Messages

121

22.1 Legacy Series / Re: os-ddclient

« on: July 13, 2022, 08:12:14 pm »

I thought I'd give ddclient a try after upgrading to 22.7-rc1, as I couldn't get it to work with 22.1
The log file says it can't determine my ip address, however it's shown in the web interface.
Any ideas as to what is wrong?

122

Zenarmor (Sensei) / errors after update to 22.7-rc1

« on: July 13, 2022, 07:46:40 pm »

I got these errors after upgrade to 22.7-rc1:

Code: [Select]

[13-Jul-2022 19:42:33 Europe/Amsterdam] PHP Deprecated:  Required parameter $licenseExclude follows optional parameter $option in /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/CLI.php on line 960
[13-Jul-2022 19:42:33 Europe/Amsterdam] PHP Deprecated:  Required parameter $sensei follows optional parameter $option in /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/CLI.php on line 960
[13-Jul-2022 19:42:33 Europe/Amsterdam] PHP Deprecated:  Required parameter $sensei follows optional parameter $option in /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/CLI.php on line 994
and these:

Code: [Select]

Updating SunnyValley repository catalogue...
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/meta.txz: Not Found
repository SunnyValley has no meta file, using default settings
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/packagesite.pkg: Not Found
pkg: https://updates.sunnyvalley.io/opnsense/FreeBSD:13:amd64/22.7/OpenSSL/latest/packagesite.txz: Not Found
Unable to update repository SunnyValley
Error updating repositories!


123

22.1 Legacy Series / Re: Ad blocking with Unbound - what am I doing wrong?

« on: July 09, 2022, 07:30:17 pm »

Your devices may be using secure DNS (DNS over TLS (port 853) or DNS over HTTPS (port 443)), so filtering port 53 may not be of much use nowadays. I would suggest disabling DNS based filtering altogether and look into Sensei/Zenarmor instead. At least that's what works for me.

124

Zenarmor (Sensei) / Re: 22.1.10 Sensei Phalcon error?

« on: July 08, 2022, 10:21:14 am »

It's working after the update, thanks!

125

Zenarmor (Sensei) / 22.1.10 Sensei Phalcon error?

« on: July 07, 2022, 03:56:42 pm »

I get this error when rebooting after upgrade to 22.1.10:

Code: [Select]

[07-Jul-2022 15:52:00 Europe/Amsterdam] PHP Fatal error:  Uncaught Error: Class 'Phalcon\Config' not found in /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/Sensei.php:113
Stack trace:
#0 /usr/local/opnsense/mvc/app/models/OPNsense/Base/BaseModel.php(364): OPNsense\Sensei\Sensei->init()
#1 /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/Aliases.php(73): OPNsense\Base\BaseModel->__construct()
#2 /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/Aliases.php(224): Aliases->__construct()
#3 {main}
  thrown in /usr/local/opnsense/mvc/app/models/OPNsense/Sensei/Sensei.php on line 113

The ZenArmor menu is also unaccessible.

126

22.1 Legacy Series / Re: Traffic shaper broken (even just setting a pipe gets ignored)

« on: June 18, 2022, 12:31:50 pm »

You really need to provide additional info on your network layout, and screenshots of your current setup (from all traffic shaper subpages), otherwise it will be impossible to assist you.
Just configuring a pipe is not enough, you need to set rules which traffic gets directed to which pipe; maybe you forgot that?

127

22.1 Legacy Series / Re: QOS with IPv4/IPv6 setup

« on: June 11, 2022, 05:59:14 pm »

In the ‘advanced’ section of the rules menu, you can make rules that select traffic based on direction (in/out), that way it matches both IP4 and IP6 traffic. Perhaps this can help you?

128

22.1 Legacy Series / Re: Unable to pass traffic thru new interface

« on: May 14, 2022, 07:28:40 am »

With these things I find it beneficial to start with a floating ‘allow all’ rule to that applies to all interfaces. If it works then, you already know it’s a fw rule issue. Then work from there.

129

22.1 Legacy Series / Re: ipv6 not working to internal vlans

« on: May 07, 2022, 10:54:33 am »

Do you have tested with the computer/laptop connected directly to the router?
I'm asking because I have recently struggled with something similar, but it turned out to be network switches that were the culprit. Some slightly older Netgear switches - and possibly other brands - can do IGMP snooping and other forms of multicast filtering, but the implementation is unfortunately not compatible with IPv6.

130

22.1 Legacy Series / Re: Clients don't get an IPv6 address

« on: April 23, 2022, 03:02:41 pm »

I am having similar issues with IPV6 intermittently not working as well. I was fiddling with some settings, and suddenly things started working again.
Not sure, but IIRC the last change was disabling 'Prevent interface removal' on all interfaces and reboot. Can anyone try if this makes a difference?

131

22.1 Legacy Series / Re: Difference between Interface > Settings and Tunables?

« on: April 21, 2022, 08:40:10 pm »

The settings you mention are only half of the story here. First, note which options exactly are you trying to set. Then, to check if they are actually in effect, do 'ifconfig -a', observe the interface options and note if there are any discrepancies with the options you have set.
If you see any differences, try to figure out where they come from. I have noticed for example that Sensei/Zenarmor also manipulates the interface options, but there may be more programs doing that.

132

22.1 Legacy Series / Re: Running native ipv6 but I get no ipv6 default route

« on: April 21, 2022, 09:40:46 am »

I am at a bit of a loss to figure out why this switch (a Netgear GS716T on 6.3.1.39 firmware) would start filtering RA...

I have a similar switch (GS116Ev2) and I'm seeing the same issue. Do you happen to have igmp snooping or another form of multicast filtering enabled on the switch?

133

22.1 Legacy Series / Re: Traffic shaping with a dynamic IPv6 prefix

« on: April 15, 2022, 08:34:41 am »

In the advanced section of the rules, you can select traffic based on direction, so that way you don’t have to deal with addresses.

134

22.1 Legacy Series / Re: Upgrade to 22.1.4_1 no IPv6 connectivity

« on: April 01, 2022, 01:08:26 pm »

The difference I'm observing is that WAN_INET has 2a02:a468:4bba:0:4262:31ff:fe00:4d05/64 in one view, and fe80::4262:31ff:fe00:4d05 in the other. Or is this not an issue?

135

22.1 Legacy Series / Re: Upgrade to 22.1.4_1 no IPv6 connectivity

« on: April 01, 2022, 12:52:18 pm »

I, too, have a PPPoE internet connection, and I'm having the same issues with IPV6 sometimes working and sometimes not. I noticed that the ssh/terminal screen shows different info than the GUI dashboard, as can be seen in the screenshots. Could this be related?