19.1 development milestones

[lattera]

That is indeed interesting.

I'll take a look this weekend. HardenedBSD hasn't made any changes to the CAM layer or SDHCI drivers. Regardless, I'll see if I can figure out what's going on. It'll be difficult with me not being able to reproduce, but I'll give it a shot.

[bob@afrinet.eu]

That is indeed interesting.

I'll take a look this weekend. HardenedBSD hasn't made any changes to the CAM layer or SDHCI drivers. Regardless, I'll see if I can figure out what's going on. It'll be difficult with me not being able to reproduce, but I'll give it a shot.

Let me know if you want me to test anything… 

Thanks 

[franco]

> The manufacturer of the hardware is fully compatible with FreeBSD 11.2

Okay, so I want to know:

Did you ask the vendor about this and they said this to you?

If no, please ask the vendor about *HardenedBSD 11.2* support and what might be the issue from their point of view.

If yes, please let us know that they do not intend to support it.

I'm asking for clues to solve this or be able to say the vendor has no interest in supporting particular operating systems. I'm fine either way, but I don't appreciate you pushing this without giving us the background that you seem to have or maybe not gone ahead and collect for us to properly proceed.

[bob@afrinet.eu]

> The manufacturer of the hardware is fully compatible with FreeBSD 11.2

Okay, so I want to know:

Did you ask the vendor about this and they said this to you?

First note that my skills are limited and that I am trying to help with a global issue that you seem to have with HardenedBSD which does not exist with FreeBSD.

"Hardware vendors" do support well known OSes (Linux, FreeBSD) eventually less well known OSes (OpenBSD, NetBSD and FreeNAS), but they unfortunately don't provide support for an OS that is used by a very limited community and couple of years old.

If no, please ask the vendor about *HardenedBSD 11.2* support and what might be the issue from their point of view.

Generally speaking when you fork an OS you try to maintain hardware compatibility with upstream. I understand that this might be difficult, considering the fact that HBSD is changing low level hardware setting to enhance security… 

But considering the very few persons which have taken time to test this seriously as I did, I think that a lot of persons might be impacted by what I have been pointing at. And this is not good. 

If yes, please let us know that they do not intend to support it.

Again, they are providing full support for FreeBSD.
You can not expect to have a hardware vendor selling hundred thousands of unit to support an OS that is four years old.

From my humble point of view, the upstream compatibility must come from HBSD at this early stage.

I'm asking for clues to solve this or be able to say the vendor has no interest in supporting particular operating systems. I'm fine either way, but I don't appreciate you pushing this without giving us the background that you seem to have or maybe not gone ahead and collect for us to properly proceed.

Unfortunately my skills are limited.

I have spend time testing the HBSD, proceeded to multiple install with both OPNsense 19.1ß and HardenedBSD directly. I had systematic failure which have been fully reported in your forum.

I am willing to help and I don't see that many persons which have tested OPNsense with 19.1ß - If you think that my answers are not helpfull, I will stop my tests.

I am highlighting a fact that will hapened to MANY users before It becomes critical (before the launch of your 19.1 version). I hope this is considered as helpful.

[mimugmail]

I am willing to help and I don't see that many persons which have tested OPNsense with 19.1ß - If you think that my answers are not helpfull, I will stop my tests.

Many ppl tested 19.1, but only with their own hardware .. and I'm quite sure no one is willing to buy every hardware to test compatibility. The hardware is quite new and Denverton is reported to work in general with 19.1.
The main problem is your hardware is from a vendor who is not interested in running OPNsense, or better, to it's best that OPNsense run on it's own hardware .. you know what I mean? 

[franco]

> Again, they are providing full support for FreeBSD.

That's a "yes" you spoke with them and "no" they do not in any way will help to figure this out.

Is that correct?


Cheers,
Franco

[bob@afrinet.eu]

> Again, they are providing full support for FreeBSD.

That's a "yes" you spoke with them and "no" they do not in any way will help to figure this out.

Is that correct?

Just to be precise: I am not discussing any "issue" with anyone anywhere beside this forum.

I am reporting an error that I have on a hardware that I am planing to use since I tend to prefer OPNsense to pfSense. This is not a major issue. Simply let me know if I can help anywhere or if these tests are simply useless.

Thanks a lot.

[mimugmail]

http://www.lannerinc.com/products/network-appliances/x86-desktop-network-appliances/nca-1510

Does it look familiar? Most vendors order from Lanner. Try to find a reseller in your area and try this unit.
I'm quite sure it will work.

Also I'm quite sure the distributor from SG5100 is doing all it can to prevent running OPNsense.

When you want to run Windows, you wont buy a Mac, do you?

[lattera]

> Again, they are providing full support for FreeBSD.

That's a "yes" you spoke with them and "no" they do not in any way will help to figure this out.

Is that correct?

Just to be precise: I am not discussing any "issue" with anyone anywhere beside this forum.

I am reporting an error that I have on a hardware that I am planing to use since I tend to prefer OPNsense to pfSense. This is not a major issue. Simply let me know if I can help anywhere or if these tests are simply useless.

Thanks a lot.

Let's all take a deep breath here. We're on the same team.

You mentioned earlier that you compiled a stock FreeBSD 11.2 kernel on this system. Which kernel config did you use? Did you have any custom kernel configuration options enabled or disabled?

[bob@afrinet.eu]

I have synced my kernel source code from FreeBSD and I have used this to comile my Kernel (as far as I can remember) :

https://github.com/opnsense/src/blob/master/sys/amd64/conf/GENERIC


 

[mimugmail]

https://forum.opnsense.org/index.php?topic=10518.0;topicseen

[chrcoluk]

really need to see the hardenedbsd boot dmesg log, to help more, use a manual camera if you have to.

[franco]

There's still no word on how 19.1-BETA images fare in this particular case.

https://forum.opnsense.org/index.php?topic=10135.0

[Nekromantik]

how often do the dev builds get released?
is it one a month or whenever a new build is stable enough?

[maekar]

No, there are different lists to select which include some kind like categorie, e.g. 1M top porn sites, malware domains, ad's etc.

Hi, and you can add the option to blacklist specific domains, in a text-box (like the whitelist option)? For example, block Ads, Malware, etc from the list AND Facebook.com, Twitter.com or any other domain we want to add in a block-list.

That would be enough for us, is the main reason to use pfBlocker in our school: block and unblock (if categories makes an unwanted block) specific websites via DNS.

Thanks!