Rolled back for now

[P007]

New to the forum, but I have been using OPNsense for a few years now.

I have had to switch back to version 24.1.10_8, having tried the latest version 24.7.1 for a few days.

The new version 24.7.1 is great but stops a few things working as they did in version 24.1.10_8.

1. Re-boot and Shutdown from the UI.
If I try to reboot or shutdown OPNsense from the UI nothing happens.  If I wait a while the screen returns to the default desktop.

2. Crowdsec: Probably related to the above, but if I un-install Crowdsec, I can reboot and shutdown using the UI.

3. Unbound DNS, I think occasionally, not blocking domains in its block list.  I say think because when I look at the report, blocked domains are listed as passed.

4. Having to reboot/switch off then on OPNsense when devices connected to different VLANs/Subnets fail to connect to the internet.


Apologies if the above has already been listed in the forum.

[delurk]

Hi,

I also want to perform a rollback (I’m facing an IPv6 issue) and I’ve only found this tool "opnsense-update -kr", but it doesn't seem possible to do it with a major version. Did you use a snapshot or did you reinstall everything with an older firmware? If you used an older firmware, where did you obtain it? Thanks in advance.

[P007]

Hi,

I copied my config then re-installed version 24.1.10_8.

I tend to keep a copy of previous images, locally, before upgrading.

But try OPNsense’s download page for your region. e.g.

https://quantum-mirror.hu/mirrors/pub/opnsense/releases/24.1/
or
https://www.mirrorservice.org/sites/opnsense.org/releases/24.1/

I hope this helps.

[cloudz]

You can use the opnsense-revert command. I used this to revert to 24.7.
Don't forget to revert your kernel as well and reboot.

[franco]

opnsense-revert is a specialist debug tool for the most part doing only partial package-based reverts. Downgrades are not easily supported, especially over major version boundaries.


Cheers,
Franco

[cloudz]

@Franco : for me the revert of the opnsense package and the kernel was sufficient to clear all my IPv6 issues at this moment.

It was my last resort before doing a full reinstall.

[delurk]

Thanks @cloudz. I followed your advice and reverted to 24.7_9. Everything is back to normal regarding my IPv6 issues.

[cloudz]

Keep track of your CPU load / interrupts. I still see those go through the roof from time to time resulting in spikes/higher latency but no drops. Yesterday it was crowdsec that kept peaking. Removed the plugin too.

[dwoodroofe]

Confirmed roll-back to 24.7.1 resolves issue

     - SSH to appliance
     - Select ( Shell
     - Command:   opnsense-revert -r 24.7.1 opnsense
     -Reboot

Tested on 2 so far and both rebooted and VPN's came online.