Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Messages - keropiko

Pages: 1 2 3 [4]

19.1 Legacy Series / Re: CRASH in 19.1.8 when PPPOE refreshes

« on: June 05, 2019, 02:13:22 pm »

I run pppoe with opnsense. It happened that i wanted to change public ip, clicked the "reload" button on the wan interfaces overview page and all od sudden it crashed immediately. running 19.1.8.

19.1 Legacy Series / Re: 19.1.3 update question

« on: March 12, 2019, 05:06:52 pm »

hi, has anyone checked if this option changed after the upgrade to 19.1.3 or 19.1.4 ? Or should it be done manually?

Thanks.

19.1 Legacy Series / 19.1.3 update question

« on: March 08, 2019, 02:39:09 pm »

Hi to all,

i have just updated my system from 19.1.2 to 19.1.3.

Looking at the changelog, i read: "system: new tunables factory default to prevent ICMP redirects being sent (net.inet.icmp.drop_redirect=1)"

Now, after updating, i rebooted my system, but the default value remained "0".

I have also presed the "Default" red button, applied and rebooted, but again the default values remains "0".

I cannot verify many of the other changes, this is one of the few i just controlled, and i don't know, should i change it manually to "1" or only by fresh install the default value turns to "1".

Thank you.

18.7 Legacy Series / Re: filterlog floods

« on: March 08, 2019, 11:37:36 am »

Hi all,

i have the latest 19.1.2 installed on a vm in proxmox at home server without problems, everything works correctly.

The only issue, (if i can call it that way, maybe it is normal), is that my vm console continuously gets flooded after a while by messages regarding the pppoe like of my first post here.

PNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,31239,0,none,17,udp,72,94.63.102.62,62.94.0.2,51160,53,52
.......

Is it normal ? Is there something i can do for it?

Thank you in advance for any reply and, keep up the great work with this great project.

18.7 Legacy Series / Re: Unbound ipv6

« on: December 16, 2018, 08:47:18 pm »

Hi thanks for the reply,

i have done many tests. Firstly i have to manualy enter do-ip6 to yes. (maybe an option box like for other settings would be nice).
Then i found out that if the wan changes ip both ipv4 and ipv6 (pppoe), the clients have to restart their network in order to resolve with the new ipv6 address that tha LAN interface has.

18.7 Legacy Series / Re: web proxy multi-wan

« on: December 16, 2018, 08:44:18 pm »

proxy is local initiated means it only uses the default gateway or something else?

Is there possibility to make proxy go out though the loadbalance gateway? or insert an option to use a loadbalance gateway as default that that local services can go out through it?

18.7 Legacy Series / web proxy multi-wan

« on: December 16, 2018, 04:50:17 pm »

Hi all,

i have correctly set up the web proxy for my various internal networks.
What i see is that the web proxy does not use the loadbalance gateway for the port 80 rule but instead the "default" gateway only.
Is there any rule i can use to have load balance work, or should there be an option to use a Gateway group as "default gateway"?

Thank you.

18.7 Legacy Series / filterlog floods

« on: December 15, 2018, 09:10:24 pm »

Both during boot and also during use the console gets flooded with

Code: [Select]

