Messages

Trying to set up an OpenVPN server in 16.7.3 but my available Encryption algorithm selection is empty!?

What have I made wrong?

http://imgur.com/eKfopth

   /Jonas...

Yupp, that made the trick.

Code Select Expand


0) Logout                             7) Ping host
1) Assign Interfaces                  8) Shell
2) Set interface(s) IP address        9) pfTop
3) Reset the root password           10) Filter Logs
4) Reset to factory defaults         11) Restart web interface
5) Power off system                  12) Upgrade from console
6) Reboot system                     13) Restore a configuration

Enter an option: 12

This will automatically fetch all available updates, apply them,
and reboot if necessary.  Proceed with this action? [y/N]: y

Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
Checking for upgrades (16 candidates): .......... done
Processing candidates (16 candidates): . done
Checking integrity... done (0 conflicting)
Your packages are up to date.
Checking integrity... done (0 conflicting)
Nothing to do.
Nothing to do.
Restarting webConfigurator...done.
!!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!!!
! A kernel/base upgrade is in progress. !
!  Please do not turn off the system.   !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Fetching kernel-16.7-amd64.txz: ..... done
Fetching base-16.7-amd64.txz: ..... done
Fetching base-16.7-amd64.obsolete: ..... done
[1/3] Installing kernel-16.7-amd64.txz...
[1/3] Extracting kernel-16.7-amd64.txz: ... done
[2/3] Installing base-16.7-amd64.txz...
[2/3] Extracting base-16.7-amd64.txz: ... done
[3/3] Installing base-16.7-amd64.obsolete...
[3/3] Extracting base-16.7-amd64.obsolete: ... done
Please reboot.
Stopping flowd.
Waiting for PIDS: 29198 29225.
Stopping flowd_aggregate...done
Stopping suricata.
Waiting for PIDS: 80514.
tar: Removing leading '/' from member names
flowd_aggregate not running? (check /var/run/flowd_aggregate.pid).
tar: Removing leading '/' from member names
tar: Removing leading '/' from member names
Shutdown NOW!
shutdown: [pid 11638]

*** FINAL System shutdown message from root@OPNsense.home ***

System going down IMMEDIATELY



System shutdown time has arrived


Came up/back with this

Code Select Expand


Versions OPNsense 16.7-amd64
                FreeBSD 10.3-RELEASE-p5
                OpenSSL 1.0.2h 3 May 2016

BIG Thanks!

   /Jonas...

In this case you can finish the update using option 12) from the console.

I have a fix for this in 16.7.1[1].
...

That's good news. :)

Only problem for me is that I run the FW headless in a remote place and will have a bit of a problem carry this out with console. Any chance of doing it via ssh or something?

   /Jonas...

Hi!

I just upgraded to OPNsense 16.7 from 16.1.20 and all seams to have gone well except for the kernel part...
(Did upgrade with IE cause Chrome was not able to do it)

This is what showed up in the end of the log:

Code Select Expand

...
!!!!!!!!!!!!! ATTENTION !!!!!!!!!!!!!!!!!
! A kernel/base upgrade is in progress. !
!  Please do not turn off the system.   !
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Fetching kernel-16.7-amd64.txz: ..pgrep: Pidfile `/tmp/opnsense-fetch.pid.SSKwbd' is empty
.pgrep: Pidfile `/tmp/opnsense-fetch.pid.VNXHJf' is empty
opnsense-verify: Unable to open /var/cache/opnsense-update/28895/kernel-16.7-amd64.txz: No such file or directory
failed
***DONE***

So right now my system is up and the System Information widget on the dashboard shows:

Code Select Expand

Versions OPNsense 16.7-amd64
                FreeBSD 10.2-RELEASE-p19
                OpenSSL 1.0.2h 3 May 2016

Shouldn't that be "FreeBSD 10.3..." something????

Any suggestions?

   /Jonas...

...
I'm just a user of the OPNsense project, so I can't give an "official" recommendation, but I'm running OPNsense on the following boards:

• http://www.supermicro.com.tw/products/motherboard/Atom/X10/A1SRi-2558F.cfm
• ...

The C2558 does provide AES hardware encryption while the J1900 does not, but it has a lower price point.
...

Regards
- Frank

Hi!

Thanks for your recommendations, you don't happen to have any throughput numbers for the A1SRi-2558F with OPNsense?
I need to decide what fiber connection to choose and there is no point in getting faster access than what my FW can handle.

   /Jonas...

Hi!

I'm quite new here and coming from monowall as many others. I have an ALIX 2d13 running monowall right now and have just purchased a 4 GB SanDisk CF card for trying out OPNsense.

If I got everything right I need to download the nano 32-bit img and use physdiskwrite (from monowall homepage) and write the image to the CF card before I can have a try.

Problem is that physdiskwrite just stops at 16XXXXXXXX/42XXX... something and nothing more happens!

Anyone else seen this problem? How to get by this?

   /Jonas...