Recent posts

#1

Virtual private networks / opnsense and Azure WanHub

Last post by russellwhite - Today at 04:38:14 PM

Hi, we have been using opnsense for around four years. We use them to create a vpn from each of our sites to azure WANHub. This has worked without issue until started updating our ipsec VPNs earlier this year, as the old method was being deprecated. Since then we have had constant issues. For example today a site that has been working without issue for several weeks suddenly dropped connection. Restarting the VPN service will appear to connect, and will show as connected in the WANhub but we only see traffic in one direction. Nothing has been changed we see no blocked traffic. Often a reboot will resolve the issue. The new method of ipsec is different to the old method in term of automatic firewall rules etc and we have taken account of those. But each time I think I have found a fix and everything is working a few weeks later the site drops. Be interesting t know if anyone else uses Azure WAN and if they have had issues. A case in point the site that went down about 30 minutes ago is now re connected and I have no idea why.

#2

Development and Code Review / Re: Go With The Flow - free pl...

Last post by Monviech (Cedrik) - Today at 04:22:41 PM

I know I could download the package and extract it but not having the source code browsable (since its in a private repo) is a bit meh.

#3

Development and Code Review / Go With The Flow - free plugin...

Last post by toby - Today at 04:06:20 PM

Go With The Flow (GWTF) is a plugin I'm actively working on, so there are frequent updates.
It's freely available, so have at it.

https://github.com/tobydoig/gowiththeflow-pkg-repo

I started it because I wanted to see live traffic graphs showing host names, not IP addresses. I tried ntopng (didn't like it) and ZenArmor (required a license), the built-in graphs and Top Talkers didn't show what I wanted (and showed IPs). So my live graph and details page shows local and remote host names, it pulls local ones from dnsmasq and sniffing dns etc. DPI is going to be worked on this week.

My needs are simple, my home network is simple, I'm not interested in pushing the limits with a home lab, so I'm not trying to compete with the full enterprisey features that other plugins have. That said, I'm open to adding features that may be beyond my direct needs.

Anyway, have a play. It's free and easy to install.
toby

#4

General Discussion / Re: [SOLVED] acme.sh www.mydom...

Last post by tofflock - Today at 04:04:54 PM

I could solve my issue by resetting the ACME Client like fraenki described on github.
https://github.com/opnsense/plugins/issues/3154

OpnSense -> Services -> ACME Client -> Settings -> Reset ACME Client

After that I could successfuly automaticaly renew all certs.

Thanks all  :)

Still 2026 ;-)
This post was very helpful to me.  I'd clearly forgotten about doing the reset when I rebuilt a few months ago.

PeterF

#5

Zenarmor (Sensei) / Re: Zenarmor and local hostnam...

Last post by toby - Today at 03:53:55 PM

Hello,

I am trying to make Zenarmor display local hostnames instead of only IP addresses in reports/sessions, but I cannot make it work despite multiple tests.

Found the same problem, I get you need a paid subscription to solve this and I think that's all BS. So...I started writing my own plugin. It's freely available, is under active development so currently seeing frequent updates.

It's not a replacement for Zenarmor, not trying to match the features. I'm doing this primarily for my own needs. Having said that, I'm happy to consider feature requests.

There are a few reports it exposes, but my focus right now are the live screens which shows source and destination traffic (with host names where possible, not IPs). Local host names are pulled from Dnsmasq. Not doing DPI yet but that is next on the list, so will get even better at showing actual host names.

https://github.com/tobydoig/gowiththeflow-pkg-repo

toby

#6

26.7 Series / Re: Unbound stopps suddenly

Last post by Tinus - Today at 03:21:41 PM

The message "failed to reclaim memory" is sent by the operating system kernel if it runs out of memory and kills a process to avoid crashing the complete system.

I can see two reasons:

• The hardware or VM just has too little memory for what you're trying to do.
• You're loading a lot of large block lists which consume unexpectedly large amounts of memory.

So I suggest checking if the system has a reasonable amount of memory to work with, and if not, you either have to do less (less large blocklists, disable things that consume large amounts of memory) or increase the amount of available memory.

#7

26.7 Series / Re: Unbound stopps suddenly

Last post by Kinerg - Today at 03:20:07 PM

Unbound temporarily consumes a lot of RAM when rebuilding Blocklists, maybe even more in recent versions. How much RAM do you have?

#8

26.7 Series / Re: can't find where to delete...

Last post by Monviech (Cedrik) - Today at 02:54:55 PM

You can clean up old config in the GUI via "System: Configuration: Defaults - Components tab"

#9

26.7 Series / Re: can't find where to delete...

Last post by dseven - Today at 02:08:23 PM

OK, so I think you have some leftover ISC DHCP config, and that's what's tripping you up. If you have the plugin installed, you could delete the static mappings using the webUI. If you don't have the plugin, I *think* you could use `pluginctl -f dhcpd` to flush the old config, then perhaps reboot (to clear out the static ARP entries)... but I'd generally defer to franco on the proper way to clean up things like this...

#10

26.7 Series / Re: Fatal error: Uncaught Erro...

Last post by franco - Today at 01:35:33 PM

Yeah no I tried to safeguard this but then the next function complains about it missing if it really is missing.

I don't see how we can make this safer.  If the essential file is not readable it's game over, but that goes for most files from core.


Cheers,
Franco