Messages

31

General Discussion / Re: Machine Hang After Cron Job

« on: August 11, 2016, 07:10:13 am »

Thi is my build info :

This is Suricata version 3.0.2 RELEASE
Features: IPFW PCAP_SET_BUFF LIBPCAP_VERSION_MAJOR=1 NETMAP HAVE_PACKET_FANOUT LIBNET1.1 HAVE_HTP_URI_NORMALIZE_HOOK PCRE_JIT HAVE_LIBJANSSON TLS
SIMD support: none
Atomic intrisics: 1 2 4 8 byte(s)
32-bits, Little-endian architecture
GCC version 4.2.1 Compatible FreeBSD Clang 3.4.1 (tags/RELEASE_34/dot1-final 208032), C version 199901
compiled with -fstack-protector
compiled with _FORTIFY_SOURCE=2
L1 cache line size (CLS)=64
thread local storage method: __thread
compiled with LibHTP v0.5.20, linked against LibHTP v0.5.20

Suricata Configuration:
  AF_PACKET support:                       no
  PF_RING support:                         no
  NFQueue support:                         no
  NFLOG support:                           no
  IPFW support:                            yes
  Netmap support:                          yes
  DAG enabled:                             no
  Napatech enabled:                        no

  Unix socket enabled:                     yes
  Detection enabled:                       yes

  libnss support:                          no
  libnspr support:                         no
  libjansson support:                      yes
  hiredis support:                         no
  Prelude support:                         no
  PCRE jit:                                yes
  LUA support:                             no
  libluajit:                               no
  libgeoip:                                yes
  Non-bundled htp:                         yes
  Old barnyard2 support:                   no
  CUDA enabled:                            no
  Hyperscan support:                       no

  Suricatasc install:                      no

  Unit tests enabled:                      no
  Debug output enabled:                    no
  Debug validation enabled:                no
  Profiling enabled:                       no
  Profiling locks enabled:                 no
  Coccinelle / spatch:                     no

Generic build parameters:
  Installation prefix:                     /usr/local
  Configuration directory:                 /usr/local/etc/suricata/
  Log directory:                           /var/log/suricata/

  --prefix                                 /usr/local
  --sysconfdir                             /usr/local/etc
  --localstatedir                          /var

  Host:                                    i386-portbld-freebsd10.2
  Compiler:                                cc (exec name) / clang (real)
  GCC Protect enabled:                     yes
  GCC march native enabled:                no
  GCC Profile enabled:                     no
  Position Independent Executable enabled: no
  CFLAGS                                   -O2 -pipe  -fstack-protector -fno-strict-aliasing -DOS_FREEBSD
  PCAP_CFLAGS
  SECCFLAGS                                -fstack-protector -D_FORTIFY_SOURCE=2 -Wformat -Wformat-security

32

General Discussion / Re: Machine Hang After Cron Job

« on: August 11, 2016, 07:01:14 am »

Noticed that, the cron job not link anymore for this script :

[stop]
command:/usr/local/etc/rc.d/suricata stop
parameters:
type:script
message:stop suricata daemon

[start]
command:/usr/local/etc/rc.d/suricata start
parameters:
type:script
message:start suricata daemon

[restart]
command:/usr/local/etc/rc.d/suricata restart
parameters:
type:script
message:restart suricata daemon

33

General Discussion / Machine Hang After Cron Job

« on: August 10, 2016, 11:34:57 am »

Hi Guys,

All this while the cron job performed very well until recently, whenever it runs, the machine hang which i need to perform manual reboot. here is the logs :

Aug 08 18:00:00 opnsense_fixed configd.py: [e042aef2-cdde-4cad-89a0-e4daa1853968] stop suricata daemon
Aug 08 18:04:34 opnsense_fixed configd_ctl.py: error in configd communication  Traceback (most recent call last):   File "/usr/local/opnsense/service/configd_ctl.py", line 65, in exec_config_cmd     line = sock.recv(65536) timeout: timed out
Aug 08 18:04:35 opnsense_fixed sshd: Received signal 15; terminating.
Aug 08 18:04:35 opnsense_fixed root: /etc/rc.shutdown: WARNING: $strongswan_enable is not set properly - see rc.conf(5).
Aug 08 18:04:37 opnsense_fixed kernel: 677.063079 [ 798] generic_netmap_dtor       Restored native NA 0
Aug 08 18:04:37 opnsense_fixed syslogd: exiting on signal 15

Can anyone help me with this? I'm using :

OPNsense 16.1.20-i386
FreeBSD 10.2-RELEASE-p19
OpenSSL 1.0.2h 3 May 2016

Intel(R) Celeron(R) D CPU 430 @ 1.80GHz
2GB of RAM

WAN : RealTek 8168/8111 B/C/CP/D/DP/E/F/G PCIe Gigabit Ethernet
LAN : 3Com 3c905C-TX Fast Etherlink XL

34

16.1 Legacy Series / Re: Creating Port Forwarding Profile Error

« on: June 09, 2016, 09:32:27 am »

Hi Ad!

