Messages

586

16.7 Legacy Series / IPSEC + OPENVPN

« on: July 18, 2016, 06:00:21 pm »

Hi Guys,
I have 16.7 Hardware running file with the OPENVPN Two Factor Authenticator.
With two factor Authentication for iPhone users is pain in the ass.
I am planning to configure IPSEC for Mobile users. Is this gonna works with the OPENVPN service on ?
Thank you

587

16.7 Legacy Series / Re: [SOLVED] can't install opnsense

« on: July 17, 2016, 11:18:19 pm »

a big thank you for your quick reply.
i've tried this but it still not working
http://mirror.ams1.nl.leaseweb.net/opnsense/releases/mirror/OPNsense-16.7.r2-OpenSSL-vga-amd64.img.bz2
http://mirror.ams1.nl.leaseweb.net/opnsense/releases/mirror/OPNsense-16.7.r2-OpenSSL-cdrom-amd64.iso.bz2
or i need the i386 ?
it load the USB but does not provide the installation see screenshot

thank you

588

16.7 Legacy Series / [WORKAROUND] can't install opnsense

« on: July 17, 2016, 09:46:16 pm »

Hi Guys,
we have build a new pc/ router for testing a ASUS MOBO.
while boating with the usb its takes for ever to show the boat page and its hangs on loading boatx86
i've tried many usbs but none of them works.
i've downlaoded pfsense and tried the iso and it works.
the boat is UEFI on the MOBO, any suggestion why i can't get it installed ?

589

16.1 Legacy Series / [SOLVED] Routing apple Bonjour

« on: July 17, 2016, 12:11:19 pm »

Hi Guys,
After I replaced our Cisco with the OPNSENSE, our Bonjour Printers stops working and we can't detect them on the network.
The printers are online and reachable .
Can someone please point me how to enable bonjour services on the firewall ?
Firewall rules are any to any on each interfaces.

590

16.7 Legacy Series / notification

« on: July 17, 2016, 02:37:22 am »

Hi guys,
I have configured a load balancing using the next documents , https://docs.opnsense.org/manual/multiwan.html?highlight=multi
After I've configured had disabled one up link but the notification wasn't sent.
When I go to the notification and I send a test one smtp, the warning arrive to the email.
Can someone point me what I am doing wrong ?
OPNsense version is 16.7

Thank you

591

16.1 Legacy Series / Re: Openvpn over THE tunnel

« on: July 14, 2016, 03:45:39 pm »

This fixed too,
Select send all traffic over the gateway and re-export.

592

16.1 Legacy Series / [SOLVED] Openvpn over THE tunnel

« on: July 13, 2016, 03:16:10 pm »

Hi guys ,
On our news production we configured openvpn server everything works fine .
My colleague is off to China for a week .
Before we migrate to opnsense we could build VPN to our Cisco firewall in holland to access the Internet as we may know the chiness are blocking a lot of sites .
Is this gonna work with the openvpn tunnel we build ? I've forced the tunnel over the VPN but when I am connect over the openvpn and I went to whatismyip it's not showing our office IP but the local IP

Thank you guys for the support

593

16.1 Legacy Series / Re: [SOLVED] From Cisco to OPNSENSE

« on: July 13, 2016, 12:53:31 pm »

Not sure if setup problem. Impossible to debug from here. You'll need to pinpoint the issue in your network infrastructure.

this is also fixed by now.
after a reboot of the appliance everything is back to normal.
i can't wait for the release of the 16.7 to apply it on the productions.

