Messages

31

Web Proxy Filtering and Caching / Limit squid logging to avoid unnecessary messages

« on: October 25, 2019, 09:29:02 pm »

My squid log gets flooded with messages like this:
127.0.0.1 TCP_MISS/200 1690 GET cache_object://localhost/counters

Anyone know how to filter out those messages so I can focus on real access log from my clients?

thanks! Till

32

General Discussion / Feature - make DHCP leases searchable?

« on: October 25, 2019, 02:54:33 pm »

Is something on the roadmap to make the DHCP lease screen filterable/searchable? In a bigger list of leases, it can be quite painful to find an entry.

thanks, Till

33

19.1 Legacy Series / Re: PPPoE doesn't reconnect when parent interface goes down/up

« on: October 16, 2019, 12:02:29 pm »

Cool. Haven’t played with that yet. Thanks!

34

19.1 Legacy Series / Re: PPPoE doesn't reconnect when parent interface goes down/up

« on: October 16, 2019, 11:24:08 am »

I don’t want buttons :-). I need the FW to handle the reconnect smoothly.

35

Intrusion Detection and Prevention / Re: IPS in VLAN only environment

« on: July 26, 2019, 09:39:25 am »

Thanks a lot for your extensive feedback. I’ll give that a try and let you know if it worked.

36

Intrusion Detection and Prevention / IPS in VLAN only environment

« on: July 25, 2019, 03:18:11 pm »

I haven't used the IPS so far and currently working on making use of it.
From what I  gatherered so far, blocking does not work on VLANs, correct? So i would need to change my complete network architecture?
So far, on LAN side I have everything VLAN'ed and WAN runs PPPoE over VLAN7 (DT VDSL).

37

19.7 Legacy Series / Re: High memory utilization since upgrade to 19.7

« on: July 23, 2019, 11:15:43 am »

I thought that threat is all about CPU util and not memory. In my case the systems memory consumption has more than doubled.

38

19.7 Legacy Series / High memory utilization since upgrade to 19.7

« on: July 23, 2019, 08:39:30 am »

Since I upgraded to 19.7, my machine shows a very high memory utilization (85-95%). Machine has 8GB.
Not being a FreeBSD specialist, how can I check which component utilizes most memory?

thanks, Till

39

19.7 Legacy Series / Re: os-wireguard-devel -> os-wireguard

« on: July 22, 2019, 12:21:30 pm »

Worked! Thanks!

40

19.7 Legacy Series / os-wireguard-devel -> os-wireguard

« on: July 19, 2019, 05:56:23 pm »

After upgrading to 19.7, there now is a package os-wireguard.
Can I uninstall os-wireguard-devel and then install os-wireguard? Will it retain my settings?
I was kind of expecting that the upgrade would automatically replace the devel package with the released package.
thanks, Till

41

19.1 Legacy Series / PPPoE doesn't reconnect when parent interface goes down/up

« on: July 19, 2019, 05:36:41 pm »

I have the issue that my DSL modem currently hangs occasionally. Restarting the modem solves that. However the PPPoE client terminates then and doesn't reconnect when the modem is back up. I have to bounce the firewall as well which is annoying. Can that be solved somehow?
thanks!

42

19.7 Legacy Series / Re: PPPOE over Vigor 165 dies regularly, how to debug?

« on: June 30, 2019, 02:52:37 pm »

thanks for your input.
Why do you expect that to work better? I have always been tagging on the firewall because I use the underlying interface for routing web UI access to the modem's IP.

43

19.7 Legacy Series / PPPOE over Vigor 165 dies regularly, how to debug?

« on: June 30, 2019, 12:30:40 pm »

Hi *.*,

I need some advise how to debug a braking pppoe internet connection (Telekom BNG VDSL2).
Setup is as follows:
Vigor 165 as modem with pppoe passthrough.
OPNSense tags interface em1 with VLAN7.
PPPOE sit on top of em1_VLAN7.

I had the same setup running for a while with a Vigor 130 without problems.
Now with a Vigor 165, the connection breaks sometimes ones a day and sometimes after a few days.
I don't see any indicator for that. The pppoe log indicates connection attempts without success.
The Vigor modem indicates that DSL connection is up.
I don't see anything on the vigor that let's me troubleshoot any layer on top of that.
Does anyone have a similar setup? Any hints what to look for?

The procedure to get it back up and running currently is to restart both, the modem and the firewall.
thanks a lot for any hint, Till

44

19.1 Legacy Series / Re: IGMPv3 (SSM)

« on: June 17, 2019, 03:44:16 pm »

looks like you have pppoe0 configured as downstream as well as upstream. That's weired.
You would need to configure a LAN interface as downstream.

45

19.1 Legacy Series / Re: IGMPv3 (SSM)

« on: June 17, 2019, 03:05:30 pm »

config here:
/usr/local/etc/igmpproxy.conf
could you post the content please?

make sure it's not running:
killall igmpproxy
run interactively with verbose output:
/usr/local/sbin/igmpproxy -n -vv /usr/local/etc/igmpproxy.conf