Messages

121

Hardware and Performance / Re: WAN UP and DOWN several times a minute

« on: November 08, 2018, 10:57:09 am »

how or where did you turn of the Intrusion detection on your WAN@

That would be in Services: Intrusion Detection: Administration. Perhaps it would be a good idea to give details of your hardware and specifically the NIC device or if it's a VM and which type of hypervisor etc., etc.

122

18.7 Legacy Series / Re: Does IPv6 even work on this platform

« on: November 03, 2018, 04:20:55 pm »

I'm not sure I can help you with this but I'll ask anyway. What type of connection is this - cable, fibre, PPoE ADSL (and variations)? Is it connect via your ISPs device or have you changed it to your own equipment? Are you running OPNsense on bare metal or is it a VM and if so, why virtualization platform are you using?  If you have your ISPs routeris it running in bridge mode? Is this of any relevance to your situation: https://www.tp-link.com/us/faq-881.html

123

18.7 Legacy Series / Re: E1000 and Proxmox 5.2-x issues

« on: October 01, 2018, 01:38:50 pm »

Rest assured that you're not the only one suffering from this problem, it's also the same for PFsense users: https://forum.netgate.com/topic/129906/proxmox-5-1-and-hanging-pfsense/10 & (from PROXMOX): https://forum.proxmox.com/threads/4-15-based-test-kernel-for-pve-5-x-available.42097/page-5#post-211748

I don't use PROXMOX but isn't there a virtual driver in PROXMOX and can't you use that? Also, have you tried disabling GRO on the physical NIC as mention in the link?

124

18.7 Legacy Series / Re: Default Mirror: Connection refused

« on: September 08, 2018, 01:55:15 pm »

Try it again and see if you get the same results, there appears to have been some problems earlier today.

125

18.7 Legacy Series / Re: WireGuard: Last call for testing

« on: September 04, 2018, 10:43:08 am »

A guide for Roadwarrior will follow soon

I wouldn't put myself in that category but I'd like to give it a shot when the guide is ready.

126

18.7 Legacy Series / Re: WireGuard: Last call for testing

« on: September 04, 2018, 07:31:51 am »

My theme was preventing me from seeing the Wireguard interface in Firewall rules. Switching back to the default theme made it visible.

Which theme were you using? Perhaps it might be worth reporting that to the developer via github.

127

General Discussion / Re: Is there anyway to migrate a pfsense configuration

« on: August 28, 2018, 07:37:21 am »

The best way is just to do it from scratch taking advantage of the features that OPNsense offers.

<<-- Do this, although long winded it will cause you less pain and you'll have a better firewall at the end of it.

128

Hardware and Performance / Re: Question About Hardware Compatibility - UPDATE 8/14/2018

« on: August 16, 2018, 01:47:48 pm »

Btw. the fact you dodged my real question about performance of DECISO products (that have similar specs to PCengines APU2) is also an alarming sign to me.

If you're considering purchasing Deciso products (or even just after some information) then I'd suggest  you'd be far better contacting them directly.

129

18.7 Legacy Series / Re: Understand tracking on DHCPv6 with prefix delegation

« on: August 15, 2018, 05:43:44 pm »

Leases from the DHCPc6 server are handed out as they would be using DHCPv4 and they are shown on the Services: DHCPv6: Leases tab - I use DCHPv6 for my LAN and the leases are there for me to see, I gave up trying to use tracking.

130

18.7 Legacy Series / Re: Firmware updates

« on: August 15, 2018, 11:17:22 am »

If you want to have your systems prefer IPv4 then you have to modify the /etc/gai.conf file on each server, see here: https://community.rackspace.com/products/f/public-cloud-forum/5110/how-to-prefer-ipv4-over-ipv6-in-ubuntu-and-centos

The change has been made to prefer IPv6 so that people will move in the direction of using IPv6 as a matter of course.

[EDIT}Obviously the change mentioned in the second post is the correct way to change the behaviour of OPNsense.

131

18.7 Legacy Series / Re: CPU99%

« on: July 22, 2018, 01:55:40 pm »

Did you cut off part of the screen? The system looks 99% idle.

Thank you for your answer. but i am not sure i understand what you mean ?
which screen has been cut ?

The top two lines in your second 'capture' show the following:

PID USERNAME    PRI NICE   SIZE    RES STATE   C   TIME    WCPU COMMAND
   11 root        155 ki31     0K    32K RUN     1 158:26  91.77% [idle{idle: cpu1}]
   11 root        155 ki31     0K    32K RUN     0 160:42  79.55% [idle{idle: cpu0}]

Which, in my limited experience of FreeBSD, would seem to indicate that cpu1 @ 91.77% idle and cpu0 @ 79.55% idle. Is that what it's showing and why do you think that your 'hardware box' is running at 90-99% cpu usage?

132

General Discussion / Re: feature requests

« on: July 10, 2018, 05:19:06 pm »

You can post questions about potential new feature in the forums and get some feedback, for a request for a feature you can post it in github.

133

18.1 Legacy Series / Re: Postfix/RSPAMD/REDIS - not that successful?

« on: July 09, 2018, 04:48:17 pm »

I don't use the Rspamd module on OPNsense but I do us it on a LAN mail server with a Zimbra Collaboration Server, I only mention that because I don't know what the 'default' config is for Rspamd on OPNsense.

Which modules are active? Have you made any modifications to the config at all? Have you looked at the Rspamd web site to determine which modules might help you with your spam problem or check the Rspamd google group for some hints? When spam gets through have you checked the headers of you mail to determine why it got through? Are you adding the extended headers to your mail to actually see what's being checked (or not)?

134

Hardware and Performance / Re: CPU usage goes up

« on: June 24, 2018, 04:58:44 pm »

Restarting apinger brought it down to 3% again. So how can I switch to dpinger?

Firewall/Settings/Advanced/Monitoring daemon setting it to be the preferred daemon.

135

18.1 Legacy Series / Re: How to start the installer script from the DVD iso image?

« on: June 14, 2018, 08:18:29 am »

Here's the manual part rewritten for clarity. It has a new subsection "Installer Usage", but not a lot of new info in particular other than the option 8 "opnsense-installer" trick.

https://github.com/opnsense/docs/commit/906616ac3


Cheers,
Franco

How about calling that section something blindingly obvious like "Install to Hard Disk", using "Installer Usage" doesn't really stand out for me.