It works!

Thank you

35

General Discussion / Set Static IP from ISP to LAN client

« on: June 09, 2016, 09:28:58 am »

Hi everyone!

I really need to know how can i set the remaining ip that i have from my ISP to my printer & CCTV. I already used one for the router (1.32.99.n1), so i want to set 1.32.99.n2 for my CCTV and 1.32.99.n3 for my printer. So whenever i'm not at home, i still can view the CCTV or print some document.

Can anyone lead me on how to set up this?

36

General Discussion / Re: Can't add more networks to an Alias again

« on: June 09, 2016, 09:28:31 am »

Have u tried with another browser?

37

16.1 Legacy Series / Re: Creating Port Forwarding Profile Error

« on: June 09, 2016, 08:47:57 am »

Having this issue with Firefox but working fine with Chrome. Seems like browser issue only

38

16.1 Legacy Series / [SOLVED] Creating Port Forwarding Profile Error

« on: June 08, 2016, 10:33:02 am »

Hi everyone,

I'm having a trouble to edit the port number. It will keep stated port 80 even i entered and save it with different port number. Also not able to delete the created profile

page : OPNSense/firewall_nat.php
version : 16.1.16

Do you guys facing this issue?

39

16.1 Legacy Series / Not authoritative for subnet 192.168.0.0

« on: April 15, 2016, 06:40:15 am »

One of the client keep on disconnected from the network. Every time it happen, got this message :

DHCPINFORM from 192.168.3.212 via xl0: not authoritative for subnet 192.168.0.0

already put "authoritative;" at the first line of dhcpd.conf file

Anyone know how to fix this?

40

16.1 Legacy Series / [SOLVED] Traffic Shaper - Not Working After Upgrade to 16.1.9

« on: April 12, 2016, 03:46:33 am »

Running on :

Intel(R) Celeron(R) D CPU 430 @ 1.80GHz
2GB of RAM

WAN : RealTek 8168/8111 B/C/CP/D/DP/E/F/G PCIe Gigabit Ethernet
LAN : 3Com 3c905C-TX Fast Etherlink XL

Worked perfectly before upgrade. Deleted, flushed, & re-created but still no traffic been shaped.

41

16.1 Legacy Series / Re: Intrusion Detection - System Crash Everytime Adjust the Settings

« on: April 07, 2016, 02:01:26 pm »

Should just select LAN only instead of LAN & WAN. Now everything is ok

42

16.1 Legacy Series / [SOLVED] Intrusion Detection - System Crash Everytime Adjust the Settings

« on: April 06, 2016, 01:18:27 pm »

Hi !

I'm having this scenario whereby every time i update something such as disable/enable one or more rulesets, change the action of the ruleset, amend schedule, etc. the system crash.

In System --> parameters --> network, i have checked :

    Disable hardware checksum offload
    Disable hardware TCP segmentation offload
    Disable hardware large receive offload

I'm using :

OPNsense 16.1.8-i386
FreeBSD 10.2-RELEASE-p14
OpenSSL 1.0.2g 1 Mar 2016

Intel(R) Celeron(R) D CPU 430 @ 1.80GHz
2GB of RAM

WAN : RealTek 8168/8111 B/C/CP/D/DP/E/F/G PCIe Gigabit Ethernet
LAN : 3Com 3c905C-TX Fast Etherlink XL

43

16.1 Legacy Series / Re: Intrusion Detection - Schedule Task

« on: April 06, 2016, 01:00:49 pm »

It works!

Thanks Ad!

44

16.1 Legacy Series / Re: Intrusion Detection - Schedule Task

« on: April 06, 2016, 07:04:44 am »

Managed to update the drop-down option from "update IDS rules" to "reload IDS rules" which before this both showing "update IDS rules".

But, how to add another option in that drop-down menu such as start and stop function of suricata. Any idea?

45

16.1 Legacy Series / [SOLVED] Intrusion Detection - Schedule Task

« on: February 25, 2016, 07:54:23 am »

Hi!

How possible to schedule the service (suricata) to be shutdown at certain time then restart it back at certain time?