Recent posts

[1]

#1

Documentation and Translation / Re: It would appear that FE80:...

Last post by drosophila - Today at 02:55:14 AM

Good find, /10 must be correct, or rather, /8 cannot be, because "FE80" requires 9 bits (1111111010000000).

#2

General Discussion / Re: OPNsense 26.7.2_2: TLS err...

Last post by drosophila - Today at 02:38:45 AM

I found an issue on my network/gateway/router.
It was not an OPNsense problem.

MTU / MSS perchance? :)

#3

26.7 Series / Re: Planning update from 26.7....

Last post by drosophila - Today at 02:19:27 AM

The most problematic update (microcode / bootloader) is the one that goes from 26.1 to 26.7. Since you're on 26.7 already, I wouldn't expect any major issues.

#4

26.7 Series / Re: Another 26.7 "Upgrade Fail...

Last post by drosophila - Today at 02:03:47 AM

Wait, does it need to reach the internet to do this?

It shouldn't need to, but IDK for sure. Try it, if it needs it, it'll stall then fail, hopefully with some descriptive message. :)

Edit: looks like it might do a live lookup, at least it detects version mismatches that stem from a not-yet done update. :\ Unless it uses the last-downloaded database.

If that doesn't come up clean, then the next thing would be to do what this post does (needs terminal and internet access):
https://forum.opnsense.org/index.php?msg=273063

I'll be off updating from 26.7.1_1 to latest now, so hopefully both of us will be running 26.7.2_2 tonight. :)

#5

26.7 Series / Re: Another 26.7 "Upgrade Fail...

Last post by Kevin G. - Today at 01:59:19 AM

Got stuck in a "rebooting now" and returning to the Lobby/Dashboard loop, assumed the update failed. (...) manually reboot the Opnsense box

The update very likely was not complete. Do a health audit (System->Firmware->Status-Run an Audit), I bet it'll come up unclean.

I'll look at this now...thanks.
Wait, does it need to reach the internet to do this?

[AND]

#6

26.7 Series / Re: Another 26.7 "Upgrade Fail...

Last post by Kevin G. - Today at 01:58:42 AM

SO, where do I go from here?

Thinking more of a fresh install...but hate the thought of rebuilding everything. Which begs the original questions...

If I fresh install, will my config file bring everything over including Legacy ISC AND Legacy Rules?
OR will a fresh install of 26.7 include the Rule Migration Tool? OR does a fresh 26.7 install have all of it's own basic rules?

#7

26.7 Series / Re: Another 26.7 "Upgrade Fail...

Last post by drosophila - Today at 01:57:44 AM

Got stuck in a "rebooting now" and returning to the Lobby/Dashboard loop, assumed the update failed. (...) manually reboot the Opnsense box

The update very likely did not fully commence. Run a health audit (System->Firmware->Status-Run an Audit), I bet it'll come up unclean.

#8

26.7 Series / Re: New Source NAT page

Last post by drosophila - Today at 01:49:07 AM

I downloaded the Outbound rules, looked over the CSV file, and then uploaded the CSV file.

Did you then follow that up with removal of the legacy rules? If not, this would be where the excess rule count comes from.

#9

German - Deutsch / Re: Netzwerkproblem

Last post by drosophila - Today at 01:23:10 AM

Genau so verhielte es sich, wenn auf TrueNAS die Subnetzmaske nicht /24, sondern /16 wäre. Allerdings müßte sich die Sensebox dann für den ersten Traceroute auch bei den LAN-Adressen auf dem Backupnetz angesprochen fühlen, was zwar nicht sein sollte, aber ggfs. trotzdem sein könnte (ARP). So sähe es aber auch aus, wenn die Sensebox alle Pakete vom Backupnetz ins LAN stattdessen an sich selber umleitete, was dann ein Routenproblem wäre.

#10

General Discussion / The joys of Google AI

Last post by marjohn56 - Today at 01:07:24 AM

i have just spent a very interesting number of hours with Google AI. It has built,along with my input a Powershell script, or should I say a number of them that monitor my main windows server,  3 docker containers running on two VMs on that machine, a monitor for Caddy which is running on my QNAP, 5 Unifi access points, and a script the monitors what I think are the critical services on Opnsense, i.e. the gateway status, Unbound, these are checked by using the API. If the main server goes down which runs most of the scripts, a script running on the QNAP will send the alarm. Most of the notifications are sent via email, but what happens if the internet/Router go down, in those cases it gets sent using ntfy to our phones and an always awake tablet. Very impressed with Google AI, I have never written Powershell scripts, but they are all working perfectly. I'm glad I've retired!