Create a cron job

[FredFresh]

Hi , I want to create a job following this https://docs.opnsense.org/development/backend/configd.html
that periodically perform a trace-route from internal gateway A to internal ip B

can you help me understand how to fill the .conf file for this ?

Thanks

[franco]

It's rather simple -- suppose we have a file actions_foobar.conf:

[NameOfCommand]
command:/the/command/to/execute
parameters:
type:script
message:insert what it does here for logging
description:Only with this it will show in the cron GUI

The command should execute as:

# configctl foobar NameOfCommand

Reminder: configd needs a restart to register new commands to be able to call them.


Cheers,
Franco

[FredFresh]

Hi Franco, yes I understad the guide (I already used it) but I do not know how to properly populate the .conf file with the command that perform the traceroute from A to B.

Thanks

[Patrick M. Hausen]

Is A an address on your OPNsense?

[FredFresh]

A is a gateway and B is an IP.

Maybe I found a suitable possible example:

traceroute -g 10.3.0.5 128.182.0.0

would this work considering 10.3.0.5 the gateway and the 128.128.0.0 the ip?

thanks

[Patrick M. Hausen]

To trace from A to B the traceroute command MUST run on system A.

[FredFresh]

yes sorry, i just pasted the example from freebsd page

the command would be something like traceroute -g 192.168.2.1 172.16.7.1 (where both these addresses are from internal subnets)

[Patrick M. Hausen]

And 192.168.2.1 is an interface on your OPNsense?

[FredFresh]

yes

[Patrick M. Hausen]

Then you can just run

Code Select Expand

traceroute -s 192.168.2.1 172.16.7.1
Lose source routing (-g option) is a mechanism from the bronze age of the Internet and not used/followed by modern systems, anymore.

[FredFresh]

I create here /usr/local/opnsense/service/conf/actions.d  the file actions_VPN_GW_CZ_routes.conf

inside there is this

[trace]
command:traceroute -s 192.168.2.1 10.2.2.1
parameters:
type:script
message:automatic traceroute to VPN CZ gateway
description:automatic traceroute to VPN CZ gateway

I reset the service using
service configd restart

I can see the new line in the CRON drop down menu

But if I try to run
configctl VPN_GW_CZ_routes trace

It returns
Action not allowed or missing

What I am doing wrong?
thanks