Messages

46

17.7 Legacy Series / Re: Can't find packages

« on: January 22, 2018, 09:11:27 pm »

Unfortunately, no joy:

Code: [Select]

% cd /usr/ports/sysutils/tree
% sudo make install
/!\ ERROR: /!\

Ports Collection support for your FreeBSD version has ended, and no ports are
guaranteed to build on this system. Please upgrade to a supported release.

No support will be provided if you silence this message by defining
ALLOW_UNSUPPORTED_SYSTEM.

*** Error code 1

Stop.
make: stopped in /usr/ports/sysutils/tree

 

47

17.7 Legacy Series / Re: Firmware update fails

« on: January 22, 2018, 08:58:40 pm »

Versions:

OPNsense 17.7.12-amd64
FreeBSD 11.0-RELEASE-p17
OpenSSL 1.0.2n 7 Dec 2017

Code: [Select]

% sudo opnsense-update -M
http://pkg.opnsense.org/FreeBSD:11:amd64/17.7


Code: [Select]

% sudo pkg update -f
Updating OPNsense repository catalogue...
Fetching meta.txz: 100%    1 KiB   1.5kB/s    00:01
Fetching packagesite.txz: 100%  126 KiB 128.8kB/s    00:01
Processing entries: 100%
OPNsense repository update completed. 462 packages processed.
All repositories are up to date

I retrieved some logs (censored) from my syslog-ng server from when I click the [Update] button on the GUI (maybe they can help):

Code: [Select]

2018-01-22T20:34:43+01:00 user[notice] configd.py:: [4d66fc5a-edf4-4655-8479-bb82998b24ee] Fetching changelog from remote
2018-01-22T20:34:43+01:00 daemon[info] dnsmasq:: query[A] pkg.opnsense.org from 127.0.0.1
2018-01-22T20:34:43+01:00 daemon[info] dnsmasq:: cached pkg.opnsense.org is 212.32.245.132
2018-01-22T20:34:43+01:00 daemon[info] dnsmasq:: query[AAAA] pkg.opnsense.org from 127.0.0.1
2018-01-22T20:34:43+01:00 daemon[info] dnsmasq:: cached pkg.opnsense.org is 2001:1af8:4900:a01d:1200::2
2018-01-22T20:34:48+01:00 user[err] configd.py:: [4d66fc5a-edf4-4655-8479-bb82998b24ee] returned exit status 1
2018-01-22T20:34:48+01:00 user[notice] configd.py:: [0b514ede-b27d-48ec-9896-53e15a5863be] retrieve firmware update status
:
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: query[SRV] _http._tcp.pkg.opnsense.org from 127.0.0.1
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: forwarded _http._tcp.pkg.opnsense.org to 9.9.9.9
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: forwarded _http._tcp.pkg.opnsense.org to 2620:fe::fe
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: query[A] pkg.opnsense.org from 127.0.0.1
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: forwarded pkg.opnsense.org to 9.9.9.9
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: forwarded pkg.opnsense.org to 2620:fe::fe
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: reply pkg.opnsense.org is 212.32.245.132
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: query[AAAA] pkg.opnsense.org from 127.0.0.1
2018-01-22T20:35:30+01:00 daemon[info] dnsmasq:: cached pkg.opnsense.org is 2001:1af8:4900:a01d:1200::2
2018-01-22T20:35:34+01:00 daemon[info] dhcp6c:: Sending Solicit
:
2018-01-22T20:36:16+01:00 local4[err] configd:: Timeout (120) executing : firmware remote
2018-01-22T20:36:16+01:00 local4[err] configd:: Timeout (120) executing : firmware remote
2018-01-22T20:36:16+01:00 user[notice] configd.py:: [384828ac-6efa-4a6d-9996-43eedd912fab] view local packages
2018-01-22T20:36:16+01:00 user[notice] configd.py:: [9ef9331a-c5bf-4293-a34e-a090ab7c54f2] Retrieving changelog index
:
2018-01-22T20:36:45+01:00 user[err] configd.py:: unable to sendback response [GeoIP|||1.6.11|||Find the country that any IP address or hostname originates from|||795KiB|||0|||GPLv2 acme-client|||0.1.16_2|||Native C client for Let's Encrypt, designed for security|||1.92MiB|||0|||ISCL acme.sh|||2.7.5_2|||ACME protocol client written in shell|||349KiB|||0|||GPLv3+ apcupsd|||3.14.14_2|||Set of programs for controlling APC UPS|||1.09MiB|||0|||GPLv2 apinger|||0.7|||IP device monitoring tool|||199KiB|||0|||GPLv2 arc|||5.21p|||Create & extract files from DOS .ARC files|||92.8KiB|||0|||GPLv2 arj|||3.10.22_6|||Open source implementation of the ARJ archiver|||620KiB|||0|||GPLv2 arp-scan|||1.9|||ARP scanning and fingerprinting tool|||889KiB|||0|||GPLv3 asterisk13|||13.19.0|||Open Source PBX and telephony toolkit|||36.6MiB|||0|||GPLv2 autoconf|||2.69_1|||Automatically configure source code on many Un*x platforms|||2.98MiB|||0|||GPLv3+, AUTOCONF_CONFIGURE_SCRIPT_EXCEPTION, GPLv2+, GFDL autoconf-wrapper|||20131203|||Wrapper script for GNU


Could be an IPv6 resolve failure.

