Update error

[gpb]

Yeah...my rules were working too and the GeoIP data changed and that's what caused my issue.  Somehow the location of that IP changed countries...so...just something to be aware of if you have rules around those.  Either way, easy enough to test...just turn on logging for your rules and see where it's getting dropped.

[HenrysCat]

Logging already enabled 89.149.211.205 not in list of blocked ip's

[gpb]

Good...you could try adding a temporary firewall rule...at the top...allow icmp to 89.149.211.205...if that works, it's another rule blocking it.  Would love to know what the problem ultimately was.  Cheers.

[HenrysCat]

Thanks just tried it, still the same.

[Lynxcat]

The old release is here :
https://pkg.opnsense.org/releases/

[HenrysCat]

I have reinstalled a fresh system of 22.1 and tried to restore a backup made from v21 and get this error?

Code Select Expand

The following input errors were detected:

    The configuration could not be restored.

[HenrysCat]

I have made some progress, I think.
I had made a backup config of the v22.1 system before I reinstalled (v22.1) and thought I would try and restore each section on by one, after every section was restored it rebooted and checked for updates.

First attempt,

Code Select Expand

OPNsense Additions OK
Bridge Devices Not found
SSL Certificate Authorities Breaks everything no internet (had to reset defaults and start again)

After a reset defaults, second attempt starting from SSL Certificates,

Code Select Expand

SSL Certificates OK
DHCP Server OK
DHCPv6 Server Not found
DHCP Relay Not found
DHCPv6 Relay Not found
Dnsmasq DNS Not found
Dynamic DNS Not found
RFC 2136 Not found
Firewall Rules OK
Gateways OK
GIF devices Not found
IGMP Proxy Not found
Universal Plug and Play Not found
Interfaces OK
IPsec Not found
LAGG Devices Not found
Load Balancer OK
Network Address Translation OK
System Notifications Not found
Network Time OK
DNS Filter Not found
OpenVPN Not found
Point-to-Point Devices OK
PPTP Server Not found
Proxy ARP Not found
RRD Data Not found
SNMP Server OK
Static routes Fatal error: Uncaught OPNsense\Core\ConfigException: no valid config loaded in /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php:256 Stack trace: #0 /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php(188): OPNsense\Core\Config->checkvalid() #1 /usr/local/opnsense/mvc/app/library/OPNsense/Core/Config.php(237): OPNsense\Core\Config->fromArray(Array, Object(SimpleXMLElement), 'ca') #2 /usr/local/etc/inc/config.inc(147): OPNsense\Core\Config->fromArray(Array) #3 /usr/local/www/diag_backup.php(63): write_config('Restored sectio...') #4 /usr/local/www/diag_backup.php(214): restore_config_section('staticroutes', '
System tunables OK
Syslog OK
System OK
Unbound DNS OK
VLAN Devices Not found
Dashboard Widgets OK
Wireless Devices Not found
Wake on LAN Not found


Static routes and interesting one there but I was able to continue, all good so far updates work, so I decided to try OPNsense Additions again, this being the last section to restore and the problem is back.

Code Select Expand

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 22.1.2_2 (amd64/OpenSSL) at Wed Mar 23 21:33:30 GMT 2022
Fetching changelog information, please wait... fetch: transfer timed out
Updating OPNsense repository catalogue...
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/meta.txz: Operation timed out
repository OPNsense has no meta file, using default settings
pkg: https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/latest/packagesite.txz: Operation timed out
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

And another thing I noticed is nothing under Services > Intrusion Destection has been restored?

Any ideas?

[HenrysCat]

Finally tracked down the problem, the top 3 settings under Interfaces: Settings

Hardware CRC    Disable hardware checksum offload
Hardware TSO    Disable hardware TCP segmentation offload
Hardware LRO    Disable hardware large receive offload

Where all unticked, so ticked them to disable and all working as it should now.