41 dhcp6c[94655]: server ID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00, pref=-1
2020-06-15T17:10:41 dhcp6c[94655]: get DHCP option DNS, len 32
2020-06-15T17:10:41 dhcp6c[94655]:   status code: no addresses
2020-06-15T17:10:41 dhcp6c[94655]: get DHCP option status code, len 43
2020-06-15T17:10:41 dhcp6c[94655]:   IA_NA: ID=0, T1=0, T2=0
2020-06-15T17:10:41 dhcp6c[94655]: get DHCP option identity association, len 59
2020-06-15T17:10:41 dhcp6c[94655]:   DUID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00
2020-06-15T17:10:41 dhcp6c[94655]: get DHCP option server ID, len 26
2020-06-15T17:10:41 dhcp6c[94655]:   DUID: 00:01:00:01:25:bf:1e:ec:dc:58:bc:e0:0a:3a
2020-06-15T17:10:41 dhcp6c[94655]: get DHCP option client ID, len 14
2020-06-15T17:10:41 dhcp6c[94655]: receive advertise from fe80::de38:e1ff:fe10:bb8b%pppoe0 on pppoe0
2020-06-15T17:10:41 dhcp6c[94655]: reset a timer on pppoe0, state=SOLICIT, timeo=0, retrans=1075
2020-06-15T17:10:41 dhcp6c[94655]: send solicit to ff02::1:2%pppoe0
2020-06-15T17:10:41 dhcp6c[94655]: set option request (len 4)
2020-06-15T17:10:41 dhcp6c[94655]: set elapsed time (len 2)
2020-06-15T17:10:41 dhcp6c[94655]: set identity association
2020-06-15T17:10:41 dhcp6c[94655]: set client ID (len 14)
2020-06-15T17:10:41 dhcp6c[94655]: a new XID (7f2be7) is generated
2020-06-15T17:10:41 dhcp6c[94655]: Sending Solicit
2020-06-15T17:10:41 dhcp6c[94655]: got an expected reply, sleeping.
2020-06-15T17:10:41 dhcp6c[94655]: removing server (ID: 00:02:00:00:05:83:64:63:3a:33:38:3a:65:31:3a:31:30:3a:62:66:3a:63:30:00:00:00)
2020-06-15T17:10:41 dhcp6c[94655]: removing an event on pppoe0, state=REQUEST
2020-06-15T17:10:41 dhcp6c[94655]: script "/var/etc/dhcp6c_wan_script.sh" terminated
2020-06-15T17:10:41 opnsense: plugins_configure hosts (execute task : unbound_hosts_generate())
2020-06-15T17:10:41 opnsense: plugins_configure hosts (execute task : dnsmasq_hosts_generate())
2020-06-15T17:10:41 opnsense: plugins_configure hosts ()
2020-06-15T17:10:41 opnsense: /usr/local/etc/rc.newwanipv6: The command '/sbin/route add -host -'inet6' '2606:4700:4700::1001' 'fe80::de38:e1ff:fe10:bb8b%'' returned exit code '71', the output was 'route: fe80::de38:e1ff:fe10:bb8b%: hostname nor servname provided, or not known'
2020-06-15T17:10:41 opnsense: /usr/local/etc/rc.newwanipv6: The command '/sbin/route add -host -'inet6' '2606:4700:4700::1111' 'fe80::de38:e1ff:fe10:bb8b%'' returned exit code '71', the output was 'route: fe80::de38:e1ff:fe10:bb8b%: hostname nor servname provided, or not known'
2020-06-15T17:10:40 opnsense: plugins_configure dhcp (execute task : dhcpd_dhcp_configure(,inet6))
2020-06-15T17:10:40 opnsense: plugins_configure dhcp (,inet6)
2020-06-15T17:10:40 opnsense: /usr/local/etc/rc.newwanipv6: On (IP address: 2003:cd:efff:4b13:de58:bcff:fee0:a3a) (interface: WAN[wan]) (real interface: pppoe0).
2020-06-15T17:10:40 opnsense: /usr/local/etc/rc.newwanipv6: IPv6 renewal is starting on 'pppoe0'
2020-06-15T17:10:40 dhcp6c: dhcp6c REQUEST on pppoe0 - running newipv6
2020-06-15T17:10:40 dhcp6c[94655]: executes /var/etc/dhcp6c_wan_script.sh
2020-06-15T17:10:40 dhcp6c[94655]: reset a timer on pppoe0, state=INIT, timeo=0, retrans=635

hat da jemand eine Erklärung für?

