Messages

106

24.7 Production Series / Re: System Snapshots in 24.7.3: How to Use?

« on: August 31, 2024, 03:09:19 am »

Search would have lead you to Patrick's awesome explainer here

https://forum.opnsense.org/index.php?topic=25540.msg122731#msg122731

107

24.7 Production Series / Re: Pings through WAN interface not working (broken in 24.7.1-.3)

« on: August 30, 2024, 10:44:24 am »

But the OP talks about IPv4, not IPv6?

And for the record: I do not see IPv4 pings unanswered from any 24.7.x - my monitoring would have alarmed me if it were otherwise. I would guess a bug like that would not have gone unnoticed and think this is a configuration problem.

+1

I run pinginfoview from Nirsoft on IPv4 towards all 4 GWs with policy routing, so I'll know instantly if any VPN or ISP GW is down.

I'm 110% confident we haven't had an issue with ICMP this year that was kernel related, and I've been on all the test kernels as well (apart from a couple that dealt with specific HW issues like the ixl or Sierra ones)


What can happen sometimes is that the IP you're pinging may stop responding, temporarily or permanently - so I'd try changing that first.

108

24.7 Production Series / Re: Port Forward to 127.0.0.1 works, but not to ::1 [+ workaround]

« on: August 25, 2024, 09:00:27 pm »

For AdguardHome users, the /128 is not needed - service won't start otherwise

Code: [Select]

dns:
  bind_hosts:
    - 127.0.0.1
    - fd08::1


109

Virtual private networks / Re: VPN in front of OPNsense

« on: August 25, 2024, 03:45:38 am »

You can do both VPNs from OPNsense, have the wifi router he wants to use on one link and your devices on the other.

Otherwise you can do those VPNs just fine from your machine and wifi router, it just not particularly secure since you're essentially bypassing all the protections the FW would provide.

Last thing to consider, the GL-inet is far less powerful than the Protectli box especially when doing crypto stuff, and would affect you directly Protectli is behind it.

If not doing both VPNs on Protectli best option is modem-fw-glinet.

110

24.7 Production Series / Re: Update to 24.7.2 failed

« on: August 25, 2024, 03:25:58 am »

Downloading the config before an upgrade is not hard to do.

Also, starting with 24.7.3 snapshots will be available on ZFS installs. You can practice on a VM to get acquainted with the process, both from GUI and CLI.

111

24.7 Production Series / Re: Update to 24.7.2 failed

« on: August 25, 2024, 02:23:03 am »

So what's the current status and patch level. What is the output if you try to upgrade from CLI ?

112

24.7 Production Series / Re: Update to 24.7.2 failed

« on: August 25, 2024, 01:19:24 am »

This command will show you where you are:

Code: [Select]

df -hT |grep root

113

24.7 Production Series / Re: intel PC 24.7.2 install stopped routing/switching last night

« on: August 25, 2024, 01:00:23 am »

If disabling is not an option, at least go to Reporting - Settings and resset RRD and NetFlow data

114

24.7 Production Series / Re: Update to 24.7.2 results in kernel panic

« on: August 24, 2024, 05:09:01 am »

>>>>> https://github.com/opnsense/src/commit/4f8959b9f4bb  <<<<<

Just as Nostradamus predicted in the ICMP thread: "Downstream issue, use a vanilla...ooops nevermind and carry on, nothing to see here"

Hindsight is always 20-20

/FreeBSD<=4

115

24.7 Production Series / Re: Update to 24.7.2 results in kernel panic

« on: August 22, 2024, 08:47:18 am »

Suricata ? ZenArmor ? Virtualized ?

116

Tutorials and FAQs / Re: How to enable automatic microcode updates

« on: August 22, 2024, 01:51:54 am »

It is best to make sure os-cpu-microcode-{intel,amd} is installed going forward on bare metal systems.

117

24.7 Production Series / Re: Traceroute / ICMP issue after 24.7.1 update

« on: August 15, 2024, 08:51:51 am »

GIven the security nature of it my vote is to ship. It is unlikely FreeBSD will make other changes if there aren't any other tests and the confirmed regressions have been addressed.

118

Hardware and Performance / Re: Wanted: DEC750 turn lights off -feature

« on: August 15, 2024, 03:11:16 am »

They're also useful diagnostic and troubleshooting tools. If the lights would have been optional they would have been axed a long time ago to reduce costs.

119

24.7 Production Series / Re: Aliases and Geoip not working.

« on: August 14, 2024, 11:13:08 pm »

Try this command, then rerun the flock one

Code: [Select]

pkg install -f py311-dnspython

120

24.7 Production Series / Re: Traceroute / ICMP issue after 24.7.1 update

« on: August 14, 2024, 11:11:16 pm »

No worries, that was just the pilot episode. Spacetime will be bent again by the power of his mind - right after the next unaffiliated payment is received.