Messages

61

22.1 Legacy Series / Re: errors and strange behavior opnsense 22.1.1_1 -> Suricata fix: uncheck IPS mode

« on: February 18, 2022, 05:29:27 pm »

Suricata works fine for me but sensei does not, suricata runs on my WAN only so no vlans which explains why it works. Sensei DOES run on vlans (LAN network, so it runs on all vlans I have under LAN). So maybe the issue is with vlan handling in the new update...hmmm

62

22.1 Legacy Series / Re: os-ddclient

« on: February 17, 2022, 10:39:44 pm »

@ jclendineng I think that's an issue with ddclient specifically. it writes "ERROR" but it's just a string, not a priority.

@mueller it's not trying to update, did you apply config? everything in /usr/local/etc/ddclient.conf ?

Its not, Error messages for benign items happen with a lot of the modules, looks to be a logging issue. lightpd and suricata throw the same Error logs for normal INFO level stuff at times. So its not limited to os-ddclient its something introduces in the update.

63

22.1 Legacy Series / Re: os-ddclient

« on: February 17, 2022, 10:36:09 pm »

I tried it and works well it seems like.  Still missing Cloudflare API access so had to move back to the old one. Its progress though! We have 6 months so no need to rush it.

64

22.1 Legacy Series / Re: errors and strange behavior opnsense 22.1.1_1 -> Suricata?

« on: February 17, 2022, 10:34:09 pm »

I have a post in the sensei section but similar, config.py is leading me to believe an issue with the way the system uses python.

65

Zenarmor (Sensei) / A couple errors upgrading to 22.1

« on: February 17, 2022, 07:57:22 pm »

Hello, I have a few issues with sensei on the new 22.1 update.  The OPNSense was clean-installed, sensei was clean installed.

I see this:
[0d569281-3cff-4e2f-96be-cb2fa640bcbc] Script action stderr returned "b'umount: /dev/md43: statfs: No such file or directory\numount: /dev/md43: unknown file system\nmount: /usr/local/sensei/output: No such file or directory'"

And this is spammed over and over:
[69aa4538-c722-4c14-bf3e-7e14d5d3718c] Script action failed with Command '/usr/local/opnsense/scripts/OPNsense/Sensei/periodicals.py ' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 478, in execute subprocess.check_call(script_command, env=self.config_environment, shell=True, File "/usr/local/lib/python3.8/subprocess.py", line 364, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command '/usr/local/opnsense/scripts/OPNsense/Sensei/periodicals.py ' returned non-zero exit status 1.

This as well:
[f119326e-6669-458a-bc4c-c3c5b8f9c4ba] Script action failed with Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 1. at Traceback (most recent call last): File "/usr/local/opnsense/service/modules/processhandler.py", line 478, in execute subprocess.check_call(script_command, env=self.config_environment, shell=True, File "/usr/local/lib/python3.8/subprocess.py", line 364, in check_call raise CalledProcessError(retcode, cmd) subprocess.CalledProcessError: Command 'pkg rquery "%n|||%v|||%c|||%sh|||0|||0|||%L|||%R|||%o" ' returned non-zero exit status 1.

66

22.1 Legacy Series / Re: errors and strange behavior opnsense 22.1.1_1

« on: February 17, 2022, 07:34:59 pm »

I too found this after an upgrade from 22.1 to 22.1.1-1... After the initial reboot nothing outside of my LAN would load (as if the firewall or dns wasn't working correctly)... I reloaded pf service and got partial working behavior, but 'some' things were extremely slow. An additional reboot cleared everything up.

The .1 update is what did it for me I think...

I had to re-install the whole OS, I would highly recommend that.  Give you an opportunity to use zfs.

After a wipe and re-install, everything is back to normal and functioning besides sensei which was broken by the python upgrade. You have to do a wipe and re-install to fix your issues unfortunately, the .1 completely broke my network and I don't really have anything fancy. Make a config backup, reinstall, install your plugins again, reboot and restore the config.  It goes very fast, the config backup is a great tool. This is why I only upgrade at my home network

67

22.1 Legacy Series / Re: os-ddclient

« on: February 17, 2022, 03:02:56 pm »

@mueller: can you change your log file severity filter to "notice"... that should give the relevant messages.


Cheers,
Franco

It seems that NOTICE is logged as ERROR? Im getting successful dynamic dns updates but they are logged as ERROR.  This is the same actually across all the logs, ERROR is logging incorrectly, some are errors some are not...

68

22.1 Legacy Series / Re: Gateway Monitoring

« on: February 17, 2022, 02:59:44 pm »

Same issue here, ended up disabling monitoring till I can roll back to 21.7...

69

22.1 Legacy Series / Re: errors and strange behavior opnsense 22.1.1_1

« on: February 17, 2022, 02:56:10 pm »

Same, logs are ALL screwed up, info is logged as ERROR, half my clients no longer work but hard to tell what's up because...logging.  Im going to back this one out probably as this was one of the worst updates in recent history.  Assuming the move to bsd13 was the issue here, as always should have waited a few months for the point releases to fix everything that broke

70

22.1 Legacy Series / Re: os-ddclient

« on: January 31, 2022, 03:03:01 pm »

I'm talking OS-DynDNS, I won't be playing with ddclient.

Can't OS-DynDNS be migrated to @mimugmail repository? So we can simply reinstall it from there and that's it.

Also, what was wrong with the old one? If the new one is unmaintained, doesn't work for a lot of services, and is harder to use, I guess I don't understand why we are switching...doesnt make a lot of sense.

71

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 04:15:53 pm »

Marjohn56 and franco made a new home for ddclient. so as I understand it, the revised version of the ddclient supports much more dns services.

OH that makes sense...I tried looking at the codebase and didn't appear to support...thank you for the clarification! If I have to delete the old one prior to the new I wanted to be sure I would have minimal potential downtime.

Edit: Most certainly does NOT support Cloudflare , so readers don't get confused I have attached a screenshot of what IS supported, so by al means do NOT do what I did and try to upgrade unless you are on those supported services.

72

22.1 Legacy Series / Re: os-ddclient

« on: January 28, 2022, 10:57:10 pm »

The old one works for me so ill keep using it...especially if Cloudflare isn't supported, one if the largest dns providers in the world...not a good start, deprecating a good plugin for one that lacks *important* providers

Old one os still going to be here for at least 6 months, and probably longer if someone hosts the plugin.

73

22.1 Legacy Series / Re: 22.1rc1 crashes when the Statistics checkbox in an host alias is enabled

« on: January 25, 2022, 05:36:44 pm »

This isn't new to the RC, aliases with stats enabled crashes the firewall on the latest stable as well, so its nothing in the beta.  I just don't ever check statistics, as it crashes...

74

22.1 Legacy Series / Re: ipsec: remove hashes and algorithms no longer supported by FreeBSD 13

« on: January 25, 2022, 05:35:29 pm »

Honestly, you should not be using those for ANYTHING...they have been insecure for literally years...

75

Zenarmor (Sensei) / Re: Advanced Security coming soon?

« on: January 19, 2022, 04:50:11 pm »

If you have a website or externally facing service, you need to come more of a security conscious person, not an "expert" but you do need to learn.  If you don't have externally facing services, you don't need anything except the base firewall, everything else is just worthless.  Its already blocking all incoming by default so no reason at all to do more.  I have external services running, so I have to do more than the average user.