Topics

Zoals de topic aangeeft heb ik een DEC740 te koop. Top machine maar in onbruik geraakt.

- Aangekocht op 13/11/2023.
- In perfecte staat.
- Minimum bod - 500€

I have an expired certificate in the Trust section that doesn't want to renew (CA key missing) and cannot be deleted because it is in use by NTOPNG, but that isn't installed. Any suggestions on how to get rid of this one?

At this moment, my logs are flooded with the "pf: ICMP error message too short (ip6)" message.
Grepping & counting the latest.log gives me 53k entries and it spams at a rate of 10/s.

Does anyone know/understand where this comes from and what I need to do to stop it?

Going back a few days gives me numbers of up to 350k/day.

I'm using Bunny.net as external DNS provider. It works perfectly fine for DNS/TLS certificates.

As soon as I enable "dyndns" on a record, it stops the process and I can't start it anymore until I remove the checkbox.
Can't seem to find a reason for it in the logs.

Since upgrading to 24.7.1 I see intermittent IPv6 drops for a few to 15 seconds. I get alerted each time by Uptime Kuma that a specific server isn't available anymore.

Would this be the same issue as the kernel problems with traceroute / icmp-echo?

It's not just ICMP that fails at those times but also existing SSH connections are dropped.

It doesn't always need to be a problem that's posted here, I think.

Thank you so much, development team, for the Caddy plugin. I've been able to remove a lot of complexity on my network due to this.

The setup was child's play and it works beautifully well.

If you end up with a non-working IPv6 deployment on Telenet after years of trusty performance, it's not you.

Telenet started a roll-out of new firmware to their modems. You notice this by IPv6 not (reliably) working in the morning. Updates are done at night.

The only thing you need to do is change the Prefix delegation size from 60 to 57.

Can anyone confirm that querying the TXT records for DHL.com make it stop responding?
Other queries work, even TXT for other domains.

They have a ton of records - might be too long?

Code Select Expand


➜ nslookup
> set type=txt
> dhl.com
;; Truncated, retrying in TCP mode.
;; communications error to <ip-addr>#53: connection reset


Code Select Expand


➜ dig dhl.com txt
;; communications error to <ip-addr>#53: connection reset


I've been using the MAC address from my old Unifi UDM on my OPNsense install and this worked as intended. Yesterday I had to redo my config at the ISP and wanted to switch to the original ether address of the DEC740 I'm using. I could remove the MAC address in the interface but after saving and applying, the spoofed address still showed in the ifconfig. I had to reboot the device to remove the spoofed MAC address. Is this intended behaviour?

I'm on 23.7.8_1

I have a water softener that reports its status via unencrypted MQTT to an internet host. The IP adres to the host seems to be hardcoded in the device since it never does a DNS query (that I've seen -- I've been tcpdumping all traffic). I know it communicates to a specific IP, it originates from a specific internal IP on my IoT VLAN and I know the port.

With this knowledge I wrongfully assumed I could port forward port 1833 from my IoT IN interface to my internal MQTT broker by creating a rule in the NAT/Port forward section. I've tried to do this on the IoT & WAN interface without success. I understand it doesn't 'hit' the interface but just passes through it.

Are there other options I can pursue to intercept the traffic between those IP's and divert it to the internal host?

Upon loading that page, it always says "No Data". Clicking on 60 Hours suddenly shows all previous data, then clicking on 20 hours right after (the default) also shows the data.

Tried it in Safari / Brave (Chrome) on Mac.

I've removed the ACME plugin since I started using my own certificate.
The plugin removes successfully but I can't seem to remove the cron job that came with it. It's disabled - so it's not running but I like these things clean/tidy.

Any suggestions or is this a bug?