Recent posts

#21

German - Deutsch / Re: Eigener DNS bei einer IPv6...

Last post by n3 - Today at 04:55:50 PM

Danke euch beiden für die zwei Beiträge. Das hilft es besser einordnen zu können. Viele Wege führen nach Rom und so kann man besser einschätzen, welchen Weg man gehen möchte. Aktuell läuft mein System wie im HowTo von @meyergru beschrieben. IPv6 First klingt interessant, weil ich in vielen Fällen gerne ein e
Early Adopter bin, aber ich muss schauen, ob mir der Mehraufwand es wert ist.

#22

25.7, 25.10 Series / Re: CALL FOR TESTING: IPv6 imp...

Last post by Maurice - Today at 04:48:28 PM

Then the code in dhcp6c repo wasn't pulled correctly?

Pulled, compiled and installed correctly.

Or are you using the "no release" option, too?

Nope.

But I now made the next step and switched to opnsense-devel (26.1.b_143). ifconfig now shows pltime and vltime for the GUA on the tracking LAN interface. So it seems devel is indeed required for this to work.

Did not apply the multi-dhcp6c patch yet, maybe tomorrow.

Great new radvd features by the way, like PREF64! 👍

Cheers
Maurice

#23

25.7, 25.10 Series / Re: 25.7.11 GeoIP [SOLVED]

Last post by MoonbeamFrame - Today at 04:27:37 PM

OK. Now resolved. The problem was caused by the rebuild order.

I did the initial rebuild from a fresh download of the installation sources. Restored the config, then applied updates.

Doing the rebuild, then applying the updates, then restoring the backup works.

#24

25.7, 25.10 Series / Re: OPNSense throwing multiple...

Last post by Patrick M. Hausen - Today at 04:16:39 PM

No. Use the web interface to enable SSH and log in. There is SSH for every desktop operating system imaginable.

#25

25.7, 25.10 Series / Re: OPNSense throwing multiple...

Last post by BigFreddy - Today at 04:04:36 PM

You type D M E S G followed by the ENTER key after logging in to the firewall via SSH or connected to the console and selecting "8" for a shell. All lower case letters.

Is there a way to do this from the web interface ?

#26

25.7, 25.10 Series / Re: OPNSense throwing multiple...

Last post by Patrick M. Hausen - Today at 04:02:40 PM

You type D M E S G followed by the ENTER key after logging in to the firewall via SSH or connected to the console and selecting "8" for a shell. All lower case letters.

#27

25.7, 25.10 Series / Re: What is the official migra...

Last post by stanthewizzard - Today at 04:00:29 PM

Hello all :)

Something is very bothering
with ISC DHCPv6
Subnet Subnet mask Available range are prepopulated

Not the case with kea or dnsmasq. Or am I missing something ?

Thanks for clarifications

#28

25.7, 25.10 Series / Re: hostwatch at 100% CPU

Last post by crlt - Today at 03:58:59 PM

Nothing is going to be worse, just disable it.

Interfaces: Neighbors: Automatic Discovery

It fills in a missing feature people coming from consumer routers like Fritzbox got used to and frequently demanded: show an overview of all devices in my network.

More useless garbage that we didn't ask for..... Why can't this be a plugin that those folks can install separately and not brick our routers.... I have a 16Gig hostwatch log this morning, lose gui, forced to restart to recover...  Definitely not a professional group here....

I don't think that's fair to say as it was a popular request. I believe that it's not a plugin because it's developed by the opnsense team and you can simply disable it. With all that said it probably could have shipped disabled by default.

I manage a few personal firewalls across a few locations and I always read the change log and forums before updating so I knew to look out for this potential issue. Perhaps you should consider doing that in the future.

#29

25.7, 25.10 Series / Re: Hostwatch - high disk writ...

Last post by xpendable - Today at 03:51:55 PM

I also had higher memory consumption with an increasing swap file size as well. Noticed that hostwatch was enable on all interfaces, as such it was logging IPs on the WAN interface as well. From my understanding this is targeted at keeping track of IPs on your local network, so shouldn't the WAN interface be excluded by default?

Odd thing is I disabled the service, selected all interfaces except WAN and re-enabled the service. However now the service refuses to start and nothing in the hostwatch logs says why. The system log reports:

Code Select Expand

[meta sequenceId="2"] <6>[132593] pid 22972 (hostwatch), jid 0, uid 0: exited on signal 6 (no core dump - bad address)
So for now I just left it disabled since it seems to provide relatively little value.

#30

25.7, 25.10 Series / Re: OPNSense throwing multiple...

Last post by BigFreddy - Today at 03:51:23 PM

This screams "hardware problem". Either memory, CPU, overheating, ... or a dying SSD/disk.

What does "dmesg" output?

What makes it obvious it's a hardware problem ? Is it the "b'Bus error'" error ?
How can I check dmesg output ?