Grüsse

Henning

8
20.1 Legacy Series / DPD ICMP source address
« on: March 29, 2020, 12:02:15 pm »
Hello,

Is there a way to set the source address for DPD pings? I just realized that my OPNsense is using its DMZ address to ping the LAN address of the remote OPNsense. And that network is blocked by its firewall via its default rule ;-). It would be cool if that source address could be set to the local LAN address instead.

Regards

Henning

9
20.1 Legacy Series / IPSEC Multiple SPIs State Installed?
« on: March 24, 2020, 03:38:56 pm »
Hello,

I am connecting two OPNsenses via IPSEC successfully but it seams to strange/flakey as connections between both sides drops quite fast even with DPD configured on both sides. At the same time In the "Status Overview"  I have several SPIs with a INSTALLED/routed status.

Side A is a single OPNsense connecting via PPPoE with an dynamically allocated IPv4 address and a DynDNS hostname.
Side B are two OPNsense in HA with a public /29 IPv4 net.

here are my configs
A<>B
Connection method      default<>default
Key Exchange version    auto<>auto
Internet Protocal       IPv4<>IPv4
Interface             WAN<>"CARP IP"
Remote Gateway          "CARP IP"<>"DYNDNS-FQDN"
Dynamic Gateway       No<>YES

Phase 1 proposal (Authentication)
Authentication method    Mutal PSK<>Mutual PSK
My Identifier          DN "DYNDNS-FQDN"<>IPAdress "CARP IP"
Peer Identifier       IPAdress "CARP IP"<>DN "DYNDNS-FQDN"

Phase 1 proposal (Algorithms)
Encryption algorithm    AES 256<>AES 256
Hash Algorithms       SHA256<>SHA256
DH key group         14<>14
Lifetime             28800<>28800
NAT Traversal          Enable<>Enable
Dead Peer Detection    YES<>YES

Tunnel
Mode                Tunnel IPv4<>Tunnel IPv4
LocalNetwork
Type               Network<>Network
Address             172.19.173.0/24<>10.100.0.0/16
Remote Network
Type                 Network<>Network
Address               10.100.0.0/16<>172.19.173.0/24
Phase 2 Proposal
Protocol            ESP<>ESP
Encryption             AES 256bits auto<>AES 256bits auto
Hash algorithms       SHA256<>SHA256
PFS key group          14<>14
Lifetime             3600<>3600
Advanced Options
Automatically ping host "LAN CARP IP"<>"OPN LAN IP"



10
19.7 Legacy Series / Where is the NRPE plugin?
« on: January 17, 2020, 11:10:55 pm »
Hello,

I would love to monitor my OPNsense boxes from my Icinga system and have read about the NRPE plugin. But I can't find that plugin in WebGUI on my 19.7.9_1 installation. After logging in via SSH und running
Code: [Select]
pkg search nrpe I only found
Code: [Select]
os-nrpe-devel-0.1 Am I supposed to install this via pkg?

Regards

Henning

11
19.7 Legacy Series / OPNsense on Supermicro restarts on shutdown?
« on: September 13, 2019, 11:39:54 pm »
Hello,

I just installed OPNsense for the first time a brandnew Supermicro SuperServer SYS-5018D-FN8T played a bit with it and tried to switch it off but instead of doing a halt the system just restarts. Any idea why this happens?

Sorry for this newbee questions

Regards

Henning


Pages: [1]
OPNsense is an OSS project © Deciso B.V. 2015 - 2024 All rights reserved
  • SMF 2.0.19 | SMF © 2021, Simple Machines
    Privacy Policy
    | XHTML | RSS | WAP2