Messages

226

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: December 04, 2016, 11:38:37 am »

hi all,

back to 16.7.10 it's the same (all categories active) plus a error in the log:

configd.py: unable to sendback response [OK ] for [proxy][downloadacls][None] {b62421f1-b3be-4e2c-b502-366d1a140aa0}, message was Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 202, in run self.connection.sendall('%s\n' % result) File "/usr/local/lib/python2.7/socket.py", line 228, in meth return getattr(self._sock,name)(*args) error: [Errno 32] Broken pipe

cheers till

227

German - Deutsch / Re: Firmware Update

« on: December 04, 2016, 10:57:11 am »

Hallo zusammen,

könnt ihr bitte mal eure BIOS Version der APU's mit angeben.

Gruß Till

228

17.1 Legacy Series / Re: 17.1.a_531-amd64 - SSHd / PPoE libpam.so.5 Error

« on: December 02, 2016, 07:39:29 pm »

hi franco,

the link leads to the "404 Not Found" and the repo was so there neither for i386 nor amd64.
The requested URL /snapshots/amd64/pkg-1.9.3_1.txz was not found on this server.

cheers till

229

17.1 Legacy Series / Re: opnsense-update tries to reach FreeBSD:11:i386/16.7 ?

« on: December 02, 2016, 07:34:44 pm »

hi franco,

the link leads to the "404 Not Found" and the repo was so there neither for i386 nor amd64.
The requested URL /snapshots/amd64/pkg-1.9.3_1.txz was not found on this server.

cheers till

230

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: December 02, 2016, 07:28:00 pm »

hi franco,

generated output? (a reboot does not help)

cheers till

231

16.7 Legacy Series / Re: [SOLVED] How to run the UniFi controller on OPNsense boxes?

« on: November 28, 2016, 07:52:21 pm »

@ enpe,

UniFI on pfsense or opnsense? this setup interests me, you have here also a USG in the employment?

cheers till

232

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: November 28, 2016, 07:11:19 pm »

hi all,

use ad's workaround for download with no error:

Code: [Select]

/usr/local/opnsense/scripts/proxy/fetchACLs.py
over web interface i only selected 5 categories but all active!

the generate index look good for me...

Code: [Select]

root@mea:/usr/local/etc/squid # cat acl/shall0.index
{"finance/moneylending": "finance/moneylending", "automobile/boats": "automobile/boats", "porn": "porn", "ringtones": "ringtones", "drugs": "drugs", "socialnet": "socialnet", "dynamic": "dynamic", "anonvpn": "anonvpn", "library": "library", "science/astronomy": "science/astronomy", "costtraps": "costtraps", "finance/insurance": "finance/insurance", "chat": "chat", "politics": "politics", "searchengines": "searchengines", "shopping": "shopping", "aggressive": "aggressive", "hospitals": "hospitals", "urlshortener": "urlshortener", "adv": "adv", "weapons": "weapons", "updatesites": "updatesites", "recreation/restaurants": "recreation/restaurants", "radiotv": "radiotv", "alcohol": "alcohol", "isp": "isp", "finance/trading": "finance/trading", "webmail": "webmail", "sex/lingerie": "sex/lingerie", "religion": "religion", "tracker": "tracker", "music": "music", "automobile/planes": "automobile/planes", "hobby/gardening": "hobby/gardening", "recreation/humor": "recreation/humor", "hobby/games-misc": "hobby/games-misc", "redirector": "redirector", "gamble": "gamble", "fortunetelling": "fortunetelling", "jobsearch": "jobsearch", "finance/banking": "finance/banking", "hobby/cooking": "hobby/cooking", "webtv": "webtv", "government": "government", "models": "models", "automobile/bikes": "automobile/bikes", "downloads": "downloads", "hobby/pets": "hobby/pets", "warez": "warez", "homestyle": "homestyle", "recreation/martialarts": "recreation/martialarts", "spyware": "spyware", "recreation/wellness": "recreation/wellness", "news": "news", "hobby/games-online": "hobby/games-online", "recreation/travel": "recreation/travel", "webphone": "webphone", "sex/education": "sex/education", "finance/other": "finance/other", "automobile/cars": "automobile/cars", "dating": "dating", "remotecontrol": "remotecontrol", "forum": "forum", "violence": "violence", "imagehosting": "imagehosting", "podcasts": "podcasts", "movies": "movies", "webradio": "webradio", "military": "military", "hacking": "hacking", "finance/realestate": "finance/realestate", "science/chemistry": "science/chemistry", "education/schools": "education/schools", "recreation/sports": "recreation/sports"}
root@mea:/usr/local/etc/squid # cat externalACLs.conf
#
# Automatic generated configuration for fetching remote ACLs.
# Do not edit this file manually.
[shall0]
url:http://www.shallalist.de/Downloads/shallalist.tar.gz
enabled:1
filter:adv,hacking,spyware,tracker,warez
sslNoVerify=0
root@mea:/usr/local/etc/squid #
cheers till

