Traceroute / ICMP issue after 24.7.1 update

[dinguz]

Tested -icmp2 with ipv4 and ipv6 traffic, both forwarded traffic as well as traffic originating from the firewall itself, and everything seems to be working now. I'd say ship this one.

[motoridersd]

Hmm, icmp2 is not working for me. Am I missing something?

Code: [Select]

opnsense-update -zkr 24.7.1-icmp2
and rebooted. Can see that I am running "pf_icmp-n267786-b4771b598e90" but pings and traceroute don't work from the firewall or behind it.

[franco]

Well, the obvious question would be did any kernel on 24.7 ever work on your end?


Cheers,
Franco

[Ben S]

Just as another data point, icmp2 works for me, IPv4+6, local + forwarded ICMP traceroutes tested.  Thanks to all involved!

[motoridersd]

Well, the obvious question would be did any kernel on 24.7 ever work on your end?


Cheers,
Franco

No, I upgraded from 24.1.10 directly to 24.7.1 and that's when I noticed pings weren't working. I don't use them daily on my network, but often do and had never noticed they didn't work. My first indication they were broken was seeing the Gateway as "down" in the new dashboard.

[doktornotor]

My first indication they were broken was seeing the Gateway as "down" in the new dashboard.

I don"t think we are discussing the same issue at all. I'd suggest to start a new topic.

[viruslab]

I have the same issue
tracert doesn't work as it suppose to work
If I do it in the opnsense GUI it works fine.

[fuomag9]

In the name of science, why not? It's online.

Seems like it's finally working with IPv4 and IPv6... Waiting for others here to chime in:

Code: [Select]

opnsense-update -zkr 24.7.1-icmp2
and reboot.

Confirm this works as well

[bringha]

Hi there,

I can also confirm that the -icmp2 kernel works fine here, both ipv4 and ipv6

br br

[Wirehead]

Ran into gateway monitoring nonsense and I thought I was going insane 

Code: [Select]

opnsense-update -zkr 24.7.1-icmp2

-> fixes things beautifully

[Yoshi-DE]

With 24.7.1-icmp2 i still have problems on the ipv6 link.

sometime packetloss on all ipv6 addresses ... ipv4 is working.

16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=60 hlim=117 time=5.803 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=61 hlim=117 time=5.750 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=62 hlim=117 time=5.698 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=63 hlim=117 time=5.712 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=79 hlim=117 time=2081.821 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=80 hlim=117 time=1028.673 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=81 hlim=117 time=10.623 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=82 hlim=117 time=5.689 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=83 hlim=117 time=5.617 ms
16 bytes from 2a00:1450:4001:81c::2003, icmp_seq=84 hlim=117 time=5.603 ms

16 bytes from 2a01:xx icmp_seq=50 hlim=58 time=13.888 ms
16 bytes from 2a01:xx, icmp_seq=51 hlim=58 time=13.758 ms
16 bytes from 2a01:xx, icmp_seq=52 hlim=58 time=13.216 ms
16 bytes from 2a01:xx, icmp_seq=53 hlim=58 time=13.322 ms
16 bytes from 2a01:xx, icmp_seq=70 hlim=58 time=1412.567 ms
16 bytes from 2a01:xx, icmp_seq=71 hlim=58 time=367.940 ms
16 bytes from 2a01:xx, icmp_seq=72 hlim=58 time=13.363 ms

With 24.7.1-pf4 and 24.7 Kernel no issues. Switch back to 24.7.1-icmp2 and the issue are back.

[owltycoon]

With 24.7.1-pf4 and 24.7 Kernel no issues. Switch back to 24.7.1-icmp2 and the issue are back.

I'm experiencing the same issue. For example, all my Android devices frequently think they are offline for a few seconds at a time—this happens a couple of times an hour that I've noticed.

The issue seems to occur inconsistently, which makes it challenging to pinpoint.

If you need any logs or additional information, please let me know. I'm happy to help.

[staticznld]

With icmp2 kernel i see multiple reconnects of a google chromecast "google tv" in my unifi dashboard.

Running kernel pf4 for a while now. And it looks like the reconnects are gone.

Maybe the reverts are the best for 24.7.2

[franco]

Maybe the reverts are the best for 24.7.2

I get your sentiment but it looks better to move ahead and follow-up in the FreeBSD ticket. Who knows how long it will take to fix all use cases?


Cheers,
Franco

[MeltdownSpectre]

Maybe the reverts are the best for 24.7.2

I get your sentiment but it looks better to move ahead and follow-up in the FreeBSD ticket. Who knows how long it will take to fix all use cases?


Cheers,
Franco

Hi Franco,

Is it safe to expect the 24.7.2 release this week?