Messages

136

Zenarmor (Sensei) / Re: unable to reinstall zenarmor

« on: May 30, 2023, 01:03:40 am »

Learned it from Safe Online Antivirus: you have to delete every trace of it (Zenarmor), then reboot, before proceeding with reinstall.

Use:

find / -iname "*sensei*"
find / -iname "*zenarmor*"

and rm -fr accordingly.

137

Zenarmor (Sensei) / Re: OPNsense upgrade failure with Zenarmor (23.1.7)

« on: May 23, 2023, 05:40:44 pm »

Sorry, I have meanwhile uninstalled Zenarmor, deleted all its folders, and then reinstalled it (on all machines). So, I guess logs no longer contain that information. Just that you know, on Proxmox I use now emulated netmap driver.

138

Zenarmor (Sensei) / Re: OPNsense upgrade failure with Zenarmor (23.1.7)

« on: May 20, 2023, 03:11:26 pm »

No, I don't use Suricata.

139

Zenarmor (Sensei) / Re: OPNsense upgrade failure with Zenarmor (23.1.7)

« on: May 19, 2023, 06:48:27 am »

Various:

- a computer with Intel Corporation 82576 Gigabit Network Connection( rev 01) and Intel Corporation Ethernet Connection I217-V (rev 05) and Qualcomm Atheros AR9462 Wireless Network Adapter (rev 01)
- a Proxmox with Intel Corporation 82576 Gigabit Network Connection (rev 01) available through PCI devices (no qemu plugin installed)
- APU2 with Intel(R) I210 Flashless (Copper)

So, it happened everytime I had to update Zenarmor to the present version.

140

23.1 Legacy Series / Re: [CALL FOR TESTING] Netmap generic mode queue stall fixes

« on: May 18, 2023, 11:05:47 pm »

There is some work still going on about kernels, but I don't know precisely what.

141

22.1 Legacy Series / Re: [SOLVED] Getting public IPv6 addresses to LAN

« on: May 18, 2023, 08:57:55 pm »

AFAIK former UPC region was /57 and supposed to go /56 (I don't know if it already happened), while the rest of Ziggo is /56.

My setup is as follows:

WAN IPv4: DHCP
WAP IPv6: SLAAC

SLAAC gives something like

2001:aaaa:bbbb:cc00:dddd:eeee:ffff:fff1

My LAN IPv6 is static, namely 2001:aaaa:bbbb:cc10:dddd:eeee:ffff:fff0.

You just have to choose for hybrid Firewall: NAT: Outbound and add a rule to it:

Interface: WAN
Protocol: IPv6
pass from any to any

Yes, that means your LAN IPv6 subnet will be routed through 2001:aaaa:bbbb:cc00:dddd:eeee:ffff:fff1, which will be your public IPv6 address. But it will still work, e.g. IPv6 pings from a laptop from LAN work okay.

After you have checked that IPv6 works, save the OPNsense configuration and backup it to the cloud, you will need it later.

I have tested it with DHCPv6 instead of SLAAC: also works okay.

142

Zenarmor (Sensei) / Re: OPNsense upgrade failure with Zenarmor (23.1.7)

« on: May 16, 2023, 09:59:49 pm »

True, I had this several times: installing Zenarmor kills LAN connections. I had to use the console to install it properly (just in case, I have reinstalled it).

143

Zenarmor (Sensei) / Re: V1.13 after upgrade does not block web sites

« on: May 13, 2023, 11:47:18 pm »

And, yup, sex.com isn't "Adult", it's "Pornography".

144

22.1 Legacy Series / Re: os-ddclient

« on: May 08, 2023, 02:03:23 am »

Well, but inadyn seems to be alive and kicking.

145

Zenarmor (Sensei) / Re: V1.13 after upgrade does not block web sites

« on: May 08, 2023, 01:36:48 am »

Yup, I have sensed that 1.13 did not block the advertisements. But that solved itself sooner or later. And, yup, the whole memory consumption is close to 4 GB (3900 MB), but since I have 16 GB RAM, that does not seem to be a problem.

I see that eastpect uses 539 MB RAM and elasticsearch 5214 MB (of which 2682 MB res).

top says 8992 MB are free. I also have a 5.2 TB zfs RAID with 4 hard disks, perhaps there is where much memory goes to.

146

Zenarmor (Sensei) / Re: Blocking website Certificate Authority

« on: May 05, 2023, 08:54:37 pm »

I have also tried with the blocking page disabled.

147

Zenarmor (Sensei) / Re: Blocking website Certificate Authority

« on: May 05, 2023, 08:52:31 pm »

And, yup, if you want to know, it redirects the pings to 100.2.3.4 .

148

Zenarmor (Sensei) / Blocking website Certificate Authority

« on: May 05, 2023, 08:50:47 pm »

I have installed the blocking website node-ca.crt . But neither Chrome nor Firefox are fooled by it. I tried on both Windows (where the antivirus may play with the certificates) as well as upon Linux. Yup, I have installed the CA twice, once in the operating system, and once in Firefox, then I have rebooted and tested this.

149

23.1 Legacy Series / Re: OpenVPN fails in 23.1.7

« on: May 04, 2023, 03:00:55 pm »

Got it, it needed "allow-compression yes".

150

23.1 Legacy Series / OpenVPN fails in 23.1.7

« on: May 04, 2023, 02:54:06 pm »

Code: [Select]

/usr/local/etc/rc.d/openvpn: WARNING: /usr/local/etc/openvpn/openvpn.conf is not readable.
/usr/local/etc/rc.d/openvpn: WARNING: failed precmd routine for openvpn