233

17.1 Legacy Series / 17.1 beta

« on: November 24, 2016, 08:07:49 pm »

I think it's time for first 17.1beta img's for new install..

..and a new thread to upgrade on base 16.7.10 to 17.1b.

cheers till

234

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: November 23, 2016, 07:51:32 pm »

the same with shalla list here on 17.1 (http://www.shallalist.de/Downloads/shallalist.tar.gz) and the yoyo shows only encrypted on cat this

235

17.1 Legacy Series / Re: Atheros AR9280 support

« on: November 23, 2016, 07:28:08 pm »

Hi Manu,

APU2 may need an USB fix, but you can use 16.7, sure.

See:

https://github.com/opnsense/tools/issues/28


Cheers,
Franco

hi franco,

i don't understand this. i can 16.7-serial-amd64.img with every usb stick install on apu2?

cheers till

236

17.1 Legacy Series / Re: Atheros AR9280 support

« on: November 21, 2016, 09:35:16 pm »

I can confirm that. The WLE200NX ran until 16.7.7 perfectly but under 17.1 it is currently not activatable.

OPNsense 17.1.a_736-amd64
FreeBSD 11.0-RELEASE-p2
OpenSSL 1.0.2j 26 Sep 2016

cheers till

237

17.1 Legacy Series / Re: 17.1.a_704 Fatal error: /firewall_rules_edit.php

« on: November 19, 2016, 10:23:53 am »

small typo on 454

Code: [Select]

system_onfigure_cron();


Code: [Select]

system_configure_cron();

cheers till

238

German - Deutsch / Re: APU2C4 - Empfehlung HDD oder SSD bzw. SD Card?

« on: November 19, 2016, 09:26:08 am »

Für die APU's kann ich für den Einstieg nur gleich msata empfehlen. PC Engines bietet das ja selber mit an derzeit: msata16e - 16 GB mSATA SSD, Phison S9 controller, MLC toggle NAND flash. Das sollte für den Einstieg vollkommen ausreichen für Squid Cache und co. Selbstverständlich kann man auch andere msata/ssd mit mehr Speicher zum Einsatz bringen. Das ist dann eine Budget Frage.

239

German - Deutsch / Re: APU2 AES-NI nutzen / OpenVPN

« on: November 18, 2016, 07:38:05 pm »

Hallo zusammen,

das aesni.ko deutlich performanter im Einsatz mit dem APU2 Board und IPsec ist kann ich so bestätigen. Das FreeBSD11 hier nochmal einen daraufsetzt versuche ich gerade zu testen. Aber aktuell heute bin ich hier leider hängen geblieben https://forum.opnsense.org/index.php?topic=3951.0.
Die Werte von BeNe habe ich so aber auch noch nie erreicht. Welche APU2 genau wurde hier benutzt? Softwaretechnisch immer die LibreSSL Version?
AES-NI ist wirklich ein Thema für sich.

Gruß Till

240

17.1 Legacy Series / [SOLVED] 17.1.a_704 Fatal error: /firewall_rules_edit.php

« on: November 18, 2016, 06:13:54 pm »

FreeBSD 11.0-RELEASE-p2 #0 850e1e9(master): Fri Oct 28 17:09:55 CEST 2016     root@sensey64:/usr/obj/usr/src/sys/SMP
OPNsense 17.1.a_704-32e02ba0f [17.1.a_695-4a77e5c60] OpenSSL 1.0.2j  26 Sep 2016 (amd64)

Fatal error: Call to undefined function system_onfigure_cron() in /usr/local/www/firewall_rules_edit.php on line 454