Messages

796

15.7 Legacy Series / Re: Disable log for default WAN rules

« on: October 01, 2015, 04:52:31 pm »

Hi,

You should be able to disable the logging on the diag_logs_settings.php page, just uncheck "Log packets blocked by 'Block Bogon Networks' rules".

Regards,

Ad

797

General Discussion / Re: Shared bandwidth

« on: October 01, 2015, 04:45:26 pm »

I think m0n0wall did that, but I think it shaped on the client (LAN) side.
With OPNsense you could also bind both interfaces (LAN/WAN) to your rule, using the advanced setting on the rule.

 

798

15.7 Legacy Series / Re: Google Drive communication failure

« on: September 28, 2015, 09:12:56 pm »

The Google dive library unfortunately doesn't give a lot of additional debug output.
If it can't fetch the file list, most mostly has wrong credentials installed.

Does your email address look something like <very big serial>@developer.gserviceaccount.com ? and does your folder id look like a very big base64 kind of number?

799

15.7 Legacy Series / Re: Traffic Shaper remains active when deactivated

« on: September 28, 2015, 09:05:27 pm »

yes, it's a bug, it will be fixed in the next release.
The ipfw rules aren't flushed when disabled in the current version, a workaround for this version is to add an empty pipe and apply the rules again.

More info: https://github.com/opnsense/core/issues/407

 

800

15.7 Legacy Series / Re: OPNsense 15.7.14 : Log option for rules not saved sucessfully

« on: September 24, 2015, 04:13:02 pm »

Hi stephl,

I've just checked it, it's a bug. it will be fixed in the next version, but if you want to fix it right away you can download the current file from github (I've fixed it right away).

This commit contains the fix: https://github.com/opnsense/core/commit/5df05e9e9716f43b6d9c4d9f61da0d3e7e0d59b6


Cheers,

Ad

801

15.7 Legacy Series / Re: New build CPU usage constantly at 25%?

« on: September 24, 2015, 03:42:39 pm »

idlepoll seems to be using 25% of your system, is your machine running in polling mode?
(System -> Networking -> Device polling)

802

15.7 Legacy Series / Re: New build CPU usage constantly at 25%?

« on: September 24, 2015, 01:35:39 pm »

can you try to run top with a bit more info?

Code: [Select]

top -S -P

It's probably system or interrupt time being spend, if your machine is busy with network traffic that could be normal, if it's not routing/firewalling anything that looks odd.

803

Development and Code Review / Re: How do I set the development environment?

« on: September 17, 2015, 08:22:09 pm »

Nice to hear the structure is clear now, eventually we want to migrate all parts to the new structure but this will certainly take quite some time before all old code is gone.

We have chosen to set a new development method, clean-up old code and migrate step by step... it's a lot of work given the complexity of the (unstructured) old code, but with the chosen path we are able to improve gradually.
(a lot of the work is under the hood)

Thanks for the bug report, we probably need to get rid of the global variable as well, I have registered it on our GitHub page:
https://github.com/opnsense/core/issues/388

 

804

Development and Code Review / Re: How do I set the development environment?

« on: September 17, 2015, 09:55:58 am »

You're welcome, nice to hear it started working on Vagrant as well.

Phalcon saves it's page cache in /usr/local/opnsense/mvc/app/cache/, but keep in mind that the volt templates are only used for the new style components like trafficshaper and proxy.

The theme css is used in both the old and the new code, but if you want to make structural changes (not doable with css), you need to look at the old pages as well. (/usr/local/www/fbegin.inc for example)
Although this is from a maintenance point probably not the best approach.

The advised way of changing the theme is to alter the sass files and compile the css file, the ones for our standard theme can be found in /usr/local/opnsense/www/themes/opnsense/assets/stylesheets/

805

Development and Code Review / Re: How do I set the development environment?

« on: September 16, 2015, 11:36:04 am »

Hi,

We have never tried building with Vagrant, but if Vagrant just prepares a standard freebsd environment it should probably work.
The mount command you try to use is mend for an OPNsense machine running the core package from git, more on how this works can be found here:

http://lastsummer.de/development-workflow-in-opnsense/

Which is probably the easiest method to create / alter code some GUI related parts (just install an OPNsense image and start coding).

Information about the build system (create packages/images etc), can be found here:
https://github.com/opnsense/tools

And there's our wiki for more information about our development methods:
https://wiki.opnsense.org/index.php/Developers

Cheers,

Ad

806

General Discussion / Re: Simple interface with Angular

« on: September 10, 2015, 02:45:31 pm »

Hi,

Sinds last week we do have a full sample, for more info:
https://forum.opnsense.org/index.php?topic=1332.0

807

General Discussion / Re: OpenVPN: Client, Status Up, do not pass data

« on: September 04, 2015, 06:17:31 pm »

Good to hear you found the configuration issue!
Thanks for reporting back.

808

15.7 Legacy Series / Re: IDS auto update not working

« on: September 03, 2015, 04:12:42 pm »

You can leave the others like they where, because you do want "any day".
Cron is a bit confusing sometimes

809

15.7 Legacy Series / Re: Allow webinterface access from WAN

« on: September 03, 2015, 02:28:06 pm »

In case the firewall rule on WAN fails to work, you probably need to disable the "route-to" option on this firewall rule.

Go to the firewall rule on wan, then "Advanced Options" and check "This will disable auto generated reply-to for this rule." this lets you access the firewall from another host within the same net without using the gateway.

810

15.7 Legacy Series / Re: LibreSSL or OpenSSL? Try both.

« on: September 03, 2015, 08:59:29 am »

We have added the choice for the ssl flavor in the system itself "Firmware Flavour" in general settings, which removed the need to build a lot of extra install images (which takes a lot of regression time).

It's just a matter of preference, some like LibreSSL more others like OpenSSL more, we do intent to keep supporting both (and build packages for both of them).