Messages

Any idea how to get rid of this message ?

After RC2 - Dashboard shows view pending updates without any updates to install. I have rebooted the system twice and the message still there.

Just a nuisance but nevertheless.

How do I use it ? Just apply the patch and it will solve the issue or the migration has to be forced somehow ?

Forget about it. I installed it, rebooted and it did work for me

What firewall rules do you have on the OPT1 interfaces? Did you change System > Settings > Administration > Listen interfaces in any way?

I implemented a rule that allows any IPV4 any protocol in on each box. As per the listening interfaces at the administration page, it is set for LAN only.

I can ping each others Sync IPs from both shells interfaces.

Since I upgraded my syncing is not working. I receive this message on HA Status The backup firewall is not accessible or not configured.

I can ping the backup interface from the master and vice-versa. Both has the interfaces as identifier opt1 and Device vtnet2.

What can be happening ?

Yes, I'm connected to a bridge in Proxmox and it is connected to the physical NIC. The WAN Bridge and NIC is only used by the Opnsense VM.

I tried to test if from a client and also from the Opnsense with the same results. Both upload and download is topping at 350mbits. The upload seems correct. Only the download that is lower than the actual speed.

I'm connected to the ISP using DHCP.
There is 8 vCPUs and 20GB of RAM for this VM.
All hardware offloading is disabled.
There is no traffic shapping set

Yes, I need to run it as a VM.

I have it set on a host with 8 x 12th Gen Intel(R) Core(TM) i3-12100T and 20gb of RAM, all interfaces are VirtIO. The processor and memory usage seems very low. Any other suggestion ?

Hi,

I used to have a 350 mbits Download /150 mbits upload bandwidth with my local provider. I just changed it to 700/350. Behind the firewall I cannot go over 350 as I did before. If I connect directly on the ISP modem I can reach over 700 download and 350 upload using the same OOKLA test.

All my interfaces are 1gbits, I'm running it on a proxmox server. I don't know what can I do to be able to achieve the same speed behind the fw as I do directly connected.

IPS is disabled.
Any ideas ?

So, this is a weird situation.

I have a virtualized OpnSense under Proxmox. In fact they are two acting as HA. Last week I had a hardware failure on the main OpnSense and had to change the hardware. I returned the backuped VM on the new HW and it appeared to be fine.

When I checked the upload speed it is not going beyond 40 mbps, it should be 150 mbps. The download speed is fine at 350mbps. It showed me that the speed of the virtual NIC seems to be ok.

I entered in Temp Maintenance mode and the secondary OpnSense can upload up to 150 mbps. So, there is no problem at the ISP side.

I don't know what is going on. How can I solve this problem ?

I got it working after removing mongodb. I guess it was something Zenarmor left behind after I uninstalled it.

After upgrading I'm seeing crash report with the message below

[31-Jul-2023 13:43:51 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'mongodb.so' (tried: /usr/local/lib/php/20220829/mongodb.so (Cannot open "/usr/local/lib/php/20220829/mongodb.so"), /usr/local/lib/php/20220829/mongodb.so.so (Cannot open "/usr/local/lib/php/20220829/mongodb.so.so")) in Unknown on line 0

The system seems ok. But even after submiting the report and clearing it, it keeps happening...

Any ideas ?

I saw your other post and realized that I had the same issue. Once I allowed the SYNC interface everything was ok

Adding more information.

I changed the IP address from both SYNC interfaces. Then when I tried to change the IP address of the slave on the High Availability Settings page it doesn't stick. I push save it refreshes and the old IP comes back. I can change the synchronize interface and it does stick. I tried with 3 different browsers to make sure it's not the cache with the same results.

I also tried to clean the field and leave it blank but the old IP comes back.

On the slave FW everything works as it should. I was able to change and save the configuration.

I reseted to the defaults and restore the config but the issue remained

Hi all

I have a HA setup working for more than an year. Today I realized that the HA Status is giving this message "The backup firewall is not accessible or not configured." It was not like that before.

I can ping each FW from each other using the SYNC interface. There is a direct cable between the two FW.

I rebooted both FW and the issue still happens. Not sure what else can I do.