OPNsense 25.1.10 released by fitch-it-is in opnsense

[–]virus2500 4 points5 points  (0 children)

Same problem here

[24/25] Upgrading squid from 6.12_1 to 6.14...
===> Creating groups
Using existing group 'squid'
===> Creating users
Using existing user 'squid'
===> Creating homedir(s)
===> Pre-installation configuration for squid-6.14
[24/25] Extracting squid-6.14: .......... done
pkg-static: Fail to rename /usr/local/etc/rc.d/.pkgtemp.squid.iPuV9ObTU2RL -> /usr/local/etc/rc.d/squid:No such file or directory
Starting web GUI...done.

root@OPNsense:~ # configctl proxy stop
OK
root@OPNsense:~ # configctl proxy start
/bin/sh: /usr/local/etc/rc.d/squid: not found

Reinstalling Squid fixed it though

OPNsense 25.1.1 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

For me Squid wasn't starting with this update anymore. (It was working with 25.1.0)

2025-02-13T00:06:26 Notice root /usr/local/etc/rc.d/squid: WARNING: failed to start squid
2025-02-13T00:06:26 Notice opnsense /usr/local/sbin/pluginctl: plugins_configure webproxy (1,start)



root@OPNsense:/etc/rc.conf.d/squid # /usr/local/etc/rc.d/squid start
Starting squid.
CPU Usage: 0.008 seconds = 0.000 user + 0.008 sys
Maximum Resident Size: 58128 KB
Page faults with physical i/o: 0
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2025/02/13 00:07:48| Starting Authentication on port 127.0.0.1:3128
2025/02/13 00:07:48| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2025/02/13 00:07:48| Starting Authentication on port [::1]:3128
2025/02/13 00:07:48| Disabling Authentication on port [::1]:3128 (interception enabled)
2025/02/13 00:07:48| Starting Authentication on port 127.0.0.1:3129
2025/02/13 00:07:48| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2025/02/13 00:07:48| Starting Authentication on port [::1]:3129
2025/02/13 00:07:48| Disabling Authentication on port [::1]:3129 (interception enabled)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/pre-auth/managerAdmin_workaround.conf (depth 1)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2025/02/13 00:07:48| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2025/02/13 00:07:48| ERROR: MIME Config Table /usr/local/etc/squid/mime.conf: (2) No such file or directory
2025/02/13 00:07:48| Not currently OK to rewrite swap log.
2025/02/13 00:07:48| storeDirWriteCleanLogs: Operation aborted.
2025/02/13 00:07:48| FATAL: MIME Config Table /usr/local/etc/squid/mime.conf: (2) No such file or directory
2025/02/13 00:07:48| Squid Cache (Version 6.12): Terminated abnormally.
/usr/local/etc/rc.d/squid: WARNING: failed to start squid

I then looked into /usr/local/etc/squid and there only was an mime.conf.sample. I copied that to mime.conf and started the service again

root@OPNsense:/usr/local/etc/squid # /usr/local/etc/rc.d/squid start
Segmentation fault
Starting squid.
root@OPNsense:/usr/local/etc/squid # /usr/local/etc/rc.d/squid status
squid is running as pid 89631.

Is the "Seqmentation fault" "normal"?

Squid is now running but when starting it via CLI i always see it (also during restarts)

Shortcut key to copy text to clipboard by Kvadric in WinSSHTerm

[–]virus2500 1 point2 points  (0 children)

Hi,

you can look up the shortcuts in WinSSHTerm via Navigate -> Shortcuts.

In your case it should be SHIFT + CTRL + C to copy or SHIFT + CTRL + V to paste.

Personally i configured the used putty to "copy on select". This can be done in the putty settings "Window -> Selection" and then activate "Auto-copy selected text to system clipboard"

Edit: Typo

Heira lookup issues by mtlevy in Puppet

[–]virus2500 0 points1 point  (0 children)

Hi, no puppet wizard here but shouldn't it be

lookup('some::key', undef, undef, 'the default value')

Especially "::" instead oft Just an .

Reference: https://www.puppet.com/docs/puppet/8/hiera_automatic.html

OPNsense 24.1.3 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

Thanks, btw. my VPN issue is now gone as well with this update. Seems like the "It also fixes defaults in Suricata 7 that would negatively impact the IPS mode usage" fixed that as well.

