Messages

76

General Discussion / Re: Migrate to new SSD

« on: June 04, 2023, 09:04:46 am »

Unless I misunderstand the question, wouldn't be a suitable option to install to the new disk and restore config?
Easy when no additional packages are installed.

Hi cookiemonster, a fair question! However, I have various packages and other manual tweaks installed for other stuff like Grafana dashboards that would not get restored, hence the need to replicated the filesystem for a speedy recovery.

77

General Discussion / Re: Migrate to new SSD

« on: June 03, 2023, 09:48:53 pm »

Thanks both.

Sadly, no, only one SSD interface in my appliance.

I'll give Clonzilla live a whirl.

78

General Discussion / Migrate to new SSD

« on: June 02, 2023, 07:12:59 pm »

Hi All,

I had an SSD failure in my OPNSense appliance (Pondesk). Whilst diagnosing the issue, I fitted a 'temporary' 128Gb SSD I had laying around to fault find, and ended up re-building my system. It is an old SSD, so for piece of mind I would like to replace it with a new 250Gb version I now have.

Is there an easy way / best practice to migrate from one SSD to the other? I am a Windows man, so may need some help with shell commands if there is a way to image to an external drive/USB directly - that might be useful for backup.

Equipment I have, that might be useful:

256 Gb USB Stick
1 x USB to SATA Drive adaptor - I could use this to connect to either the appliance (would this work?) or indeed my windows Machine.
128Gb SSD - in Appliance, running OPNSense.
250 Gb SSD - intended target / replacement.
Windows 11 machine with USB (no spare SATA slots, sadly).
I do also have a paid version of Macrium Reflect Home (v8) Installed on my Windows 11 machine.

Filesystem is ZFS

I do, of course, appreciate that there will have to be down-time to swap the drives over - that's fine.

Thanks 

79

23.1 Legacy Series / Re: Update to 23.1.8 got stuck

« on: May 26, 2023, 08:23:18 am »

Any steps we can take to stop this from happening on upgrade? Would unticking enable in the UI before upgrade work?

80

22.7 Legacy Series / Re: Deleting a ZFS pool before installing?

« on: May 24, 2023, 04:17:08 pm »

Hello,

Would anyone be able to give a bit more detail on how to do this? Commands to run?

Thanks.

81

23.1 Legacy Series / Re: 23.1.7_3 dhcp seems to no longer hand out dns and search domains

« on: May 14, 2023, 09:40:24 am »

A quick search and you would have found https://forum.opnsense.org/index.php?topic=33661.0

Short version - you'll need to set manually until the DNS plugin you are using is updated to properly register/announce itself on port 53.

82

23.1 Legacy Series / Re: WAN PPPoE does not respect setting MTU >1492 (RFC4638)

« on: April 27, 2023, 08:30:56 pm »

You have to go to interfaces > assignments, then assign the physical WAN port (e.g. igb0, for example) to a new interface (it is not assigned by default). I called mine 'ignore'. You can then edit the interface, and merely set the MTU of that interface to 1508 in the UI - no need to set anything else. Save, then it will allow a 1500 MTU setting to work on the 'WAN'/pppoe interface

83

23.1 Legacy Series / Re: DNS issues since 23.1.6

« on: April 27, 2023, 06:36:17 pm »

Just quickly checking as all the different configs being discussed (and some with issues not stating their config/setup) is getting confusing!

Am I right to say that the DNS issues only manifest if you're using something for DNS that doesn't correctly register on the port?

So if I'm using Unbound for DNS, with DoT, I should be able to update with no issues? If everything works now on 23.1.5_4 it will work post upgrade? Or do I explicitly have to define the DNS server in the DHCP settings (which would be difficult for ipv6) in 23.1.6?

Thanks.

84

General Discussion / Re: UK Vodafone FFTH - Help with WAN setup

« on: March 24, 2023, 04:34:58 pm »

Is it gigafast full fibre to an ONT into your house? If so, VLAN 911 seems to be the order of the day.

85

23.1 Legacy Series / Re: dhcpd messages appearing in log after upgrade to 23.1

« on: February 01, 2023, 01:40:18 pm »

Have you seen the threads relating to certain tunables causing issues that have been hidden until this release? Have you set any additional/custom tunables related to the interface that might be causing a problem?

86

General Discussion / Re: OpenVPN CIDR /24 works but /16 does not

« on: January 22, 2023, 01:16:50 pm »

Is the remote network not supposed.to.be 0.0.0.0/16 for OpenVPN?

87

Zenarmor (Sensei) / Re: Cloud node issue

« on: December 23, 2022, 05:54:27 pm »

Yep, all good here. Thanks.

88

Zenarmor (Sensei) / Re: Cloud node issue

« on: December 23, 2022, 09:51:14 am »

 :'(Yep, noticed the same yesterday myself. I am still on OPNs 22.7.9 and have not applied this month's updates to the OPNs system. Latest Zenarmor.

89

Zenarmor (Sensei) / Re: Block ALL does NOT block iMessage and FaceTime

« on: December 21, 2022, 08:23:15 pm »

Seems fairly obvious this won't work as you have it set up.  You said you have blocked the kids VLAN, which is fine when they are connected using Wi-Fi.  However, when connected through the Carrier/VPN, that connection does NOT come in through the kids VLAN but instead comes in on a separate VPN interface on the OPNsense router that would need to be included in your scheduled block rule.

OK now I'm 100% sure you cannot read, I'll try to make it simpler just for you

1) traffic is correctly routed onto the relevant VLAN
2) traffic is being completely BLOCKED as expected according to policy EXCEPT to/from iCloud.com
3) Sunnyvalley is looking into this as this is unexpected behavior

So, if you have something meaningful to add, please do so as the community at such would benefit from it. However, if you don't know what you're talking about, refrain from misleading readers and wait for me to post the solution from Sunnavalley once they've found it.

You may not see it is helpful, but you could be a bit more polite. Your posts have hardly been clear (it would appear as a result of being overly defensive), and at no point before have you actually clarified that your VPN from the outside world is routed somehow onto your internal kids VLAN, or that the policy is also applied to your VPN interface as well as the Kids VLAN interface - all reasonable questions for someone that has come to seek help, as no-one can see into your network or know what your level of ability is - all people can work with is what you post. PMHausen has asked for the details above, but you have ignored it, so you can't be surprised that people are trying to guess based on the most likely issue.

They are also reasonable points/questions that might help others with similar problems on the face of it, but have missed these points, even if they haven't helped you...

90

22.7 Legacy Series / Re: Clients cannot got IPv6 address when I use ZenUK

« on: December 17, 2022, 11:59:01 pm »

IPS?

With Zen you need to tick use IPv4 connectivity. If your OPNsense appliance is behind another device then we need more info, but I suspect you will have issues unless it is in bridge mode.