Messages

Do you have a cron job for firmware updates?

Yes, I tuned it to update automatically at 4:00AM every 2-nd day of week, but Squid crashed today (3-rd day, Wedn.) and near midhight; here is screenshot.

P.S. Server was rebooted at 10 AM manually.

No additional packages are installed. No modifications and plugins.

This is my  /usr/local/etc/php.ini

Code Select Expand

; File generated via rc.php_ini_setup
output_buffering = "0"
expose_php = Off
implicit_flush = true
magic_quotes_gpc = Off
max_execution_time = 900
max_input_time = 1800
max_input_vars = 5000
memory_limit = 256M
register_argc_argv = On
register_long_arrays = Off
variables_order = "GPCS"
file_uploads = On
upload_tmp_dir = /tmp
upload_max_filesize = 200M
post_max_size = 200M
html_errors = Off
zlib.output_compression = Off
zlib.output_compression_level = 1
include_path = ".:/usr/local/etc/inc:/usr/local/www:/usr/local/opnsense/mvc:/usr/local/share/pear:/usr/local/opnsense/contrib"
ignore_repeated_errors = on
error_reporting = E_ALL ^ (E_NOTICE | E_DEPRECATED | E_STRICT)
display_errors=on
log_errors=on
error_log=/tmp/PHP_errors.log
extension_dir=/usr/local/lib/php/20131226/
date.timezone="Europe/Moscow"

[suhosin]
suhosin.get.max_array_depth = 5000
suhosin.get.max_array_index_length = 256
suhosin.get.max_vars = 5000
suhosin.get.max_value_length = 500000
suhosin.post.max_array_depth = 5000
suhosin.post.max_array_index_length = 256
suhosin.post.max_vars = 5000
suhosin.post.max_value_length = 9000000
suhosin.request.max_array_depth = 5000
suhosin.request.max_array_index_length = 256
suhosin.request.max_vars = 5000
suhosin.request.max_value_length = 9000000
suhosin.memory_limit = 512435456
suhosin.session.cryptdocroot=Off



So strange, but this error with squid at same time with period in some days, the reason of his behavior is unknown. What app or service can modify php.ini?

Today, all night long, same error with authenticator module appears again, squid crashed with auth.
There is example of error message (same as previous):

Code Select Expand

2016/08/31 03:24:05 kid1| WARNING: basicauthenticator #Hlpr200888 exited
2016/08/31 03:24:05 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/08/31 03:24:05 kid1| Starting new helpers
2016/08/31 03:24:05 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/08/31 03:24:05 kid1| helperHandleRead: unexpected read from basicauthenticator #Hlpr200889, 325 bytes '
Warning: require_once(script/load_phalcon.php): failed to open stream: No such file or directory in /usr/local/etc/inc/legacy_bindings.inc on line 30

Fatal error: require_once(): Failed opening required 'script/load_phalcon.php' (include_path='.:/usr/local/share/pear') in /usr/local/etc/inc/legacy_bindings.inc on line 30

How I can fix it??

I'm running 16.7.2-amd64 release, w/o any modifications.

Code Select Expand

pkg query %v php56
returns "5.6.24_1" and I run

Code Select Expand

# /usr/local/etc/rc.php_ini_setup

as you advised. This command doesn't return anything, all works normally so far :)

[cache.log]

Hi,
some days ago Squid proxy began to crash periodically (NOT every day) somewhere about after 1 AM with next entries in cache.log:

Code Select Expand

2016/08/24 00:01:11 kid1| WARNING: basicauthenticator #Hlpr1334 exited
2016/08/24 00:01:11 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/08/24 00:01:11 kid1| Starting new helpers
2016/08/24 00:01:11 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/08/24 00:01:12 kid1| helperHandleRead: unexpected read from basicauthenticator #Hlpr1335, 325 bytes '
Warning: require_once(script/load_phalcon.php): failed to open stream: No such file or directory in /usr/local/etc/inc/legacy_bindings.inc on line 30