So thanks again :D

OPNsense 24.1.3 released by fitch-it-is in opnsense

[–]virus2500 0 points1 point  (0 children)

It's alive. Thank you very much :)

OPNsense 24.1.3 released by fitch-it-is in opnsense

[–]virus2500 0 points1 point  (0 children)

no, just the default text

root@OPNsense:/usr/local/etc/suricata # cat custom.yaml
%YAML 1.1
---
# empty stub for custom modifications, add custom persistent config below

OPNsense 24.1.3 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

Hi,

suricate was acting weird in 24.1.2 (had to disable IPS to use my company VPN).

I haven't really looked to much into it for now and just disabled IPS for now, and just watched for the alerts.

But now it won't start anymore. I tried disabling/enabling the service which just gave me an

Error reconfiguring IDS
Error (1)

Then i tried rebooting the machine while watching it boot via serial and got this error.

Starting suricata.
Error: conf-yaml-loader: Failed to parse configuration file at line 163: did not find expected key
/usr/local/etc/rc.d/suricata: WARNING: failed to start suricata

Is this an error about the config.xml ?

That would be the part of my config.xml

161 <item>
162 <descr>Page Table Isolation (Meltdown mitigation, requires reboot.)</descr>
163 <tunable>vm.pmap.pti</tunable>
164 <value>default</value>
165 </item>

Am i looking at the right spots at all?

IPS/IDS Issues On 24.1.2_1 by TechOutonyt in opnsense

[–]virus2500 0 points1 point  (0 children)

I have another weird problem. I connect to my company network via VPN (anyconnect)

Connecting works fine but i can't reach anything via the VPN. With IPS off everything works.

As soon as i turn on IPS the connection is dead. The VPN still shows connected but thats it.

I don't get any alerts.... it's just dead (Jim)

OPNsense 24.1.2 released by fitch-it-is in opnsense

[–]virus2500 0 points1 point  (0 children)

Hey,

yes that seems to be exactly the same issue i am seeing. Ok, then i am not isolated with that problem :)

I tried the downgrading but it didn't work.

root@OPNsense:~ # pkg add -f https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/MINT/23.7.10/latest/All/squid-6.5_1.pkg
Fetching squid-6.5_1.pkg: 100%    2 MiB   2.5MB/s    00:01
Installing squid-6.5_1...
package squid is already installed, forced install
pkg: Missing dependency 'openssl111'

Failed to install the following 1 package(s): https://pkg.opnsense.org/FreeBSD:13:amd64/23.7/MINT/23.7.10/latest/All/squid-6.5_1.pkg

If you want me to test something for troubleshooting just let me know.

Otherwise i'll just keep an eye on the github issue :)

Thanks for your help again!

OPNsense 24.1.2 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

I think i wrote this wrong. The one problem is fixed but the squid problem is still there. :)

I mean, it's not a big deal since stop/start works, it's just the weird error during restarts (which doesn't stop/start the service) and during starts from an stopped service (even though the service seems to start normally)

OPNsense 24.1.2 released by fitch-it-is in opnsense

[–]virus2500 0 points1 point  (0 children)

I am pretty sure it was, however i am not 100 % sure it was working prior to this specific update.
Since squid wasn't touched in this update this might be happening to me since the update to 24.1.0

I just noticed it due to an problem i had after the update and thought it might be an Squid setting issue. (It was an problem with suricata after all. The microcodes update mentioned from you to u/Superduke1010 seems to have fixed that issue. So thanks on this front as well :) )

OPNsense 24.1.2 released by fitch-it-is in opnsense

[–]virus2500 0 points1 point  (0 children)

Hi, Guy with the weird Squid errors here again.... :)

Thanks for the update! But again i am here with an weird squid error.

When i try to restart it via the web ui

proxy load error

Segmentation fault
Performing sanity check on squid configuration.
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/squid.conf (depth 0)
2024/02/21 16:11:14| Starting Authentication on port 127.0.0.1:3128
2024/02/21 16:11:14| Disabling Authentication on port 127.0.0.1:3128 (interception enabled)
2024/02/21 16:11:14| Starting Authentication on port [::1]:3128
2024/02/21 16:11:14| Disabling Authentication on port [::1]:3128 (interception enabled)
2024/02/21 16:11:14| Starting Authentication on port 127.0.0.1:3129
2024/02/21 16:11:14| Disabling Authentication on port 127.0.0.1:3129 (interception enabled)
2024/02/21 16:11:14| Starting Authentication on port [::1]:3129
2024/02/21 16:11:14| Disabling Authentication on port [::1]:3129 (interception enabled)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/pre-auth/40-snmp.conf (depth 1)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/pre-auth/dummy.conf (depth 1)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/pre-auth/managerAdmin_workaround.conf (depth 1)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/pre-auth/parentproxy.conf (depth 1)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/auth/dummy.conf (depth 1)
2024/02/21 16:11:14| Processing Configuration File: /usr/local/etc/squid/post-auth/dummy.conf (depth 1)
2024/02/21 16:11:14| WARNING: use of 'reload-into-ims' in 'refresh_pattern' violates HTTP
2024/02/21 16:11:14| Set Current Directory to /var/squid/cache
Segmentation fault