80,0,none,17,udp,67,94.63.194.67,194.119.190.34,57541,53,47
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,31239,0,none,17,udp,72,94.63.194.67,62.94.0.2,51160,53,52
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,3701,0,none,17,udp,71,94.63.194.67,62.94.0.1,63921,53,51
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,15030,0,none,17,udp,71,94.63.194.67,62.94.0.1,20743,53,51
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,29928,0,none,17,udp,71,94.63.194.67,62.94.0.1,18820,53,51
Dec 15 22:01:08 OPNsense filterlog: 115,,,0,lo0,match,pass,out,4,0x0,,64,60921,0,none,17,udp,61,127.0.0.1,127.0.0.1,40576,53,41
Dec 15 22:01:08 OPNsense filterlog: 114,,,0,lo0,match,pass,in,4,0x0,,64,60921,0,none,17,udp,61,127.0.0.1,127.0.0.1,40576,53,41
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,23124,0,none,17,udp,72,92.65.194.67,62.94.0.1,61105,53,52
Dec 15 22:01:08 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,44958,0,none,17,udp,71,92.65.194.67,62.94.0.2,24747,53,51
Dec 15 22:01:09 OPNsense filterlog: 115,,,0,lo0,match,pass,out,4,0x0,,64,13534,0,none,17,udp,63,127.0.0.1,127.0.0.1,14730,53,43
Dec 15 22:01:09 OPNsense filterlog: 114,,,0,lo0,match,pass,in,4,0x0,,64,13534,0,none,17,udp,63,127.0.0.1,127.0.0.1,14730,53,43
Dec 15 22:01:09 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,24849,0,none,17,udp,74,92.65.194.67,78.42.87.23,14300,53,54
Dec 15 22:01:09 OPNsense filterlog: 115,,,0,lo0,match,pass,out,4,0x0,,64,48363,0,none,17,udp,63,127.0.0.1,127.0.0.1,63228,53,43
Dec 15 22:01:09 OPNsense filterlog: 114,,,0,lo0,match,pass,in,4,0x0,,64,48363,0,none,17,udp,63,127.0.0.1,127.0.0.1,63228,53,43
Dec 15 22:01:09 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,38334,0,none,17,udp,74,92.65.194.67,138.201.32.212,26564,53,54
Dec 15 22:01:09 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,52729,0,none,17,udp,74,92.65.194.67,78.46.87.23,58553,53,54
Dec 15 22:01:09 OPNsense filterlog: 115,,,0,lo0,match,pass,out,4,0x0,,64,52859,0,none,17,udp,63,127.0.0.1,127.0.0.1,55479,53,43
Dec 15 22:01:09 OPNsense filterlog: 114,,,0,lo0,match,pass,in,4,0x0,,64,52859,0,none,17,udp,63,127.0.0.1,127.0.0.1,55479,53,43
Dec 15 22:01:09 OPNsense filterlog: 120,,,0,pppoe0,match,pass,out,4,0x0,,64,5638,0,none,17,udp,74,94.61.194.67,78.42.87.23,56368,53,54
Dec 15 22:01:09 OPNsense filterlog: 115,,,0,lo0,match,pass,out,4,0x0,,64,18205,0,none,17,udp,63,127.0.0.1,127.0.0.1,56322,53,43

both for pppoe and ipv6 sometimes the system hangs also.

18.7 Legacy Series / nat rules problem

« on: December 15, 2018, 02:14:02 pm »

Hi,

i have many firewall rules with FQDN as aliases.
The problem i have noticed, is that many times i have rebooted the system,
the configuring dynamic dns clients take took long after that the ntp service gets deffered and although the system get ip from PPPOE the nat rules are not loading and internet not working correctly.
Could this be a DNS issue? i am using unbound as DNS and have not set up DNS at the general settings per interface.
Is it possible to deffer the dynamic dns service after unbound service and after pppoe gets ip so rules gets loaded?

18.7 Legacy Series / Unbound ipv6

« on: December 15, 2018, 11:38:15 am »

Hi,

i have pppoe with dhcp6 enabled, but having problem with dns6 resolution that times out for the clients.
after hours of searching i found that i had to add do-ip6:yes on config.
Is there possibility to add this option and qname-minimisation and minimal-responses as options with box at the unbound general settings?

thanks.

*EDIT*
Maybe the do-ip6 option was not the problem only, i think it is related to this https://forum.opnsense.org/index.php?topic=7425.0

18.7 Legacy Series / Email Notifications

« on: December 10, 2018, 12:06:40 pm »

Hi all,

at my new OPNsense setup, since i am using multiwan, i have gateway monitoring enabled.
I have also email notifications enabled too.

The problem is, that when for example a gateway is down, i receive hundrends of emails that the gateway is down, something like a mail per second, until my smtp reatches daily limit.

Since i have been using this feature on my old pfsense installation, i used to receive 1 email when the gateway went down and 1 when it was back.

Is there any way i can configure to have the notifications this way?

I have tried increasing the probe interval but the issue persists.

For my multiwan setup test, when i turned gateway2 down i received something like 900 emails

Thank you.

18.7 Legacy Series / Re: PHP Warning errors

« on: December 09, 2018, 12:05:53 pm »

Hi Fabian, thanks fo the reply.

Code: [Select]

