Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - nikkon

#31
General Discussion / unbound crash every day
October 31, 2022, 06:09:13 AM
Hi all,
I have a wierd unbond problem. It crashes once a day because of:
2022-10-31T05:03:13 Error unbound [75750:0] error: remote control failed ssl crypto error:02FFF020:system library:func(4095):Broken pipe
2022-10-31T05:03:13 Notice unbound [75750:0] notice: failed connection from 127.0.0.1 port 14221
2022-10-31T05:03:13 Error unbound [75750:0] error: remote control failed ssl crypto error:02FFF020:system library:func(4095):Broken pipe


I have DNS over TLS enabled with cloudflare and under Custome Options I manually added
tls-cert-bundle:  /var/unbound/unbound_server.pem
I have verified all CAs and Certifications. All (self signed + ACME) are valid

any clue what this error means?
#32
Cpu is actually 2.4 Ghz
#33
Zenarmor (Sensei) / add sqlight - datasource in grafana
September 27, 2022, 03:24:00 PM
Hi all,
I see the new version comes with sqlight as local db for the data in zenarmon. I was wondering, did anyone managed to define it as datasource in Grafana ?
#34
I experience the same behaviour. Without Zenarmor I get 600 Mbps download. With Zenarmor I only get 300-350 Mpbs
The setup I have for Opnsense is an atom 8 cores, 16 GB ram ecc, Intel Gigabit NICs
However when I am running the tests I follow the resource allocation/consumption and neither the CPU or Ram seem to be under stress. I think it's software bottleneck


#35
Hi all,

I am on OPNsense 22.7.2-amd64

Sensei doesn't work because MongoDB cannot strat:
pkg check -da
Checking all packages: 100%
py37-markupsafe has a missing dependency: python37
py37-markupsafe has a missing dependency: py37-setuptools
py37-markupsafe is missing a required shared library: libpython3.7m.so.1.0
py37-pymongo has a missing dependency: python37
py37-pymongo has a missing dependency: py37-setuptools
py37-pymongo is missing a required shared library: libpython3.7m.so.1.0

Anyone can tell a repo from where to get these missing files?

thanks
#36
Seems dns related. If i add the interface in unbound under the list of served interfaces it works.
However i want to use specific dns fw for this interface and i define them manually on the clients.

Still working on understanding the issue
#37
Mine looks active, but no internet for clients as well.
Investigating
#38
problem fixed. post can be closed
#40
thank you @pmhausen
just loaded the module and restarted.

usbconfig dump_device_desc:
ugen1.3: <Realtek 802.11ac NIC> at usbus1, cfg=0 md=HOST spd=HIGH (480Mbps) pwr=ON (500mA)

  bLength = 0x0012
  bDescriptorType = 0x0001
  bcdUSB = 0x0200
  bDeviceClass = 0x0000  <Probed by interface class>
  bDeviceSubClass = 0x0000
  bDeviceProtocol = 0x0000
  bMaxPacketSize0 = 0x0040
  idVendor = 0x0b05
  idProduct = 0x1853
  bcdDevice = 0x0000
  iManufacturer = 0x0001  <Realtek>
  iProduct = 0x0002  <802.11ac NIC>
  iSerialNumber = 0x0003  <123456>
  bNumConfigurations = 0x0001

Now I don't know how to create the interface:
ifconfig wlan0 create wlandev <..> does not work.

#41
does it show up automatically in the UI as new adapter or new interface?
#42
Hi all,

I try to initialize an USB wifi (asus ac68) based on realtek chip.
looks like it has been detected:
ovpnc1: link state changed to UP
ugen1.3: <Realtek 802.11ac NIC> at usbus1 (disconnected)
ugen1.3: <Realtek 802.11ac NIC> at usbus1

but I can't see it as interface. how do I initialize it?
any guide is welcome

Thank you
#43
Set this on all internal interfaces.
If you need more, use suricata on wan
#44
General Discussion / DHCP issue on VLAN
March 01, 2022, 04:07:12 PM
Hi all,

I have a stupid problem.
I have 3 VLANS :
     Lan_Wifi tag 10 - 172.16.20.0/24
     Guest_Wifi tag 20 - 172.16.30.0/24
     Iot_wifi tag 30 - 172.16.40.0/24

Vlan 10 and 30 work perfectly. Every network has its own dhcp server.
Guest_Vlan which maps to a Wifi_Guest SSID, and has a DHCP server associated with it as well. The customers of this network are set not to have access internally, only internet access.
everytime I add a new customer, It gets the ip from the pool, the gw and dns. however is does 0 traffic.
If I add the device in the list of DHCP Static Mappings they start working as expected.
Once the client gets the ip from the dhcp server serving Wifi_Guest network, the client appears in the leases list as Offline


All other dhcp networks have mapping for every entry
Any clue why is this happening? I miss something for sure :(

thank you
#45
It can be closed
I made a mistake when I added the route.
all works now
thank you