Messages

1

22.1 Production Series / I have upgraded to the latest version, this is a feedback.

« on: May 24, 2022, 09:22:05 am »

    OPNsense 22.1.7_1
Yes. After waiting for a few months, I saw that the version has been iterated to OPNsense 22.1.7_1. Also seeing fewer and fewer questions in the forums, I finally gathered up the courage and clicked the update button. . . In this process, the download file part is not a success. I have done it several times. Fortunately, every update will download a part of the file, and in the subsequent update, it can be used. After 3 update operations, all the files are finally successfully downloaded. After shiveringly pressing OK, after several reboots. Finally upgraded to OPNsense 22.1.7_1. Today is the third day, and it seems that everything has exceeded my expectations. The previous memory leak problem does not seem to have occurred. Maybe in a few days, I'll come back and update this for everyone. I wish you all the best too.
cheers
To the bosses of opnsense.

2

22.1 Production Series / Seeing that there are so many problems with this version

« on: May 05, 2022, 10:27:33 am »

I sincerely suggest that the official should do enough testing before considering whether to release it as a production version.
Switching to Ver 13 brings with it the sheer number of issues it's daunting. Let me keep the good OPNsense 21.7.8-amd64 until 22.7 comes along.
But I also see good news, the official hardware 850 is finally in stock.

3

Intrusion Detection and Prevention / Why does it happen that the internal server IP address?

« on: February 25, 2022, 09:22:07 am »

Why does it happen that the internal server IP address can be scanned from the outside? Is it something I didn't close? Please give pointers.     

4

Chinese - 中文 / Why does it happen that the internal server IP address?

« on: February 25, 2022, 09:21:05 am »

Why does it happen that the internal server IP address can be scanned from the outside? Is it something I didn't close? Please give pointers.

 

5

21.7 Legacy Series / Re: 21.7.8 can‘t update

« on: January 31, 2022, 06:12:59 am »

On a longer wait, an ERROR was given. I updated again and this time it worked. Thanks for attention.

6

21.7 Legacy Series / 21.7.8 can‘t update

« on: January 31, 2022, 04:32:52 am »

Been stuck here for 1 hour.  Can I reboot the machine and start this upgrade again?

7

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 16, 2021, 07:24:10 am »

True. It seems to be getting harder and harder to sift through unstructured reports that also don't know the difference of IDS/IPS, ignore documentation and best practice and don't search for previous forum advice.


Cheers,
Franco

Report to the boss again. Remove the WAN port from the IPS list. The WAN port is no longer offline. It has been 5 days now. Everything returned to calm.

8

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 15, 2021, 09:58:10 am »

Don't use VLAN interfaces in IPS mode, or get someone who will tell you not to do it that you will listen to.


Cheers,
Franco

BOOS, i no have setup VLAN.  only use IPS to WEB LAN.

9

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 14, 2021, 09:17:15 am »

Can you be more specific please.


Thanks,
Franco

thanks Franco.. look here.

https://forum.opnsense.org/index.php?topic=25968.0

Thanks. 

10

21.7 Legacy Series / Re: Opnsense 21.7.5 to 21.7.6 Suricata 6.0.4 killing WAN internet connection

« on: December 14, 2021, 09:16:18 am »

The following is my solution, just temporarily. It seems that this is a common problem, please solve it head-on.

https://forum.opnsense.org/index.php?topic=25877.0

11

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 13, 2021, 06:39:41 am »

After several days of testing, so far, it is still normal.
The problem is that there is no prompt for this crash, and I don't know how to describe it. The symptom is that the WAN port will go offline after a while. After restarting, it will be offline again after a period of time (the length of time may not be).
I refer to the reply from the enthusiastic chemlud above. I made a little change because I need IPS and cannot make IPS not work.
My approach is to remove the WAN from the IPS monitoring network card and only monitor other network cards. So far, everything looks normal.
I hope that friends who have the same problem can help you. Thanks again.

12

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 08, 2021, 05:52:13 am »

If you use suricata IPS I would try

https://forum.opnsense.org/index.php?topic=25750.msg124258#msg124258

first...

Thanks for replying,

13

21.7 Legacy Series / Re: 21.7.5 up to 21.7.6 The previously stable system was completely broken.

« on: December 08, 2021, 05:51:32 am »

Thanks for replying, I read your other related content, our question should be the same. I am summing up your experience and try another round. If there are results, I will report to you.

https://forum.opnsense.org/index.php?topic=25750.msg124258#msg124258

14

Zenarmor (Sensei) / Re: Does Sensei integrate with Traffic Shaper for Application Classifications?

« on: December 07, 2021, 01:42:44 am »

Title pretty much say it all, but I'm looking for something to help with the classification of traffic and Sensei looks like a near fit, but I need to be able to control flow not just block...  does Sensei integration assist with this?

Excuse me: In the paid version, can it be controlled by time, the use time of the module: For example: I want to prohibit the running of game programs at 10PM. It can be used again after 10AM. Thanks a lot.

15

21.7 Legacy Series / Re: Update to 21.7.6 breaks Suricata (out of memory)

« on: December 06, 2021, 07:00:18 am »

Just reporting back that rolling back to Suricata 6.0.3 fixed the issue.

consult. I encountered the same upgrade as yours and the problem persisted. If possible, I would like to ask you how to return to 6.0.3. Even I want to return 21.7.5