This remark triggered me because I also had an issue with `lftp` not working on some of my Debian-based servers. That was caused by a setting in `lftp` that was resolved by forcing `lftp` to first try connecting via IPv4 before IPv6.

So, I unchecked Firewall > Settings > Advanced : option "Allow IPv6"
Now, I still get in the GUI the message Firmware status check was aborted internally. Please try again..
But, after a couple of seconds the list with plugins is displayed and os-dyndns now reports as installed.

So, the issue is worked-around. But I'd really also like to re-enable IPv6 at some point.

48

17.7 Legacy Series / Firmware update fails

« on: January 22, 2018, 06:59:49 pm »

Trying to update via System > Firmware > Updates returns this error:

Firmware status check was aborted internally. Please try again.

System > Firmware > Plugins only shows one line:

os-dyndns (orphaned)   1.5   133KiB   Dynamic DNS Support

System > Firmware > Packages looks like it is okay.

Help is appreciated. Please let me know what additional info is needed.

49

17.7 Legacy Series / Re: Restart dnsmasq from the CLI

« on: January 22, 2018, 06:45:52 pm »

Although we make a point to use the RC system like it is supposed to be used for newer services, older things like Dnsmasq and Unbound are integrated radically different.

Long story short, to restart the DNS subsystem run:

# pluginctl dns

Please don't override rc.conf for anything that has a GUI.


Cheers,
Franco

I asked because something like that was the case here. Thanks!

50

17.7 Legacy Series / Re: Can't find packages

« on: January 22, 2018, 06:43:30 pm »

Great! thanks.

Wishing '#' would complete to 'sudo'. Would make copy & paste even easier. ;-)

51

17.7 Legacy Series / Re: Can't find packages

« on: January 21, 2018, 09:39:36 pm »

you can request packages via GitHub (https://github.com/opnsense/tools/issues/new)

Guessing that is the long way round. 

or build them from the ports tree (https://github.com/opnsense/ports)

I think that would probably be the way to go.
Just to make sure I'm clear on the workflow:
1. pkg install git
2. cd /usr
3. git clone https://github.com/opnsense/ports.git
Right? Did I forget something?π

52

17.7 Legacy Series / Can't find packages

« on: January 21, 2018, 06:29:28 pm »

I want to install

Code: [Select]

tree and

Code: [Select]

python3 (3.5 or 3.6).

Neither seems to be available in the OPNsense repository.

I'm also wanting to install other packages.
What are my options?

53

17.7 Legacy Series / [CLOSED] Restart dnsmasq from the CLI

« on: January 21, 2018, 06:04:51 pm »

How do I restart dnsmasq from the CLI?

I've tried:

Code: [Select]

% service dnsmasq restart
Cannot 'restart' dnsmasq. Set dnsmasq_enable to YES in /etc/rc.conf or use 'onerestart' instead of 'restart'.
Given the fact that it is already running I presume a different mechanism is active for starting the daemon, so I dare not follow this instruction.

Code: [Select]

% configctl dnsmasq restart
Action not found
Was worth a try. But no joy.

54

17.7 Legacy Series / Re: [CLOSED] Adding conf-dir option to Dnsmasq setting

« on: January 21, 2018, 09:56:05 am »

Solved it. One of the files in that directory contained a defective option

 

55

17.7 Legacy Series / [CLOSED] Adding conf-dir option to Dnsmasq setting

« on: January 21, 2018, 09:46:28 am »

I want to add an option to the Service > Dnsmasq DNS > Settings.
In the Advanced editbox I entered:

Code: [Select]

conf-dir=/usr/local/etc/dnsmasq.d/,*.conf
I get an error message:

Code: [Select]

The following input errors were detected:
Invalid custom options
This is a valid dnsmasq option, so what am I doing wrong?

56

17.7 Legacy Series / Re: What's installed?

« on: January 20, 2018, 11:01:37 pm »

@Fabian: thanks

57

17.7 Legacy Series / Re: What's installed?

« on: January 20, 2018, 08:49:07 am »

I haven't installed anything yet. I'd like to read the docs first. I'm aware that that is a bit odd 

58

17.7 Legacy Series / [CLOSED] What's installed?

« on: January 20, 2018, 08:11:42 am »

I'm new to OPNsense. As I'll be doing some fine-tuning from the CLI, before I get started, I'd like to read up on the various packages. Strangely, I have not been able to find a list of installed software. Google just gives me old articles and the `docs.opnsense.org` are only discussing the front-end.
Could anyone please point me to a relevant, up-to-date source?
To get up and running as fast as possible I'm particularly interested in:

1.  which local DNS server is installed by default?
2.  which DHCP server is installed by default?

Thanks for your support.