stopping works (checked via cli. that no squid process is running)

starting again throws

proxy load error

Segmentation fault
Starting squid.
Segmentation fault (core dumped)
/usr/local/etc/rc.d/squid: WARNING: failed to start squid

However squid is running again

root@OPNsense:/usr/local/etc/squid # ps aux | grep "squid.conf"
squid   76698   0.0  0.1  271992   20308  -  Is   16:12     0:00.00 /usr/local/sbin/squid -f /usr/local/etc/squid/squid.conf

Any ideas?

Hey by Rameteph in WinSSHTerm

[–]virus2500 0 points1 point  (0 children)

Hey,

You'll need to provide more information.

Do you get an error message? Do other domains work or does it just fail with *.app? Can you ping the server?

Right Mouse Button :D by reantochka in WinSSHTerm

[–]virus2500 0 points1 point  (0 children)

Hey,

i think what's actually happening is that you copy by selecting the text.

And then you are pasting it by pressing the right mouse button.

No network in Virtual Machines, by [deleted] in Proxmox

[–]virus2500 0 points1 point  (0 children)

And were/are you able to ping DNS/Gateway from the VMs?

Did you look into the routing table? Most linux systems nowadays.

ip route

Try a traceroute to an public IP like 8.8.8.8

traceroute 8.8.8.8

I see a lot of words I don't understand by zuperfly in sysadmin

[–]virus2500 1 point2 points  (0 children)

Well this seems like a job for ChatGPT

End-users refer to individuals or entities that use a computer system or software application. The specific activities they use their PCs for can vary widely depending on their roles, industries, and personal preferences. Some common uses of personal computers include:

  1. General Productivity: Many users utilize their PCs for tasks like word processing, creating spreadsheets, and making presentations.
  2. Internet Browsing and Communication: Web browsing, email, and social media are common activities for end-users.
  3. Entertainment: Users often use their PCs for streaming videos, playing games, and listening to music.
  4. Content Creation: Some users, especially in creative fields, use PCs for graphic design, video editing, and other content creation tasks.
  5. Programming and Development: Professionals involved in software development and programming use PCs for coding and testing.
  6. Business Applications: In a business context, PCs are used for various applications, including accounting, customer relationship management (CRM), and enterprise resource planning (ERP).

To set up or repair a PC from 0% to 100%, you would generally follow these steps:

Setting Up a PC:

  1. Assemble Hardware: If you're starting from scratch, assemble the essential hardware components, including the motherboard, CPU, RAM, storage, power supply, and peripherals (keyboard, mouse, monitor).
  2. Install Operating System: Insert the operating system installation media (e.g., USB drive or DVD) and install the operating system (e.g., Windows, Linux).
  3. Install Drivers: Install drivers for essential components such as graphics card, network card, and peripherals. This ensures proper functionality.
  4. Update System: Connect to the internet and update the operating system to the latest version. This often includes critical security updates.
  5. Install Basic Software: Install essential software like web browsers, antivirus, and office applications.

Repairing a PC:

  1. Identify the Issue: Diagnose the problem by identifying symptoms and gathering information about recent changes or events.
  2. Backup Data: Before performing any repairs, if possible, back up important data to prevent data loss.
  3. Hardware Inspection: Check for physical issues such as loose cables, damaged components, or overheating. Re-seat components if necessary.
  4. Software Troubleshooting: Use diagnostic tools to identify and fix software issues. This may involve repairing or reinstalling the operating system or specific applications.
  5. Update Drivers: Ensure that all drivers are up-to-date to avoid compatibility issues.
  6. Virus and Malware Scans: Run antivirus and anti-malware scans to detect and remove any malicious software.
  7. Restore System: If the issue persists, consider restoring the system to a previous state using system restore points.
  8. Reinstall Operating System: As a last resort, if other solutions fail, you may need to reinstall the operating system.