Fatal error: require_once(): Failed opening required 'script/load_phalcon.php' (include_path='.:/usr/local/share/pear') in /usr/local/etc/inc/legacy_bindings.inc on line 30
'
2016/08/24 00:01:12 kid1| WARNING: basicauthenticator #Hlpr1335 exited
2016/08/24 00:01:12 kid1| Too few basicauthenticator processes are running (need 1/20)
2016/08/24 00:01:12 kid1| Starting new helpers
2016/08/24 00:01:12 kid1| helperOpenServers: Starting 1/20 'squid.auth-user.php' processes
2016/08/24 00:01:12 kid1| helperHandleRead: unexpected read from basicauthenticator #Hlpr1336, 325 bytes '
Warning: require_once(script/load_phalcon.php): failed to open stream: No such file or directory in /usr/local/etc/inc/legacy_bindings.inc on line 30

Fatal error: require_once(): Failed opening required 'script/load_phalcon.php' (include_path='.:/usr/local/share/pear') in /usr/local/etc/inc/legacy_bindings.inc on line 30
'


...and entries repeating indefinitely. What could be the problem??
Thanks!

Hi,
thanks, waiting for 16.7.3 release  :)

Hi,
I'm updated the system after seeing your message. It's very strange, but Russian fonts began looks good only on Lumia 640 (Windows Phone 8.1)! On other systems, eg Windows 7, 10, even on Linux Mint with Chrome it still as before. Browsers cache was cleared before testing. ( Attaching screenshots.
P.S. Fonts looks amazing on your screenshot! ;)

Ok, you also have the Intel em(4) driver? ;)

Yes, this is my both integrated NICs:

1-st

Code Select Expand

em0@pci0:0:25:0:        class=0x020000 card=0x35788086 chip=0x15028086 rev=0x05 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = '82579LM Gigabit Network Connection'
    class      = network
    subclass   = ethernet

2-nd

Code Select Expand

em1@pci0:2:0:0: class=0x020000 card=0x35788086 chip=0x10d38086 rev=0x00 hdr=0x00
    vendor     = 'Intel Corporation'
    device     = '82574L Gigabit Network Connection'
    class      = network
    subclass   = ethernet

I'm fully disable Suricata service (no IDS/no IPS) just to be sure, IPS not so critical for me.
Nevertheless, can I apply this fix?

Code Select Expand


opnsense-update -khr 16.7-em

or it is better not to do until 16.7.1?

Yes, Suricata has worked in the IPS mode. Ok, waiting for a fix!

Reading some topics in 16.7 prod. series, decided to kill Suricata IDS/IPS, then fully disabled that and reboot. I'm fine, no suspicious packet loss to router, SSH works smooth!  :)
And the question: will be Suricata package fixed in the next release?

Hi,
today at 3 AM I updated my OPNSense machine to 16.7 from 16.1.20 v and encountered a problem with big packet loss on WAN interface (to H/W router), which has not previously been observed. Router and switch are working normally, users of LAN2 has no problem or packet loss to router; problem started after OPNSense update finished. Attached screenshots show this problem on graphs. Also attached network scheme. What could be the problem?

P.S. SSH connection from Internet to opnsense also very unstable, using of the terminal is very hard...

Thanks!

in addition

fonts files located in

Code Select Expand

/usr/local/opnsense/www/themes/opnsense/build/fonts
css-style is:

Code Select Expand

/usr/local/opnsense/www/themes/opnsense/build/css/main.css

This is places to need fix with font, in a first approximation.

Ok, I can help with this.

Currently OPNSense uses Google font "Source Sans Pro", which is not support Cyrillic fonts.
Alternative might be to use sans-serif Google Font "PT Sans", it's looks amazing with cyrillic text. Examples attached.

Hi,
tonight I'm updated my gateway from 16.1.20 to 16.7 version. All services continue works fine, but in Russian interface (cyrillic font) fonts looks very ugly (serif font vs. sans-serif in English version). This bug also was in previous release, but I hoped this bug was fixed in new release. I'v attached screenshot with problem.
Hope that you fix this in the near future.

franco,

thanks for your answer, it's very helpful for me!  ;)