Messages

961

19.1 Legacy Series / Re: Installation of 19.1 on Pc Engine APU4C4 fails on mSata but works on SD card

« on: February 26, 2019, 03:48:19 am »

Are you using the correct slot on the board ? It must be the one labeled mSata - it's written on the board.

Also, I'd highly recommend you upgrade the BIOS on the board, check out the intructions I posted the the APU 1-5 thread in the Hardware subforum.

962

General Discussion / Re: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

« on: February 25, 2019, 10:24:20 am »

Looks like an SSL issue for sure, but it appears to be anything but OPNsense related, for the following reasons:

1. Default OPNsense installation does zero proxying - and a proxy issue might be at play there.

2. You only show a random dyndns.org failed connection - which may very well be SSL miscofigured on the target server.

3. While we don't see any other examples like Google.com in any browser, the mere fact that you're observing the issue with and without the default and desired configuration is a clear indication the problem lies somewhere else, and expecting different results while repeating the same installation steps is a definition for something else :-)

4. Out ouf curiosity, do you happen to have a lousy AV that MITMs your SSL traffic without you having a clue about the default behaviour ?

963

19.1 Legacy Series / Re: Lan port for VLAN trunk

« on: February 25, 2019, 08:06:45 am »

I had config out a roting mode for VLAN
https://docs.opnsense.org/manual/how-tos/transparent_bridge.html
when create a bridge, select VLAN and Wan(not Lan and Wan),

But an interface just can create a bridge,
so if you have a lot of VLAN, then...
your OPN host must have enough interface to match your vlan number.

I don't know if anything I lost and need to watch out?

You've lost the firewall and barely made up a switch - if that...

Blindly following tutorials when you don't actually understand networking and/or security implications of your decisions is a recipe for disaster.

964

19.1 Legacy Series / Re: newbie question FW rule between two LANs

« on: February 25, 2019, 08:00:49 am »

Hi Vikozo,

Support questions usually go to the matching version of OPNsense subforum otherwise in the General Discussions one. Thanks for taking that into consideration going forward.

965

19.1 Legacy Series / Re: WAN Connection Keeps Cycling (Intel NIC and SB6141)

« on: February 25, 2019, 06:17:51 am »

Thanks for the confirmation.

966

Hardware and Performance / Re: Zotac nano ci323 LAN Problem

« on: February 25, 2019, 04:31:25 am »

And if you invert the ports on the Zotac do you see the same issue inverted or it doesn't change ?

967

Hardware and Performance / Re: coreboot for Protectli FW2B and FW4B

« on: February 25, 2019, 03:08:06 am »

Thanks for the update pietrushnic, knowing you're company is supporting the firmware for those appliances will definitely be a game changer when considering or recommending new hardware.

968

Hardware and Performance / Re: Zotac nano ci323 LAN Problem

« on: February 25, 2019, 03:01:30 am »

It would appear the port connecting to the LAN is either incapable or locked down to 100.

Try changing the cable as well, see if that yields different results.

969

General Discussion / Re: ERR_SSL_VERSION_OR_CIPHER_MISMATCH

« on: February 25, 2019, 01:20:38 am »

Can you replicate the issue in multiple browsers ? If so, which ones ?

Does it happen on the default config after going through the setup process or only after you import the old configuration ?

Also, please post screenshots of the SSL error, the more details the better.

970

19.1 Legacy Series / Re: Problem with kernel modules (version mismatch)

« on: February 25, 2019, 12:57:48 am »

Unsure what kind of a reset was that but it would appear you're on the 18.1 kernel ?

I think the best thing forward would be issuing this command followed by a reboot:

Code: [Select]

# opnsense-update -fp -n "19.1\/latest"

Alternatively, a fresh install importing the current configuration in the process might be the cleaner option. Make sure you have saved the configuration beforehand, should anything unexpected happen.

971

19.1 Legacy Series / Re: Upgrade fail

« on: February 24, 2019, 08:55:13 am »

Argh, I thought you need to specify the current major version number and patch level. That post came out before 19.1.1 if memory serves... Sorry about that.

972

19.1 Legacy Series / Re: WAN Connection Keeps Cycling (Intel NIC and SB6141)

« on: February 24, 2019, 07:21:01 am »

Assuming you have 19.1, did you install any updates yet while connected to the working NIC ?

973

19.1 Legacy Series / Re: Upgrade fail

« on: February 24, 2019, 05:15:10 am »

Setting vm.pmap.pti tunable to 0 not helping me. After unlocking 19.1 and hit upgrade router boots normally, but version stays on 18.7.10_4.
My instance runs as VM on Proxmox 5.3-7. All 4 cores of i5-4570 are fully exposed to VM in 'host' mode.
Ask if some logs are needes.

This should have been a new thread.

Try the following:

Code: [Select]

For OpenSSL:

# opnsense-update -fp -n "19.1.1\/latest"

Or LibreSSL:

# opnsense-update -fp -n "19.1.1\/libressl"


974

19.1 Legacy Series / Re: 19.1 with eMMC

« on: February 24, 2019, 05:06:47 am »

HBSD and compatibility are two different issues. Also, the lack of details makes it quite hard to infer anything about your hardware.

Can you confirm having the same issue on a fresh install of FreeBSD ?

975

Hardware and Performance / Re: PCENGINES APU[1-5] Bios

« on: February 23, 2019, 06:27:39 am »

Thank you 0xFelix, I didn't find that bit prior to posting. Everything worked without issues.