286
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
287
German - Deutsch / Re: APU2C4 - Empfehlung HDD oder SSD bzw. SD Card?
« on: November 19, 2016, 09:26:08 am »
Für die APU's kann ich für den Einstieg nur gleich msata empfehlen. PC Engines bietet das ja selber mit an derzeit: msata16e - 16 GB mSATA SSD, Phison S9 controller, MLC toggle NAND flash. Das sollte für den Einstieg vollkommen ausreichen für Squid Cache und co. Selbstverständlich kann man auch andere msata/ssd mit mehr Speicher zum Einsatz bringen. Das ist dann eine Budget Frage.
288
German - Deutsch / Re: APU2 AES-NI nutzen / OpenVPN
« on: November 18, 2016, 07:38:05 pm »
Hallo zusammen,
das aesni.ko deutlich performanter im Einsatz mit dem APU2 Board und IPsec ist kann ich so bestätigen. Das FreeBSD11 hier nochmal einen daraufsetzt versuche ich gerade zu testen. Aber aktuell heute bin ich hier leider hängen geblieben https://forum.opnsense.org/index.php?topic=3951.0.
Die Werte von BeNe habe ich so aber auch noch nie erreicht. Welche APU2 genau wurde hier benutzt? Softwaretechnisch immer die LibreSSL Version?
AES-NI ist wirklich ein Thema für sich.
Gruß Till
das aesni.ko deutlich performanter im Einsatz mit dem APU2 Board und IPsec ist kann ich so bestätigen. Das FreeBSD11 hier nochmal einen daraufsetzt versuche ich gerade zu testen. Aber aktuell heute bin ich hier leider hängen geblieben https://forum.opnsense.org/index.php?topic=3951.0.
Die Werte von BeNe habe ich so aber auch noch nie erreicht. Welche APU2 genau wurde hier benutzt? Softwaretechnisch immer die LibreSSL Version?
AES-NI ist wirklich ein Thema für sich.
Gruß Till
289
17.1 Legacy Series / [SOLVED] 17.1.a_704 Fatal error: /firewall_rules_edit.php
« on: November 18, 2016, 06:13:54 pm »
FreeBSD 11.0-RELEASE-p2 #0 850e1e9(master): Fri Oct 28 17:09:55 CEST 2016 root@sensey64:/usr/obj/usr/src/sys/SMP
OPNsense 17.1.a_704-32e02ba0f [17.1.a_695-4a77e5c60] OpenSSL 1.0.2j 26 Sep 2016 (amd64)
Fatal error: Call to undefined function system_onfigure_cron() in /usr/local/www/firewall_rules_edit.php on line 454
OPNsense 17.1.a_704-32e02ba0f [17.1.a_695-4a77e5c60] OpenSSL 1.0.2j 26 Sep 2016 (amd64)
Fatal error: Call to undefined function system_onfigure_cron() in /usr/local/www/firewall_rules_edit.php on line 454
290
16.7 Legacy Series / [SOLVED] 16.7.8 update broke lightsquid
« on: November 17, 2016, 06:41:54 pm »
nginx 500 internal server error on /ligtsquid/index.cgi
i see that all files in lightsquid directory become the update date and system log tell lightsquid-1.8_4 reinstall ok
cheers till
i see that all files in lightsquid directory become the update date and system log tell lightsquid-1.8_4 reinstall ok
cheers till
291
18.1 Legacy Series / Re: How to test the development version
« on: November 16, 2016, 07:41:52 pm »
that's really interesting - a new install the repo is 16.7 after this is 17.1 but DOWNGRADED from 17.1.a_673 -> 17.1.a_539
Code: [Select]
*** test.loca: OPNsense 17.1.a_673 (amd64/OpenSSL) ***
LAN (re0) -> v4: 192.168.1.1/24
WAN (pppoe0) -> v4/PPPoE: *.*.*.*
0) Logout 7) Ping host
1) Assign Interfaces 8) Shell
2) Set interface(s) IP address 9) pfTop
3) Reset the root password 10) Filter Logs
4) Reset to factory defaults 11) Restart web interface
5) Power off system 12) Upgrade from console
6) Reboot system 13) Restore a configuration
Enter an option: 8
root@test:~ # cat /usr/local/etc/pkg/repos/origin.conf
OPNsense: {
fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
url: "pkg+http://pkg.opnsense.org/${ABI}/16.7/latest",
signature_type: "fingerprints",
mirror_type: "srv",
priority: 11,
enabled: yes
}
root@test:~ # opnsense-update -sn "17.1\/latest"
root@test:~ # opnsense-update -fp
Updating OPNsense repository catalogue...
