No internet connections after upgrade from 22.7.6 to 22.7.8

[FBachofner]

I updated a number of OPNSense 22.7.6 instances yesterday night by remote connection.  All upgrades were "successful."

One installation, however, now has no devices which can connect to the internet.  Meanwhile, I can still connect to the router remotely and can see all expected devices listed in /status_dhcp_leases.php.  However, I can not connect to any of those machines by VNC, SSH or other methods for which ports are open.

This sounds like a firewall configuration problem (although I changed nothing before or after the upgrade!), so i turned it off (temporarily).  I did this at /system_advanced_firewall.php under Miscellaneous/"Disable all packet filtering."  [ I recognize this is a "bazooka"-type, acceptable for quick testing-only "solution," but the devices could still NOT connect out nor I in. ]

I started worrying that the modem was doing something weird, but having a user at the facility connect a computer directly to the modem immediately enables internet access via that (i.e. directly connected) device (Arris SB6183, basically a "dumb" device which allows for essentially no end-user configuration; the modem is at the same exact hardware and software revisions as other installations which are working fine under OPNSense 22.7..

OPNSense health check indicates no problems . . .

Code: [Select]

***GOT REQUEST TO AUDIT HEALTH***
Currently running OPNsense 22.7.8 (amd64/OpenSSL) at Mon Nov 21 13:31:12 PST 2022
>>> Check installed kernel version
Version 22.7.7 is correct.
>>> Check for missing or altered kernel files
No problems detected.
>>> Check installed base version
Version 22.7.7 is correct.
>>> Check for missing or altered base files
No problems detected.
>>> Check installed repositories
OPNsense
>>> Check installed plugins
os-ddclient 1.9_1
os-wireguard 1.13_1
os-wol 2.4_1
>>> Check locked packages
No locks found.
>>> Check for missing package dependencies
Checking all packages: .......... done
>>> Check for missing or altered package files
Checking all packages: .......... done
>>> Check for core packages consistency
Core package "opnsense" has 63 dependencies to check.
Checking packages: ................................................................. done
***DONE***

Any and all ideas would be most welcome.

Thank you in advance!!

[Demusman]

Can you ping anything on the internet?
Could just be a DNS problem.

[FBachofner]

Hi @Demusman

Can you ping anything on the internet?
Could just be a DNS problem.

From OPNSense-Router-attached devices, NO.

From within OPNSense itself (using the applet at /diag_ping.php ), yes.

[FBachofner]

WRT @Demusman 's DNS idea, there may be something to it.

This installation has all Windows (10, Pro) machines.  Who knows if some upgrade (possibly automagically applied over the weekend) caused a DNS configuration change?!

Interestingly, the many other OPNSense upgrades I performed yesterday all have Linux devices attached -- with no complaints of internet connectivity.

That said, I doubt that a DNS configuration issue would cause me to no longer have remote access.  Then again, I have witnessed Windows close off ports like that for RDP right after upgrades were applied.

I'll have a user in the office check some related settings tomorrow morning.


Additional input from OPNSense gurus still sought!  TIA