Messages

451

General Discussion / Re: How to install ports?

« on: February 09, 2016, 09:47:23 am »

My advice is that a firewall is not the correct place to be running a VM, certainly run the firewall in a VM but not the other way round.

452

General Discussion / Re: OPNSense and others programs (in jail)

« on: February 06, 2016, 07:57:05 am »

These are interesting idea but I have some doubts about VMs.

For example AES-NI instructions are available inside VM?

You can find information on the internet by doing a quick search but it's been available in guest VMs since vSphere ESX 4.x

I will use VPN and I would like to use these instructions.

I run SoftEther VPN in a a VM without problems.

453

16.1 Legacy Series / Re: Slow download speed after upgrade to 16.1

« on: February 05, 2016, 11:16:42 am »

I tried to disable all of them (except the VLAN filtering which seems to be required) and nothing changed.

Did you reboot after making those changes? If you didn't I'd suggest you also do that.

454

16.1 Legacy Series / Re: System Health Chart - (minor) problem

« on: February 04, 2016, 12:52:14 pm »

It's intended. You get to see both the cpu utilisation and the number of processes on the same graph.

Thanks for that confirmation.

455

16.1 Legacy Series / [SOLVED] System Health Chart - (minor) problem?

« on: February 03, 2016, 06:43:45 am »

There's a minor problem on the System Health/System - Processor chart, on the left of the display it shows the following text:

Code: [Select]

[U]tilization,[#]Number
I'm guessing that's not intentional (or is it)?  This is on the current 16.1.1 version.

456

General Discussion / Re: OPNSense and others programs (in jail)

« on: February 02, 2016, 02:15:42 pm »

Why not install some form of virtualisation on the hardware and run your firewall in a VM and whatever else you want in additional VMs? OPNsense runs fine for me on ESXi 6.

457

General Discussion / Re: SoftEther VPN daemon for Opnsense

« on: January 19, 2016, 08:27:35 pm »

You'll find several threads that have covered this topic, put the word 'softether' (no quotes) in the search box and take a look at those threads.

458

Development and Code Review / Re: Delete this post

« on: January 17, 2016, 01:19:55 pm »

If you've answered your original question about image size, wouldn't it be helpful to other to know your resolution?

459

15.7 Legacy Series / Re: [CALL FOR TESTING] FreeBSD advisories/errata and update response times

« on: January 15, 2016, 02:04:20 pm »

Hi Franco

So far, so good - the update went OK and I'll keep an eye on my system to see if there's anything other than the normal smooth running.

460

15.7 Legacy Series / Re: Reboot: inetd not starting

« on: January 11, 2016, 03:08:00 pm »

Hi Franco,

Hey Bill, NAT reflection rules seem to use inetd, it might clobber your manual setup of it. Are you aware of any changes in your configuration in that regard?

I thought that there weren't any changes to my rules, I've just checked and I didn't realise that using squid set a NAT reflection rule all by itself - I guess that's what is causing it? If you add the xinetd package would that still suffer from the reflection rule problem?

For custom purposes, we could add this to the packages to avoid clashing of inetd setups:

https://www.freebsd.org/cgi/man.cgi?query=xinetd&apropos=0&sektion=8&manpath=FreeBSD+10.2-RELEASE+and+Ports&arch=default&format=html

That would be good for me, I assume that if this were implemented the config files would remain after any updates?

461

15.7 Legacy Series / Reboot: inetd not starting

« on: January 11, 2016, 12:14:00 pm »

I'm running a script via inetd for monitoring the OPNsense server and after a recent update it's stopped working after a reboot. I have the following in rc.conf:

Code: [Select]

inetd_enable=yes
inetd_flags=-wWThis was working OK a version or two back but in the current 15.7.23 it requires me to start it manually. I can't see anything obvious in the logs about this and I'll check again later today with the 15.7.24 version to see if it's still a problem, is there any way to increase the logging for this service?

Hmmm, still not working after the latest update. It's not that inetd is not starting it's the fact that inetd needs to be restarted to get it seen by my monitoring server. I'm using the following instructions to make the modifications to the specified files: https://mathias-kettner.de/checkmk_freebsd.html

462

15.7 Legacy Series / Re: Reboot and an eroor in configd.py

« on: January 10, 2016, 07:56:17 pm »

Ad was sad about being addressed as Franco.

Bummer! I'd just read one of your post and then replied to this, no excuse but I'll put it down to advancing age. My apologies to Ad for that mistake.

463

15.7 Legacy Series / Re: Reboot and an eroor in configd.py

« on: January 04, 2016, 08:34:57 pm »

Hi Ad

Thanks for the update. No, it's not a problem for me but as I'm not a coder I never know if it's a major bug or something minor.

464

15.7 Legacy Series / [SOLVED] Reboot and an eroor in configd.py

« on: January 04, 2016, 05:34:36 pm »

I'm currently on the latest 15.7.3 version and I did a reboot, the following error line appeared in the log file (this was retrieved from my Splunk syslog server):

Code: [Select]

Jan  4 17:27:10 192.168.1.1 Jan  4 17:28:05 configd.py: [648e0600-45de-4465-b512-2580c9251faa] Inline action failed at Traceback (most recent call last):   File "/usr/local/opnsense/service/modules/processhandler.py", line 488, in execute     return ph_inline_actions.execute(self, inline_act_parameters)   File "/usr/local/opnsense/service/modules/ph_inline_actions.py", line 52, in execute     filenames = tmpl.generate(parameters)   File "/usr/local/opnsense/service/modules/template.py", line 296, in generate     for filename in self._generate(template_name, create_directory):   File "/usr/local/opnsense/service/modules/template.py", line 226, in _generate     new_filename = filename.replace('[%s]' % target_filter, target_filters[target_filter][key]) TypeError: expected a string or other character buffer object
Is there any further information you need about this?

Happy New Year to everyone.

465

15.7 Legacy Series / Re: Interface configuration IPv6: None

« on: December 31, 2015, 11:09:10 am »

If the interface is enabled it will always get a link-local IP address, just the same as an IPv4 loopback IP address is issued.