Messages

16

17.1 Legacy Series / Install Freezes at Guided Installation

« on: February 25, 2017, 06:13:15 pm »

I'm trying to do a fresh install on a 2nd machine to use as a backup incase the main router goes down.  I never had problems installing v15 or v16, but man, the FreeBSD underpinnings of v17 seem to be making what was once simple, frustrating.

First it wouldn't boot until I did the steps here:
https://forum.opnsense.org/index.php?topic=4389.msg17200#msg17200

Now, I make it all the way to "Guided Installation" but on that screen I can't select anything. It's just frozen. No keyboard input. Nothin'. I have to force reset the PC.

17

General Discussion / Re: USB Flash Drive Format to store backup Configuration

« on: February 21, 2017, 12:11:25 am »

Actually, I'm positive you can. I've done it.

When I had a crash with 16.1 due to a failing hard drive, I had the fresh drive in while the old drive was still connected.  During install I was able to select the old drive where it found my configuration and built it into the new install perfectly.

This is just putting the configuration on a flash drive so if that happens again it can recover the configuration for it.

Thank you for your replies, but I'd prefer we not debate over what can and cannot be done, I'd prefer any help to my actual question: help with formatting the flash drive properly.  If you have any guidance in that direction, please share!

Thanks!

18

General Discussion / Re: USB Flash Drive Format to store backup Configuration

« on: February 20, 2017, 07:26:31 pm »

Yes, I understand this, and that is how I get my current configuration.

The goal, as I described, is to have the configuration on-hand and on the USB drive for reloading during install onto a new machine or a reload on the existing machine.

Thanks!

19

General Discussion / USB Flash Drive Format to store backup Configuration

« on: February 20, 2017, 06:54:08 pm »

I've been banging my head against the wall for the past hour on, what I thought based on my Ubuntu experiences, would be a fairly simple thing to do.

I'm trying to get my OPNsense configuration onto an old USB Flash drive of low capacity (hey, not much good for anything else nowadays!) so that when/if I have a melt down or replace hardware, I can insert the USB stick during install and choose "Restore Configuration" and be on my way.

In doing a dry run with this, the OPNsense installer (or rather FreeBSD) refuses to see the format on the flash drive complaining that it isn't formatted or an unknown partition type.

I figured that most distros on the planet would understand at least FAT16 or 32 by now, I guess not. I tried formatting in UFS2, but I either failed horribly or it doesn't like that either.

Could anyone tell me exactly what it might be looking for in terms of formatting and exactly how to do this so it works?

Personally frustrated, but appreciative of any help or suggestion!

Thanks all!

20

16.1 Legacy Series / Re: IDS Rule Descriptions

« on: March 11, 2016, 11:31:22 pm »

I run a mail server, so SMTP is a no-brainer for me, and I'm seeing lots of blocks there. In concert with my server-side block lists and filters, it has cut the spam down.

I really thought I'd see some other blocks, but only a couple potential DOS on NTP and that's about it.

21

16.1 Legacy Series / IDS Rule Descriptions

« on: March 10, 2016, 02:44:08 am »

Hi all,

Is there a better description of the IDS rules? All the info buttons go to here: http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ

...and that's fine, great descriptions of the obvious ones, but there are many more rules available than the generic descriptions listed there.

Some are self-explanatory or subsets of the lists on that page, which is again, easy.  Others I just don't have a clue about.

22

16.1 Legacy Series / Re: How to use a wireless router behind OPNsense?

« on: March 04, 2016, 02:19:06 am »

I use DD-WRT, I think I can help you.  I assume you want wireless devices to behave like the wired devices in terms of network, if so this is call infrastructure mode on your wi-fi.

Firstly, you should let OPNsense handle all the DHCP and DNS. You're not going to use those functions on your wi-fi router.

In DD-WRT, under Basic Setup, you're going to set connection to Disable - you're not going to use the WAN port.

In network setup, you're going to give it a static IP outside your OPNsense DHCP range.  If you need help here, just let me know if you're using 192.168.1.x (default for OPNsense), 10.0.1.x or something else. In theory, you could give it DHCP, but a static IP makes it easy to get into the interface and remember.  For me OPNsense is 10.0.1.1 and my wifi is 10.0.1.2 - easy to remember.

In Wifi make sure the wireless mode is AP - Access Point aka that Infrastructure mode we're looking for.

You'll plug the wifi router into your switch with one of it's LAN ports and that ought to do it in a nutshell.

23

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: March 03, 2016, 01:48:16 am »

Here's my requested logs, but I'm still convinced I may have something going on with hardware - possibly my drive given the fsck errors I've had.

This weekend will probably be a config back up and reinstall with a replacement drive.

24

16.1 Legacy Series / Re: fsck and OpnSense

« on: March 02, 2016, 01:13:17 am »

That's interesting, I'll try that if it happens again. I know in this particular case, only going in single user mode was going to fix it. We had an extended power outage that the UPS didn't make it through.

25

16.1 Legacy Series / fsck and OpnSense

« on: March 01, 2016, 12:47:11 am »

I recently discovered that my filesystem didn't come up cleanly after a power outage and may be related to some issues I had.

I did the old school boot into single user mode and ran fsck - actually twice before everything got cleaned up.

Is there a built in with with OpnSense to do this?  I found this with pfSense:

touch /root/force_fsck would force a check/repair on reboot.  Didn't seem to affect OpnSense.  This might be something handy to have as a GUI option down the road?

26

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: March 01, 2016, 12:40:49 am »

I may bow out of troubleshoot this for a bit, I found after a recent power outage my system didn't come up cleanly and my recent "me too" might be related to that.  However, my first post predated that outage so I was seeing something. I have a question about what I found, but will post a new thread so as not to hijack this one.

27

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: February 29, 2016, 02:26:57 pm »

I'll see what I can do. I actually turned off IDS because it was crashing then recovering (mostly except for configd and sshd) every few hours so it was invisible unless you were watching. I'm now going on 18 hours with no issues, so you're suspicion of high workloads is correct.

28

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: February 28, 2016, 09:03:48 pm »

Mine is: Intel(R) Core(TM)2 Duo CPU E8400 @ 3.00GHz, 2 CPUs: 1 package(s) x 2 core(s), 4GB RAM. I have about 23% of RAM in use with the new IDS in use and a few items enabled.

It isn't a regular thing. I'll have an uptime for awhile before noticing it, often a week or more from what I can tell.

29

16.1 Legacy Series / Help Configuring Split DNS

« on: February 21, 2016, 12:24:08 am »

I'm looking for some advice on configuring my router's DNS. I run split DNS, I want my internal NAT clients to resolve to an internal NATted DNS server.

My main issue is that I have a web server, among other services, running on NAT and I find that OPNsense cannot resolve to things like URLs on my web-server.  Possibly because of my internal DNS being on a system behind NAT as well.

What would be best practice for this? Under System>Settings>General should I use my internal DNS server or External, or both? Or is there some other setting I need to have a look at?

Thanks all for any tips.

30

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: February 21, 2016, 12:17:15 am »

I've seen this as well.  Click Services then Diagnostics.

Make sure configd is running.  If not, start it.

I found mine off (or crashed) just this morning when I selected to check for updates.