Fetching meta.txz: 100% 1 KiB 1.5kB/s 00:01
Fetching packagesite.txz: 100% 94 KiB 95.8kB/s 00:01
Processing entries: 100%
OPNsense repository update completed. 307 packages processed.
Updating OPNsense repository catalogue...
OPNsense repository is up-to-date.
All repositories are up-to-date.
Updating database digests format: 100%
Checking for upgrades (121 candidates): 100%
Processing candidates (121 candidates): 100%
The following 121 package(s) will be affected (of 0 checked):
Installed packages to be DOWNGRADED:
opnsense-devel: 17.1.a_673 -> 17.1.a_539
Installed packages to be REINSTALLED:
pkg-1.9.1
zip-3.0_1
wol-0.7.1_2
unbound-1.5.10
syslogd-10.3
suricata-3.1.2
sudo-1.8.18
strongswan-5.5.0
sshlockout_pf-0.0.2_2
---------------------------------------------------------------------------------snip
/var/cache/pkg/beep-1.0_1-b2d78e37a3.txz
/var/cache/pkg/bind910-9.10.4P3.txz
/var/cache/pkg/beep-1.0_1.txz
/var/cache/pkg/apinger-0.7-38946bab0c.txz
/var/cache/pkg/apinger-0.7.txz
/var/cache/pkg/GeoIP-1.6.9-3fe84bba19.txz
/var/cache/pkg/GeoIP-1.6.9.txz
The cleanup will free 76 MiB
Deleting files: 100%
All done
root@test:~ #
*** FINAL System shutdown message from root@test.loca ***
System going down IMMEDIATELY
Connection to 192.168.1.1 closed by remote host.
Connection to 192.168.1.1 closed.
root@test:~$ ssh root@192.168.1.1
Password for root@test.loca:
Last login: Wed Nov 16 17:49:50 2016 from 192.168.1.101
FreeBSD 11.0-RELEASE-p2 (SMP) #0 850e1e9(master): Fri Oct 28 17:09:55 CEST 2016
----------------------------------------------
| Hello, this is OPNsense 16.7! | @@@@@@@@@@@@@@@
| | @@@@ @@@@
| Website: https://opnsense.org/ | @@@\\\ ///@@@
| Handbook: https://docs.opnsense.org/ | )))))))) ((((((((
| Forums: https://forums.opnsense.org/ | @@@/// \\\@@@
| Lists: https://lists.opnsense.org/ | @@@@ @@@@
| Code: https://github.com/opnsense | @@@@@@@@@@@@@@@
----------------------------------------------
0) Logout 7) Ping host
1) Assign Interfaces 8) Shell
2) Set interface(s) IP address 9) pfTop
3) Reset the root password 10) Filter Logs
4) Reset to factory defaults 11) Restart web interface
5) Power off system 12) Upgrade from console
6) Reboot system 13) Restore a configuration
Enter an option: 8
root@test:~ # cat /usr/local/etc/pkg/repos/origin.conf
OPNsense: {
fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
url: "pkg+http://pkg.opnsense.org/${ABI}/17.1/latest",
signature_type: "fingerprints",
mirror_type: "srv",
priority: 11,
enabled: yes
}
292
17.1 Legacy Series / Re: Idea(s) for the road map
« on: November 16, 2016, 06:55:05 pm »
@zeitkind
yeah and this strong with second pppoe dial in for voice!
Quote
- Asterisk / VoIP / SIP gateway in GUI or as a good addon
yeah and this strong with second pppoe dial in for voice!
