Messages

136

21.1 Legacy Series / Re: Upgrade to 21.1 may take *very* long time (>1h)

« on: January 29, 2021, 05:01:50 pm »

Upgraded to 21.1 on an old APU2 took about 10mins.

instead of waiting for the upgrade.  make a backup..nuke the box..install the latest version..install config backup.  much easier.

Question about doing this...what data do you need to backup first?  For example, does the VNSTAT database get backed up via the configuration (I don't want to lose that history)?  What about data from other packages?  Thanks!

137

21.1 Legacy Series / Re: Upgrade to 21.1 may take *very* long time (>1h)

« on: January 29, 2021, 01:28:46 am »

Wow...2 hours...?  About 6 minutes here...a bit took longer than a point release.  Verified the hdd light was flashing during upgrade and after the NIC went dark a few times, finally lit up and started flashing in a normal state.  No monitor hooked to it and thankfully didn't have to drag one out.  Zabbix reported "problem" resolved in 5 minutes.  This was an upgrade via GUI following the 2 package update (sudo, opnsense 20.7.8_4).

138

20.7 Legacy Series / Re: how to config opnsense...

« on: January 22, 2021, 09:21:08 pm »

This is not uncommon but most ISP/Cable Co. don't like the change of MAC address. Had to contact Cable Co to reset modem.

Depending on ISP, manual power cycle of the modem can also work.

139

20.7 Legacy Series / Re: NUT diagnostics screen is blank

« on: January 16, 2021, 06:32:15 pm »

Might be useful to show the UPS Type tab (the second tab on the config screen).  I use it in netclient mode (server is an Rpi) and no issues here.

140

20.7 Legacy Series / Re: Can't access opnsense web GUI after broken(?) update -- Secure Connection Failed

« on: January 13, 2021, 12:24:26 am »

If you're using a 3rd party A/V, you may need to disable it temporarily, that's what I had to do.

141

General Discussion / Re: Cannot get forced redirect of DNS to Pihole

« on: January 11, 2021, 01:13:18 am »

I did this (similar set-up) but never needed an outbound NAT rule (did I miss something)?  What's the purpose of that the first wouldn't handle? 

Also, I used two NAT Port Forward rules, one for each ipv4 and ipv6...I use ipv4 for both LAN and VLAN (one rule, two interfaces), but have ipv6 disabled on VLAN (IoT network).  So for the ipv6 address on the LAN I use the link local address, if anyone is wondering.  I also allow ping to the pihole from VLAN as several IoT devices seem to like that...otherwise everything else is blocked.

142

20.7 Legacy Series / Re: Where disable remote syslog?

« on: January 09, 2021, 04:42:39 pm »

I think it's resolved here:

https://github.com/opnsense/core/issues/4121

143

20.7 Legacy Series / Re: Block outbound connections to China

« on: January 02, 2021, 05:43:23 pm »

Yeah, search for GeoIP.  You'd create an alias with countries you want to block, then use that alias in a firewall rule.  Prior to that you'll need to set up an account (free) with maxmind. 

See here: https://docs.opnsense.org/manual/how-tos/maxmind_geo_ip.html
Aliases: https://docs.opnsense.org/manual/aliases.html

144

20.7 Legacy Series / Re: web interface fails after upgrade to 20.7.7.1

« on: December 28, 2020, 02:57:36 pm »

Had something like this a couple days ago, my local certificate I created in opnsense had expired somehow.  I had generated it only a few months ago and swear I had it not expire for several years.  I ended up removing it from opnsense and windows and recreating it all from scratch.  Not sure that's your issue or not...would be highly coincidental or there's something else going on here.

145

20.7 Legacy Series / Re: New Traffic Reporting useless

« on: December 24, 2020, 07:00:07 pm »

I also agree with OP...the new graph is not useful in conveying information.  Also prefer the old graphs.  ntopng is good, but not convenient for a quick look to see what's going on.

146

20.7 Legacy Series / Re: IPv6 stops working a couple minutes after reboot

« on: December 20, 2020, 09:14:03 pm »

I had something similar with 20.7 where it seemed like (and this is admittedly sketchy) I wasn't getting an allocation from my ISP but only on a cold boot (happened after two different power outages).  The solution I discovered was to go into the WAN interface and save (no changes) and then also on the LAN interface and save.  That seemed to kick things off.  Honestly, haven't gone back to test to see if the patch I mentioned fixed that particular issue too, the patch obviously addresses at least LAN ipv6 advertisements...so again, not sure.  Might try that...perhaps it will provide a clue or hint as to what's going on.  I'm using native DHCPv6 with my ISP (Spectrum) with 56 prefix size.

147

20.7 Legacy Series / Re: IPv6 stops working a couple minutes after reboot

« on: December 20, 2020, 07:16:55 pm »

Not sure if you're aware of the patch that replaces radvd with rtadvd here (can't say this is the exact same problem you're experiencing...but it did start with 20.7):

https://github.com/opnsense/core/issues/4338

opnsense-patch 9a4a908

148

20.7 Legacy Series / Re: New build NUT not working

« on: December 19, 2020, 01:40:00 am »

Searching that message returns lots of hits...fyi.

149

20.7 Legacy Series / Re: WAN dropping internet every 24 to 36 hours.

« on: December 08, 2020, 02:17:12 am »

You're going to need to provide more information.  Any messages in the log?  Your network topology?  How are you testing?  IPv4 and/or IPv6?  DHCP messages might yield a clue.  I have a similar issue infrequently (last night for about 4 minutes) but it's my ISP or modem/signaling, not OPNsense.

Also how are you testing for connectivity?  Can you ping using IP address (e.g. 8.8.8. and can you ping by name (e.g., google.com).  If you can ping via IP address, is it maybe a DNS issue?

Cheers.

150

20.7 Legacy Series / Re: 20.7.5 Health Audit Bug?

« on: December 05, 2020, 11:26:44 pm »

Same here, probably nothing to worry about...interesting find though.