Recent posts

#1

Tutorials and FAQs / Re: OPNsense aarch64 firmware ...

Last post by Maurice - Today at 04:33:53 AM

OPNsense 26.1.4 aarch64 packages and sets released.

#2

German - Deutsch / Re: Boot-Notice „Generating co...

Last post by drosophila - Today at 04:29:50 AM

Das muß etwas Konfigurationsspezifisches sein. Bei meiner Box kommt zwar auch die ursprüngliche Meldung, aber im Log taucht diese example_simple_page.txt nicht auf (existiert aber am angegebenen Ort, sha256sum 5d7e2aa4f77b0e9154272bd07a916b0864044e81f64cf1d45bcabe61fb9a31fe). Vielleicht bricht es bei mir schon früher ab.

#3

German - Deutsch / Re: "Lahmes" Internet seit Upd...

Last post by drosophila - Today at 03:48:15 AM

Erstmal im Dashboard die CPU- und Netzwerkgraphen begutachten, dann in der Firewall-Liveansicht nach ungewöhnlich vielem Rot suchen. Traceroute, dann iperf3 durch die Firewall schicken, Letzteres ist so ne Sache, weil man eine Gegenstelle braucht. Bandbreitentesttools/-Seiten probieren. Simples ping sollte ungewöhnlich hohe Latenzen offenbaren.

"Lahm" könnte auch von DNS kommen, gerade die beknackten asozialen Netzwerke seuchen mit Fremdservern=DNS lookups rum als gäb's nen Preis dafür. Ist ja auch klar, die zwingen Deinen Rechner ja, mit jedem Tracker der Welt Kontakt aufzunehmen, bevor auch nur das erste Nutzbyte gesendet wird. Und jeder davon macht erstmal den kompletten HTTPS-Handshake, allein dadurch wird's langsam. Hat aber alles nichts mit der Version zu tun, also kann allenfalls ein Startpunkt für weitere Tests sein.

#4

Intrusion Detection and Prevention / Re: Does the prompt "We strong...

Last post by esmreed - Today at 03:37:15 AM

I think that message is just a general recommendation and not dynamically removed after rule changes. If there are no drop actions left in the rules, the configuration should already be fine.

#5

26.1 Series / Re: Upgrade to 26.1.3 - my fir...

Last post by drosophila - Today at 03:25:24 AM

The important thing is that for example your /var/log files won't mess up your system and that's what counts here.

On my system /var/log is written to as root:

-rw-r--r--  1 root  wheel  255345 Mar 11 23:13 messages

The only safeguard against this filling up the drive is to put /var on its own fs, which is how it's done here. On the OPNsense box, /var/log is mounted as tmpfs (running a -nano image, may be different on others).

#6

Q-Feeds (Threat intelligence) / Re: Testing firewall rules wit...

Last post by vk2him - Today at 03:03:43 AM

Should events be populating?

Do you have logging enabled? If I turn off logging, then I don't see any events in that tab just like you even though the number in the widget increases. I normally have logging off to prevent wear on my eMMC memory which is were the logs are written on my Protectli host.

#7

General Discussion / Re: Idea for next version's co...

Last post by drosophila - Today at 02:53:55 AM

So it would be Xenoglossic Xenacanthus? Being a firewall, Xenophobic would likely be most fitting, possibly despite or because of the amount of negative connotation surrounding that word ATM. After all, we really don't want strangers to muck around in our networks, that's what it's all about.

#8

26.1 Series / Re: 26.1.4 , Contents of Alias...

Last post by IsaacFL - Today at 02:51:14 AM

I noticed this prior to today's update also.

#9

26.1 Series / [SOLVED] Re: Large number of f...

Last post by lmoore - Today at 02:40:07 AM

Can you try this patch and see if that's better?

    # opnsense-patch https://github.com/opnsense/core/commit/914e5a20e
    # rm /tmp/tmpcfd_*
    # service configd restart

One lingering file for each cache is expected.  On my end that's 11 files after a reboot. Shouldn't grow that substantially anymore.

Thank you Franco.

I applied the patch as instructed and left it for a while. I observed two of these files in /tmp after the hour rolled over.

I later updated to 26.1.4 and also left it for a while. I now have the 11 files in /tmp

Cheers,

Larry.

#10

Zenarmor (Sensei) / Re: Issue with OPNsense 26.1.3...

Last post by darthrater - Today at 02:07:00 AM

@sy It's still doing it. Submitted via feedback.