293
17.1 Legacy Series / Re: 17.1.a_531-amd64 - SSHd / PPoE libpam.so.5 Error
« on: November 16, 2016, 06:48:31 pm »
No this apu2 was never a LibreSSL install.
294
17.1 Legacy Series / Re: 17.1.a_531-amd64 - SSHd / PPoE libpam.so.5 Error
« on: November 15, 2016, 08:49:12 pm »
hi franco, i've tried the new howto on 16.7.7
after reboot looks like first post.
cheers till
-current a new install [OPNsense 17.1.a_663-amd64] is working-
Quote
On top of using the opnsense-devel package, it's now (as of 16.7.7) possible to upgrade to the next FreeBSD 11.0 underneath as well:
# opnsense-update -t opnsense-devel
# opnsense-update -ur 17.1.a
# /usr/local/etc/rc.reboot
after reboot looks like first post.
cheers till
-current a new install [OPNsense 17.1.a_663-amd64] is working-
295
17.1 Legacy Series / Re: 17.1.a_531-amd64 - SSHd / PPoE libpam.so.5 Error
« on: November 12, 2016, 03:38:06 pm »
Hi Franco, yes here's the output
WAN is off (pppoe) i can't install in this way.
cheers till
Code: [Select]
# uname -a
FreeBSD 11.0-RELEASE-p2 FreeBSD 11.0-RELEASE-p2 #0 850e1e9(master): Fri Oct 28 17:09:55 CEST 2016 root@sensey64:/usr/obj/usr/src/sys/SMP amd64
# freebsd-version
11.0-RELEASE-p2
# cat /usr/local/etc/pkg/repos/origin.conf
OPNsense: {
fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
url: "pkg+http://pkg.opnsense.org/${ABI}/16.7/latest",
signature_type: "fingerprints",
mirror_type: "srv",
priority: 11,
enabled: yes
}
# pkg install -f openssh_portable
Updating OPNsense repository catalogue...
pkg: http://pkg.opnsense.org/FreeBSD:11:amd64/16.7/latest/meta.txz: No address record
repository OPNsense has no meta file, using default settings
pkg: http://pkg.opnsense.org/FreeBSD:11:amd64/16.7/latest/packagesite.txz: No address record
Unable to update repository OPNsense
All repositories are up-to-date.
pkg: Repository OPNsense cannot be opened. 'pkg update' required
pkg: No packages available to install matching 'openssh_portable' have been found in the repositories
# ldd /usr/local/sbin/sshd
/usr/local/sbin/sshd:
libwrap.so.6 => /usr/lib/libwrap.so.6 (0x1f0b6eb6000)
libpam.so.5 => not found (0)
libcrypto.so.8 => /usr/local/lib/libcrypto.so.8 (0x1f0b7200000)
libldns.so.1 => /usr/local/lib/libldns.so.1 (0x1f0b7654000)
libz.so.6 => /lib/libz.so.6 (0x1f0b78ae000)
libutil.so.9 => /lib/libutil.so.9 (0x1f0b7ac6000)
libcrypt.so.5 => /lib/libcrypt.so.5 (0x1f0b7cda000)
libc.so.7 => /lib/libc.so.7 (0x1f0b7ef9000)
libthr.so.3 => /lib/libthr.so.3 (0x1f0b8295000)
#
via /dev/ttyUSB0 - PuttyWAN is off (pppoe) i can't install in this way.
cheers till
296
17.1 Legacy Series / 17.1.a_531-amd64 - SSHd / PPoE libpam.so.5 Error
« on: November 12, 2016, 10:23:38 am »Code: [Select]
Nov 12 09:45:42 kernel: done.
Nov 12 09:45:42 lighttpd[38825]: (log.c.217) server started
Nov 12 09:45:41 opnsense: /usr/local/etc/rc.sshd: The command '/usr/bin/protect -i /usr/local/sbin/sshd' returned exit code '1', the output was 'Shared object "libpam.so.5" not found, required by "sshd"'
Nov 12 09:45:41 kernel: done.
Nov 12 09:45:41 kernel: done.
Nov 12 09:45:39 kernel: .done.