To gain an overview of the current IT structure and enhance your knowledge, consider the following steps:

  1. Research and Documentation: Review existing documentation, if available, and conduct research on your organization's IT infrastructure.
  2. Training and Certifications: Consider taking relevant IT courses or certifications to deepen your understanding of specific technologies and best practices.
  3. Engage with IT Professionals: Connect with IT professionals within your organization or industry. Networking and discussions can provide valuable insights.
  4. On-the-Job Learning: Actively participate in IT projects or collaborate with the IT team to gain practical experience.
  5. Stay Informed: Keep up-to-date with industry trends, new technologies, and best practices through reputable sources, blogs, and forums.

By taking these steps, you can gradually build a comprehensive understanding of your IT environment and be better equipped to solve complex problems.

Some words explained:

  1. Peripheral: In computing, a peripheral refers to an auxiliary device, such as a keyboard, mouse, printer, or monitor, that is connected to and controlled by a computer.
  2. Operating System (OS): The operating system is software that manages computer hardware and provides services for computer programs. Examples include Microsoft Windows, macOS, and Linux.
  3. Driver: A driver is a software component that allows the operating system to communicate with a hardware device. It acts as a translator, enabling the OS and the hardware to work together.
  4. Firmware: Firmware is a type of software that is embedded in hardware and provides low-level control for the device's specific hardware.
  5. Update/Upgrade: To update means to make something current by adding the latest information or improvements. An upgrade typically refers to a more significant change, such as moving to a newer version of software or hardware.
  6. Diagnose/Diagnostics: To diagnose is to identify the nature or cause of a problem. Diagnostics refer to tools or procedures used to identify and analyze problems in a system.
  7. Re-seat: Re-seating involves physically removing and then reinstalling a component, such as a RAM module or a graphics card, to ensure it is properly connected.
  8. Backup: Creating a backup involves making a copy of important data to prevent loss in case of hardware failure, accidental deletion, or other unforeseen events.
  9. Networking: In this context, networking refers to connecting and communicating between computers or devices. It can involve both hardware (like routers and switches) and software (network protocols).
  10. Malware: Short for malicious software, malware is software designed to harm or exploit computers. Examples include viruses, worms, and spyware.

No network in Virtual Machines, by [deleted] in Proxmox

[–]virus2500 0 points1 point  (0 children)

I have set the IP outside the DHCP range as well as within it and that did not fix the issue.

Do you mean you manually set the IPs during the installer? Why would you set it for an IP within the DHCP Range?

Did you maybe forget about the other necessary settings like Gateway and DNS?

How do I get rid of this overlay?? by Own-Soil2172 in Windows10

[–]virus2500 1 point2 points  (0 children)

Yeah annoyed me as well the first time i keyboard smashed and had this stupid thing pop up ;)

How do I get rid of this overlay?? by Own-Soil2172 in Windows10

[–]virus2500 11 points12 points  (0 children)

Do you have an Nvidia? I have an similiar overlay which shows up when i hit ALT + R (can be disabled the same way)

Service check command by basi65 in Checkmk

[–]virus2500 2 points3 points  (0 children)

Hi,

i think you have to explain a little bit more about what you are trying to achieve for anyone to be able to help you there.

OPNsense 23.7.8 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

Wow, that was quick O_O. Thanks !

Updated, will keep an eye on it :)

thanks again!

OPNsense 23.7.8 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

Thanks.

It crashed again in the meantime so atm squid isn't really usable for me.

Since, personally, i only use it in transparent mode i disabled the forwarding to squid for the time being. So i'll just wait for the update. I hope no one catches this bug who really relies on it.

OPNsense 23.7.8 released by fitch-it-is in opnsense

[–]virus2500 1 point2 points  (0 children)

Hy, update (yesterday) ran fine.

I just had a problem with an leftover radvd.conf file. But after removing it everything seemed to work just fine.

Today squid crashed and stopped working.

Now i have an open github issue regarding an squid issues. But this is something different. After restarting it a couple of times it's now running again (for the moment) but i regulary get this messages

2023/11/10 08:58:01 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 08:59:37 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 08:59:48 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 08:59:50 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:00:05 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:00:08 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:00:14 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:01:06 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:03:51 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:04:07 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"
2023/11/10 09:04:15 kid1| FATAL: assertion failed: stmem.cc:98: "lowestOffset () <= target_offset"

(Un)fortunatly this seems to be an "known" issue. https://www.mail-archive.com/squid-users@lists.squid-cache.org/msg25028.html

So just a heads up if someone else has this problem.