594

16.1 Legacy Series / Re: OPENVPN Daemon won't start

« on: July 13, 2016, 12:09:09 pm »

thank you Franco,
i thought i saved the log but somehow it didn't save the right log.
below is the correct log :

Jul 13 04:12:39 openvpn[71203]: Use --help for more information.
Jul 13 04:12:39 openvpn[71203]: Options error: --server directive network/netmask combination is invalid
Jul 13 04:10:37 openvpn[27735]: Use --help for more information.
Jul 13 04:10:37 openvpn[27735]: Options error: --server directive network/netmask combination is invalid
Jul 12 20:11:56 openvpn[64920]: Use --help for more information.
Jul 12 20:11:56 openvpn[64920]: Options error: --server directive network/netmask combination is invalid
Jul 12 19:36:25 openvpn[65363]: Use --help for more information.
Jul 12 19:36:25 openvpn[65363]: Options error: --server directive network/netmask combination is invalid
Jul 12 19:35:08 openvpn[17316]: Use --help for more information.
Jul 12 19:35:08 openvpn[17316]: Options error: --server directive network/netmask combination is invalid


i've noticed the tunnel IP was wrong,  now is fixed .
thank you Franco,
one last questions,
i have 6 VLANS now, i want one VLAN5 to be blocked accessing the other VLANS,
i want to do the next
creating a  group interfaces and add the VLANS 1,2,3,4,6 and call it Productions
Create a group interface and add VLAN5 to it and Call it guest.
on the firewall Production create a rules to block source production , destination Guest and the opposite

would fix this ?

thank you

595

16.1 Legacy Series / Re: [SOLVED] From Cisco to OPNSENSE

« on: July 13, 2016, 12:23:40 am »

We noticed the wifi users are facing some slowness on the internet side however the cable users are getting a high speed.
as i mentioned early the wifi users are on the switch with managed on VLAN40 and Access point are sharing VLAN20.
maybe is this why its cause the slowness ? should the access point share the VLAN40 over the wifi to speed up the process ?
thank you

596

16.7 Legacy Series / Re: Intrusion Detections, maybe a bug

« on: July 13, 2016, 12:16:06 am »

false alarm,
my colleagues has create GEO IP not from our country which blocks us from using the internet.
so the not from country means that country won't access the firewall or the other way around ?

597

16.7 Legacy Series / [SOLVED] Intrusion Detections, maybe a bug

« on: July 13, 2016, 12:02:25 am »

Hi guys,
on my lab been working for over week, everything works no issues.
today i couldn't build a vpn to the lab , so logged to the firewall log to check why.
gateway was down i couldn't ping it. it won't come online.
the gateway is online and working because its up and running using pfsense on the other side of the cloud.
just thought to share with you guys.


after i disabled intrusion detection the links comes up.
enable the Intrusion detections kills the up link again.
i believe something to do with the Intrusion Detections.

598

16.1 Legacy Series / Re: OPENVPN Daemon won't start

« on: July 12, 2016, 11:05:47 pm »

No, this is for 16.7 only. The OpenVPN log file can help you pinpoint your issue. It won't start because it's misconfigured (setting missing or typo in one of the fields that is not caught by the GUI).

if i disable the openvpn server the daemon stops, after i enable it it won't starts.
where can i see the logs ? maybe update to 16.7 would fix the issue ?
those are the logs i could find about the openvpn.

Jul 11 18:26:39 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:34 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:34 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:28 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:28 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:22 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:22 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:17 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:17 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:11 opnsense: /widgets/api/get.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:11 opnsense: /widgets/api/get.php: The command `/sbin/ifconfig 'openvpn'' failed to execute
Jul 11 18:26:10 opnsense: /index.php: The command `/usr/local/sbin/ifinfo 'openvpn'' failed to execute
Jul 11 18:26:10 opnsense: /index.php: The command `/sbin/ifconfig 'openvpn'' failed to execute



i noticed the Disable hardware checksum offload is not selected, do i have to select this or is just on a virtual appliance ?
i am using the A10 hardware .

599

16.1 Legacy Series / Re: OPENVPN Daemon won't start

« on: July 12, 2016, 06:57:37 pm »

no i am on this production 16.1.
can i apply the same patch on 16.1 ?
i hope you can reply tonight so i can apply and if needed to reboot the firewall as there is no one on production.

thank you

600

16.1 Legacy Series / [SOLVED] OPENVPN Daemon won't start

« on: July 12, 2016, 11:23:54 am »

Hi Guys,
is there is away to start the openvpn daemon without have to reboot the firewall ?
i keep click on Play but it won't start.

thank you