Topics

1

24.7 Production Series / 24.7.8 System: Firmware failure

« on: November 18, 2024, 09:14:15 pm »

I can no longer connect to my windows 10 PC I am using as a local lan file server.  My Norton Antivirus is telling me that my workstation is being blocked because of SMB:Brute-Force attack on the File server.

My 2nd thought was to updated my OPNsense since it had been about a week or 2 since I last looked.  When I did I got an error that it could not Authentication error.  I did change to another mirror to test and got the same error.

***GOT REQUEST TO AUDIT CONNECTIVITY***
Currently running OPNsense 24.7.8 at Mon Nov 18 15:02:35 EST 2024
Checking connectivity for host: pkg.opnsense.org -> 89.149.222.99
PING 89.149.222.99 (89.149.222.99): 1500 data bytes
1508 bytes from 89.149.222.99: icmp_seq=0 ttl=53 time=178.871 ms
1508 bytes from 89.149.222.99: icmp_seq=1 ttl=53 time=177.511 ms
1508 bytes from 89.149.222.99: icmp_seq=2 ttl=53 time=195.501 ms
1508 bytes from 89.149.222.99: icmp_seq=3 ttl=53 time=185.200 ms

--- 89.149.222.99 ping statistics ---
4 packets transmitted, 4 packets received, 0.0% packet loss
round-trip min/avg/max/stddev = 177.511/184.271/195.501/7.103 ms
Checking connectivity for repository (IPv4): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Authentication error
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Authentication error
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Authentication error
Unable to update repository OPNsense
Error updating repositories!
Checking connectivity for host: pkg.opnsense.org -> 2001:1af8:5300:a010:1::1
ping: UDP connect: No route to host
Checking connectivity for repository (IPv6): https://pkg.opnsense.org/FreeBSD:14:amd64/24.7
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/meta.txz: Non-recoverable resolver failure
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.pkg: Non-recoverable resolver failure
pkg: https://pkg.opnsense.org/FreeBSD:14:amd64/24.7/latest/packagesite.txz: Non-recoverable resolver failure
Unable to update repository OPNsense
Error updating repositories!
Checking server certificate for host: pkg.opnsense.org
write:errno=54
***DONE***


Could they be related or I had 2 different issues?

2

General Discussion / Network Time Daemon not running/ SOLVED disabled and switch to chrony

« on: November 02, 2024, 02:28:34 am »

A while back I change the NTP server to one closer to me.  It worked for a while but I noticed it stopped.  I tried to enter the default 0.opnsense.pool.ntp.org and attempted to restart the service.  service ntpd restart, when I did I got this error:
ntpd does not exist in /etc/rc.d or the local startup
directories (/usr/local/etc/rc.d), or is not executable

3

General Discussion / Minimal desktop install?

« on: October 30, 2024, 12:34:42 am »

I'm having issues getting ssh to work.  Is there a minimal desktop in the stock install?

If so what is the command to start it?  If I need to install one manually which is best? Just needing nano editor, file explorer and ability to print to pdf or my networked printer.

I found how to install nano from cli.

I do not want the desktop environment to boot all the time just when I need it.

4

General Discussion / Any known issues with TP-Link Decos

« on: April 18, 2024, 07:40:57 pm »

I have been having issues with my Wifi.  I have X55 Deco with (2) X50-Outdoor used in AP mode.  I have been using them since about December Feburary 1 and one of the reason I moved to OPNsense I thought my network was to much for the Decos to handle.  So the OPNsense is doing all the management and the Deco are strictly in AP mode.

The Deco settings keep changing their IP address subnet, which decos are connected and which one is the "main".  I get everything configured and set working perfectly.  Then in a day or two they change settings except my SSID, user and passwords (not using default).  I don't know if this is a defective product or a known issue with the TP-Link Deco Product line.

I originally started with the M5 and they worked pretty good except the range was poor and slower speeds.  I added the X50-outdoor and they was much faster and greater range.  Then it was a old gen with new gen issues that the M5 was to slow for x50 so I replaced the M5 with the X55.  I got fed up with the Deco network getting confused and screwing up that I did a factory reset and started a new account thinking that would solve the old configuration data getting restored and overwriting the correct configuration.  Weeks later still dealing with the Decos doing what ever they want and not saving my current settings.  I don't know what else I can do, I thought about assigning static address to the AP nodes by mac addresses not sure if that would solve anything since the Deco is having several issues.

5

General Discussion / Need help with new setup/install Mini PC, 6x2.5GbE 1 subnet, DHCP on 5 ports

« on: March 28, 2024, 05:46:58 pm »

I have my wan and lan1 working.  I believe that I need to create a bridge for lan1-lan5 so that I can have a single network accessible any where on the lan.  But from what I have read in the docs that is a bad idea.  I need a single DHCP server that ports 1-5 will send the traffic in different directions on my lan.  Is it possible to setup a virtual switch to do what I want?  I am not good with the proper terminology so if someone can point me in the right direction it would be greatly appreciated.  Basically 192.168.1.1 is the dhcp server and lan1-lan5 distributes to different area of the house with a switch or wireless access point for the clients to connect.

I do plan to use vlans in the future but just need to get the entire network up and running now.

6

Tutorials and FAQs / Noob trying out OPNsense live, config.xml new install

« on: February 08, 2024, 07:06:37 pm »

This is my first time using this software and I am wanting to check it and make sure my hardware can handle it before I make a permanent install.  I have been reading the https://docs.opnsense.org/manual/install.html  and I get to step 3 and feel like I am missing something.

For New installations/migrations follow this process:

1) We must have a 2nd USB drive formatted with FAT or FAT32 File system.
  Preferable non-bootable USB drive.

2) Create a conf directory on the root of the USB drive

3) Place an unencrypted <downloaded backup>.xml into /conf and rename the file to config.xml (/conf/config.xml)

  Asked to put the config.xml file on a 2nd USB drive.  Is there a generic xml file I am to find and download and put on that drive?
So for the time being I just created a blank file and just saved as /config/config.xml.

Should there be a starter config where I can edit basic settings before running or will the blank file do what I need to get started.

Thanks