Nov 12 09:45:38 kernel: pflog0: promiscuous mode enabled
Nov 12 09:45:38 opnsense: /usr/local/etc/rc.bootup: The command '/usr/sbin/arp -d -i 'pppoe0' -a > /dev/null 2>&1' returned exit code '1', the output was ''
Nov 12 09:45:38 opnsense: /usr/local/etc/rc.bootup: The command '/sbin/ifconfig 'pppoe0' -staticarp' returned exit code '1', the output was 'ifconfig: interface pppoe0 does not exist'
Nov 12 09:45:30 configd.py: [5bd4a568-adaf-4230-9159-f205202c1fb0] Linkup starting re0
Nov 12 09:45:30 kernel: re0: link state changed to UP
Nov 12 09:45:29 configd.py: [796a35bd-401a-40d0-8d21-1b7894a2d4ca] Linkup starting re1
Nov 12 09:45:29 kernel: re1: link state changed to UP
Nov 12 09:45:27 configd.py: [8abb4dcf-0b66-4caf-bbb9-98308b7c8a56] Linkup stopping re1
Nov 12 09:45:27 kernel: re1: link state changed to DOWN
Nov 12 09:45:27 kernel: starting pppoe0 link...
Nov 12 09:45:27 opnsense: /usr/local/etc/rc.bootup: The command '/usr/local/sbin/mpd5 -b -k -d /var/etc -f mpd_opt1.conf -p /var/run/'pppoe'_opt1.pid -s ppp 'pppoe'client' returned exit code '1', the output was 'Shared object "libpam.so.5" not found, required by "mpd5"'
Nov 12 09:45:27 opnsense: /usr/local/etc/rc.bootup: The command '/sbin/ifconfig 'pppoe0' inet6 -accept_rtadv' returned exit code '1', the output was 'ifconfig: interface pppoe0 does not exist'
Nov 12 09:45:27 configd.py: [332fb4cf-a09d-42fa-be45-8cfde09a467c] Linkup stopping re0
Nov 12 09:45:27 kernel: re0: link state changed to DOWN
Nov 12 09:45:27 kernel:
cheers till - i make me a coffee
297
17.1 Legacy Series / Re: Message from opnsense-devel-17.1.a_196
« on: August 25, 2016, 06:28:25 pm »
hi franco,
the directory does not exist anymore. i had cleared for new fresh clone. at this point i did not know that more goes broken. its ok... alpha testing
cheers till
the directory does not exist anymore. i had cleared for new fresh clone. at this point i did not know that more goes broken. its ok... alpha testing
cheers till
298
17.1 Legacy Series / Re: Message from opnsense-devel-17.1.a_196
« on: August 23, 2016, 08:04:50 pm »
both command fails with same error:
the log end (no new log exits) at the installation date with:
yes very odd
Quote
Fatal error: Class 'Phalcon\DI\FactoryDefault' not found in /usr/local/opnsense/mvc/script/load_phalcon.php on line 32
the log end (no new log exits) at the installation date with:
Quote
...
Aug 17 18:23:34 sense sshd[434567]: Received signal 15; terminating.
Aug 17 18:23:34 sense kernel: ..done
Aug 17 18:23:34 sense kernel: .
Aug 17 18:23:36 sense root: /etc/rc.shutdown: WARNING: $strongswan_enable is not set properly - see rc.conf(5).
Aug 17 18:23:36 sense syslogd: exiting on signal 15
yes very odd
299
17.1 Legacy Series / Re: Message from opnsense-devel-17.1.a_196
« on: August 22, 2016, 07:45:57 pm »
"make upgrade" on ssh console
last: 17.1a_161-d137b214a
info: ...Version: 17.1.a_196 .... Descrption: 0c1e5723b
install: (no chance) no dns... no route...
last: 17.1a_161-d137b214a
info: ...Version: 17.1.a_196 .... Descrption: 0c1e5723b
install: (no chance) no dns... no route...
300
17.1 Legacy Series / Description
« on: August 19, 2016, 08:25:45 pm »Feedback and questions for the 16.7 series should be ...17.1...