Messages

Thanks Franco. Can you tell me in which section I should create the rule and how it looks like? Do I need one for each IPsec tunnel?

After upgrading to 16.7 all the site-to-site VPNs from the router stopped working. The status does indicate that the tunnel is connected, however no traffic gets through. I had to replace the device with a backup device with 16.1.20. Is it possible to revert 16.7 to 16.1.20 and how? Or if you have any idea how to fix them on the 16.7 I would be grateful. I have Multi-WAN if it matters.

Today I received the device back, it has been serviced. A faulty ground connection was the issue. It really does sound reasonable providing the symptoms described. :)

I have the following router purchased from Applianceshop.eu about an year ago. Since we are using it in production it shows an odd behaviour that I am not able to track - the router just freezes randomly. All of its functions are dead when this happens, however I can still ping its IP addresses. I regularly update the OPNSense version but this has no effect. I actually don't think that the problem is in OPNsense, but rather in the hardware appliance.  I have used OPNSense with other devices without any similar issues. The problem is that I am not sure who is actually supposed to support this device. Currently it is running 16.1.3. It usually happens at least once a month but when it happens, it can reoccur within a couple of minutes after this. I didn't see anything suspicious in the logs, but I would be grateful if someone could help me diagnose the problem somehow. Attached is the dmesg.boot if it helps.

Yes, it seems it is the same issue. Hope you'll be able to provide a patch soon, there were some useful buttons like Connect/Disconnect on this screen which were handy in some situations. :)

I have 9 configured and running IPsec tunnels on 15.7.24. However nothing is shown on the page VPN - IPsec - Status Overview - the page is empty, only the columns show. I didn't have this problem on 15.1. I have had this problem since the new interface was introduced. Tested with Internet Explorer, Firefox and Chrome - no difference.

Excellent.  Have fun.  :)

Funny, indeed. Can't download the traffic shaper because there's no bandwidth left. :D

Thanks Franco and Ad. I was able to restore back to normal using the USB with serial reinstall. It remains a mystery why this situation occurred but I hope it won't reoccur. At least I got some experience reflashing the device. :)

Thanks again for the prompt replies! :)

I didn't. Have a look at the link to the device:

https://www.applianceshop.eu/opnsense-a10-quad-core-ssd-rack.html

As said, it's a hardware appliance and it came preinstalled with OPNsense.

Can I boot this device using USB? It's a hardware appliance and I'm not sure how I can control the boot process.

Additionally, I tried to connect to serial and I see the POST messages, however the output freezes when it finishes and I can't control the device from there.

Thanks, I'd love to do it, however SSH doesn't start either as the user for SSH is not found. :)

[Clicking the START button displays the message "dhcpd has been started", however the button does not change to STARTED and the service doesn't start. Same with ipsec, dnsmasq and apinger:]

Last night there was a prolonged power outage and the router was rebooted after power was restored. It's all connected to UPS, but the outage lasted 4 hours. After the router booted up, most if its services wouldn't start. I collected some screenshots:

Clicking the START button displays the message "dhcpd has been started", however the button does not change to STARTED and the service doesn't start. Same with ipsec, dnsmasq and apinger:


This output is from the Status -> System Logs menu about the dhcpd service:


Logs for the IPsec daemon:

And here for dnsmasq:


Another error that I think is related to the issue:


I think OPNsense is somehow broken and can't find some of its users. Restoring factory defaults or backed up configuration does not help. Can someone advise how to fix this? I had a very unpleasant morning replacing the router with an older one since DHCP and IPsec are critical services to us. :/

I'd also like to see dansguardian in the build someday as it is very useful with squid. Especially with the devices that are offered with OPNsense and integrated SSD it makes sense to have such packages inside.

Great, thanks for the info and the cleaner kernel. :)

[Enter an option:*** Welcome to OPNsense 15.1.9.1-44b610abb (amd64) on gateway ***]

Hi Ad,

I upgraded to build 15.1.10 and the issue is not present which is great news! My dashboard still shows 15.1.9, maybe because I upgraded manually. I checked for updates after it and it showed me that the package manager pkg requires updating. I updated and then it showed that 29 updates are available.


I'm not clicking Upgrade here to avoid reverting to the previous version which will probably have the issue.

This means I won't be needing the custom build for now. Thanks again for everything you did about this. By the way is it possible that the upgrade was not done? The console shows:

Enter an option:


*** Welcome to OPNsense 15.1.9.1-44b610abb (amd64) on gateway ***

However the OS version is from 30.04 which looks quite new:

FreeBSD 10.1-RELEASE-p9 (SMP) #0 b717d68(master): Thu Apr 30 08:38:44 CEST 2015

No error was shown during the manual upgrade, it ended with "Please reboot".