vtnet0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 9000
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether 5e:ce:b4:ee:95:99
        hwaddr 5e:ce:b4:ee:95:99
        inet 172.16.54.1 netmask 0xffffff00 broadcast 172.16.54.255
        inet6 xxxx:xxx:xxx:xxxx:xxxx:xxxx:xxxx:xxxx prefixlen 64
        inet6 fe80::1:1%vtnet0 prefixlen 64 scopeid 0x1
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet1: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 9000
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether 4e:9b:b3:fe:d4:72
        hwaddr 4e:9b:b3:fe:d4:72
        inet 192.168.100.1 netmask 0xffffff00 broadcast 192.168.100.255
        inet6 fe80::4c9b:b3ff:fefe:d472%vtnet1 prefixlen 64 scopeid 0x2
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet2: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 9000
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether a6:32:76:a7:2d:fb
        hwaddr a6:32:76:a7:2d:fb
        inet 10.10.90.1 netmask 0xffffff00 broadcast 10.10.90.255
        inet6 fe80::a432:76ff:fea7:2dfb%vtnet2 prefixlen 64 scopeid 0x3
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet3: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 9000
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether e6:f5:64:b8:56:46
        hwaddr e6:f5:64:b8:56:46
        inet 10.99.99.1 netmask 0xffffff00 broadcast 10.99.99.255
        inet6 fe80::e4f5:64ff:feb8:5646%vtnet3 prefixlen 64 scopeid 0x4
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet4: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether ae:02:2a:59:25:1b
        hwaddr ae:02:2a:59:25:1b
        inet6 fe80::ac02:2aff:fe59:251b%vtnet4 prefixlen 64 scopeid 0x5
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet5: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether be:55:dd:66:56:9d
        hwaddr be:55:dd:66:56:9d
        inet 192.168.1.251 netmask 0xffffff00 broadcast 192.168.1.255
        inet6 fe80::bc55:ddff:fe66:569d%vtnet5 prefixlen 64 scopeid 0x6
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
vtnet6: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        options=6c00b8<VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,VLAN_HWTSO,LINKSTATE,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=7d07bb<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,JUMBO_MTU,VLAN_HWCSUM,TSO4,TSO6,LRO,VLAN_HWFILTER,VLAN_HWTSO,LINKSTATE,NETMAP,RXCSUM_IPV6,TXCSUM_IPV6>
        ether ae:90:71:3e:93:d8
        hwaddr ae:90:71:3e:93:d8
        inet 192.168.2.254 netmask 0xffffff00 broadcast 192.168.2.255
        inet6 fe80::ac90:71ff:fe3e:93d8%vtnet6 prefixlen 64 scopeid 0x7
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        media: Ethernet 10Gbase-T <full-duplex>
        status: active
        supported media:
                media 10Gbase-T mediaopt full-duplex
enc0: flags=0<> metric 0 mtu 1536
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        groups: enc
lo0: flags=8049<UP,LOOPBACK,RUNNING,MULTICAST> metric 0 mtu 16384
        options=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        capabilities=600003<RXCSUM,TXCSUM,RXCSUM_IPV6,TXCSUM_IPV6>
        inet6 ::1 prefixlen 128
        inet6 fe80::1%lo0 prefixlen 64 scopeid 0x9
        inet 127.0.0.1 netmask 0xff000000
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        groups: lo
pflog0: flags=100<PROMISC> metric 0 mtu 33160
        groups: pflog
pfsync0: flags=0<> metric 0 mtu 1500
        groups: pfsync
        syncpeer: 0.0.0.0 maxupd: 128 defer: off
ovpnc1: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> metric 0 mtu 1500
        options=80000<LINKSTATE>
        capabilities=80000<LINKSTATE>
        inet6 fe80::2cc4:7052:bd58:8f00%ovpnc1 prefixlen 64 scopeid 0xc
        inet 10.8.1.2 --> 10.8.1.1  netmask 0xffffff00
        nd6 options=21<PERFORMNUD,AUTO_LINKLOCAL>
        groups: tun openvpn
        Opened by PID 76203
pppoe0: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> metric 0 mtu 1492
        inet6 xxxx::xxxx:xxxx:xxxx:xxxx%pppoe0 prefixlen 64 scopeid 0xd
        inet6 fe80::4c9b:b3ff:fefe:d472%pppoe0 prefixlen 64 scopeid 0xd
        inet xx.xx.xx.xx --> xx.xxx.xx.xxx  netmask 0xffffffff
        nd6 options=23<PERFORMNUD,ACCEPT_RTADV,AUTO_LINKLOCAL>

18.7 Legacy Series / PHP Warning errors

« on: December 09, 2018, 10:56:26 am »

Hi to all,

i recently decided to pass over to OPNsense from pfSense and see if i can replace it with.
I created my OPNsense VM with Virtio interfaces on proxmox, installed and set up everything.
After the setup, everything run smooth so i run the firmware update to the latest pachages.
The problem is that after the update, after every reboot i get the following error, which was not present at the initial installation:

[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 359
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 359
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 360
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 360
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 361
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 361
[09-Dec-2018 11:44:56 Europe/Athens] PHP Warning: in_array() expects parameter 2 to be array, null given in /usr/local/etc/inc/interfaces.lib.inc on line 362

I think it must be related to the 7 virtio adapters i have?

All hardware offload,TSO ecc. are disabled as per default.

Thank you.

Pages: 1 2 3 [4]