Topics

1

22.1 Legacy Series / Default Deny Rule - Once Again

« on: February 16, 2022, 12:11:06 pm »

Hi,
Yesterday we upgraded both primary and backup opnsense to last release...
as a result we are suddenly experiencing the same behavior which brought us to leave pfSense for OpnSense one year ago.

Rules are now just partially applied on some interfaces. Defining the same rules again does not work, it's simply like they are not there. Some traffic is allowed if rules are defined with a broader scope but this simply makes no Sense at all.

The configuration has not been changed in weeks, just the upgrade.

Our network is partially unusable, the software is not working right. Traffic is blocked with Default Deny Rule.

2

21.1 Legacy Series / States Killed Before Expiration

« on: July 16, 2021, 01:36:28 pm »

Hi,
we are having troubles with UDP connections getting closed prematurely.
Upon checks with pftop we think there is a possible serious bug with the timeouts, at least with UDP: connections with more than 13 minutes of expiry left are suddenly closed for no reason.

OpnSense is already operating with conservative settings but the problem remains: connections are really dropped and applications have to reconnect all the time with SIP services.

And regardless of the setting, there is no reason why the timer starts with 1 minute, increases the expiry timer to 15 after some packages (another unexplicable behaviour, seems conservative is still trying to 'optimize' somehow, but nobody asked), and then disregards it after less than 2 minutes, forgetting completely of the state and blocking following packages!

Shall i file a bug on GitHub?
Thanks a lot