Recent posts

#21

26.1 Series / Upgrade success w/Zenarmor - k...

Last post by rfox - Today at 05:11:21 PM

Just wanted to report another successful upgrade from GUI to 26.1_4 from 25.7.11_9 on a home lab Proxmox VM instance . . . I decided to keep ISC DHCP for now, but not sure about converting to new ruleset GUI (Tried in a test instance with simple install and all worked well)

My rules are not very complex, although I have multiple VLANs and setup Firehole many moons ago as floating rules - so worried about breakage.

Should I wait a bit or take the plunge with new rules ??  Fun thing, with snapshots and VM backups - can always revert ;-)

Great update!  Many Thanks . . . and congrats!

[The Pledge of the Network Admin]

#22

General Discussion / The pledge of the Network Admi...

Last post by Patrick M. Hausen - Today at 05:09:35 PM

The Pledge of the Network Admin

This is my network.
It is mine,
or technically, my employer′s.
It is my responsibility,
and I care for it with all my heart.
There are many other networks a lot like mine,
but none are just like it.
I solemnly swear
that I will not mindlessly paste from HOWTOs.

-- Peter N.M. Hansteen, "The Book of PF, 4th Edition"

#23

25.7, 25.10 Series / Re: LDAP User + OpenVPN

Last post by borys.ohnsorge - Today at 05:09:33 PM

One more picture.

#24

25.7, 25.10 Series / LDAP User + OpenVPN

Last post by borys.ohnsorge - Today at 05:08:36 PM

Hi,

I'm observing strange behavior with the LDAP user that's used to create an OpenVPN account in my OPNsense 25.10_2 Business Edition. Specifically, I can't find the certificate generated for one of the users anywhere, even though the user is physically connected (or at least that's what the OpenVPN connection status indicates). It seems as if the certificate generated for this user disappeared from the configuration file at some point, yet OPNsense itself retains it and allows it to connect to the OpenVPN server.

Am I missing something?

#25

26.1 Series / Re: The upgrade was aborted du...

Last post by Patrick M. Hausen - Today at 04:42:07 PM

Damaged file system. I would reinstall with ZFS.

#26

26.1 Series / Re: The upgrade was aborted du...

Last post by eric_zrgoq14k - Today at 04:37:51 PM

Ok, things have gone haywire. I am on my mobile connection now.
I started the update. Things looked normal. Then I lost the connection. Tried rebooting after a while and still no connection.

I have opnsense running on a dedicated zimaboard. Connected the board to a screen and I made a screenshot of where it hangs.

Looks like a problem

Cheers, Eric

#27

26.1 Series / Re: Destination NAT: Configura...

Last post by franco - Today at 04:36:12 PM

The following should fix the write on your end without any prior data, but again not why it was lost.

# opnsense-patch https://github.com/opnsense/core/commit/40cb82128d


Cheers,
Franco

#28

26.1 Series / Re: hostwatch db grows rapidly

Last post by kopfschmerzen - Today at 04:28:07 PM

When you have stopped it try to remove the extra files named hosts.db-* and restart.

Very odd case.


Cheers,
Franco

That seemed to do it, thank you very much.

Code Select Expand

root@firewall:/var/db/hostwatch # ls -lah
total 10631
drwxr-xr-x   2 hostd hostd    5B Feb  3 10:26 .
drwxr-xr-x  25 root  wheel   35B Feb  3 09:28 ..
-rw-r--r--   1 hostd hostd  4.1M Feb  3 10:27 hosts.db
-rw-r--r--   1 hostd hostd  256K Feb  3 10:27 hosts.db-shm
-rw-r--r--   1 hostd hostd  119M Feb  3 10:27 hosts.db-wal


#29

26.1 Series / Re: Imported Firewall rules : ...

Last post by franco - Today at 04:23:43 PM

Yes, we're working on the visibility part (default filter).


Cheers,
Franco

#30

26.1 Series / Re: hostwatch db grows rapidly

Last post by franco - Today at 04:14:46 PM

When you have stopped it try to remove the extra files named hosts.db-* and restart.

Very odd case.


Cheers,
Franco