1
Zenarmor (Sensei) / 24.7.r1
« on: July 16, 2024, 05:57:33 pm »
I have installed OPNsense 24.7.r1. It seems there's no Zenarmor build for it.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
Zenarmor (Sensei) / No data displayed on dash.zenarmor.com
« on: December 22, 2023, 03:31:13 pm »
No data displayed on https://dash.zenarmor.com/firewalls/ i.e. no reports and no connections diplayed.
Yup, I have the December 21 version of Zenarmor, not its December 18 version.
I have already sent the logs and screenshot to support.
Yup, I have the December 21 version of Zenarmor, not its December 18 version.
I have already sent the logs and screenshot to support.
3
Zenarmor (Sensei) / Cannot update Zenarmor
« on: October 17, 2023, 09:39:18 am »Code: [Select]
Updating SunnyValley repository catalogue...
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:13:amd64/23.7/latest/meta.txz: Forbidden
repository SunnyValley has no meta file, using default settings
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:13:amd64/23.7/latest/packagesite.pkg: Forbidden
pkg: https://updates.zenarmor.com/opnsense/FreeBSD:13:amd64/23.7/latest/packagesite.txz: Forbidden
Unable to update repository SunnyValley
4
Zenarmor (Sensei) / Vulnerabilities
« on: October 12, 2023, 12:52:04 am »
libX11 is vulnerable. curl is also vulnerable.
5
Zenarmor (Sensei) / Installing Zenarmor fails
« on: October 02, 2023, 09:18:02 am »
Installing Zenarmor 1.15.1 failed on two different machines. Solution? Try until it succeeds (it may require up to 30 times). It got stuck at computing machine suitability for Zenarmor (computing CPU score and RAM size). The message was network error or network access broken. And it is true that sometimes the http daemon (i.e. the GUI) died on those machines. I don't know what caused it, it no longer seems to happen.
Hardware: Minisforum UN100C (Venus series) 16 GB RAM and 512 GB SSD.
Hardware: Minisforum UN100C (Venus series) 16 GB RAM and 512 GB SSD.
7
Zenarmor (Sensei) / Activation key not found
« on: June 05, 2023, 10:18:08 pm »
Upon reinstall, Zenarmor tells me the activation key is not found. But dash.zenarmor.com shows that it is a valid key.
8
Zenarmor (Sensei) / Cannot reinstall
« on: June 05, 2023, 09:39:02 pm »Code: [Select]
root@OPNsense:/usr/local/etc/pkg/repos # pkg install -fy os-sensei os-sensei-updater os-sensei-agent
Updating OPNsense repository catalogue...
OPNsense repository is up to date.
Updating SunnyValley repository catalogue...
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/23.1/OpenSSL/latest/meta.txz: Not Found
repository SunnyValley has no meta file, using default settings
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/23.1/OpenSSL/latest/packagesite.pkg: Not Found
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/23.1/OpenSSL/latest/packagesite.txz: Not Found
Unable to update repository SunnyValley
Updating mimugmail repository catalogue...
mimugmail repository is up to date.
Error updating repositories!
pkg: Repository SunnyValley cannot be opened. 'pkg update' required
pkg: No packages available to install matching 'os-sensei' have been found in the repositories
pkg: No packages available to install matching 'os-sensei-agent' have been found in the repositories
9
Zenarmor (Sensei) / Blocking website Certificate Authority
« on: May 05, 2023, 08:50:47 pm »
I have installed the blocking website node-ca.crt . But neither Chrome nor Firefox are fooled by it. I tried on both Windows (where the antivirus may play with the certificates) as well as upon Linux. Yup, I have installed the CA twice, once in the operating system, and once in Firefox, then I have rebooted and tested this.
10
23.1 Legacy Series / OpenVPN fails in 23.1.7
« on: May 04, 2023, 02:54:06 pm »Code: [Select]
/usr/local/etc/rc.d/openvpn: WARNING: /usr/local/etc/openvpn/openvpn.conf is not readable.
/usr/local/etc/rc.d/openvpn: WARNING: failed precmd routine for openvpn
11
23.1 Legacy Series / dhcpd practically dead
« on: April 17, 2023, 05:09:23 am »
I have:
/etc/dhcpd.conf and /var/run/dhcpd.pid are nonexistent.
ls /var/dhcpd does not seem to make sense.
I do run Zenarmor. And I have used opnsense-bootstrap recently. Kernel is kernel-23.1.5-netmap2.
Code: [Select]
/usr/local/sbin/dhcpd -user dhcpd -group dhcpd -chroot /var/dhcpd -cf /etc/dhcpd.conf -pf /var/run/dhcpd.pid igb1 igb2 em0
My LAN is igb3./etc/dhcpd.conf and /var/run/dhcpd.pid are nonexistent.
ls /var/dhcpd does not seem to make sense.
I do run Zenarmor. And I have used opnsense-bootstrap recently. Kernel is kernel-23.1.5-netmap2.
12
23.1 Legacy Series / ddclient-devel is broken
« on: January 22, 2023, 08:05:53 pm »
It says:
Reverting to stable ddclient (ddclient-3.9.1.pkg) solves the problem (but you should backup the folder /usr/local/opnsense/scripts/ddclient beforehand and then restore it).
Code: [Select]
Use of uninitialized value $h in hash element at /usr/local/sbin/ddclient line 4 105.
Use of uninitialized value $h in hash element at /usr/local/sbin/ddclient line 4 107.
Use of uninitialized value $h in hash element at /usr/local/sbin/ddclient line 4 108.
Use of uninitialized value $_[0] in sprintf at /usr/local/sbin/ddclient line 216 3.
SUCCESS: updating : good: IP address set to xx.xx.xxx.xx
Use of uninitialized value $h in hash element at /usr/local/sbin/ddclient line 4 105.
Use of uninitialized value $_[0] in sprintf at /usr/local/sbin/ddclient line 216 3.
FAILED: updating : unexpected status (0)
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
Use of uninitialized value in string ne at /usr/local/sbin/ddclient line 1157.
FAILED: was not updated because protocol <undefined> is not supported.
Reverting to stable ddclient (ddclient-3.9.1.pkg) solves the problem (but you should backup the folder /usr/local/opnsense/scripts/ddclient beforehand and then restore it).
13
22.7 Legacy Series / force LAN IPv6 suffix
« on: December 19, 2022, 11:40:06 pm »
I have the LAN have a v6/t6 (track WAN) IPv6 address. It has /62 suffix.
How do I force a /64 suffix for LAN only? I want to keep the track WAN option.
How do I force a /64 suffix for LAN only? I want to keep the track WAN option.
14
Zenarmor (Sensei) / Mangles local hosts resolution
« on: December 09, 2022, 07:49:40 pm »
Eastpect redirects all DNS resolutions of local hosts to 100.2.3.4. E.g., instead of 192.168.1.2 or 192.168.1.3 I get 100.2.3.4 for every local host.
15
Zenarmor (Sensei) / Memory usage
« on: November 14, 2022, 02:22:13 pm »
On my APU2 (4 GB RAM), 93% of memory are used, and 2% of 8 GB swap are used.