Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Ronski]

[Ronski]

We're back up and running, packages didn't restore, may be as it wasn't connected to the internet when I booted it up.

So I thought I'd restore just the packages from a backup, but that doesn't seem to work, either that or I never backed up the packages, although I'm sure I did.

Anyway to tell?

[Ronski]

Edit. Just looked in the logs and have.

Sep 9 11:00:55   php-fpm   380   /rc.update_urltables: : ERROR: could not update pfB_Top_v4 content from http://127.0.0.1:80/pfblockerng/pfblockerng.php?pfb=pfB_Top_v4
Sep 9 11:00:55   php-fpm   380   /rc.update_urltables: Download file failed with status code 404. URL: http://127.0.0.1:80/pfblockerng/pfblockerng.php?pfb=pfB_Top_v4

Sep 9 11:01:03   php-fpm   381   /rc.start_packages: Configuration Change: (system): Removed pfBlockerNG package.
Sep 9 11:01:03   php-fpm   381   /rc.start_packages: The pfBlockerNG package is missing its configuration file and must be reinstalled.

Sep 9 11:01:03   php-fpm   381   /rc.start_packages: Configuration Change: (system): Removed OpenVPN Client Export Utility package.
Sep 9 11:01:03   php-fpm   381   /rc.start_packages: The OpenVPN Client Export Utility package is missing its configuration file and must be reinstalled.


I think the above were the only two packages I had installed, and I can install them manually.

[Ronski]

Another problem, trying to get OpenVPN working.

I've exported a new client config, and setup the profile on the phone.

If the phone is connected to my local network via wi-fi then the OpenVPN connects, if I'm on mobile data it doesn't.

I'm using dynamic DNS via cloudns which appears to be working and redirecting to my current IP address.

Any idea's please?

Edit. My brother can connect fine, so not sure whats going on with mine. Also do I need to do something to enable hardware encryption? It doesn't seem to be using it.

Edit 2: Fixed my phone, cleared app data and set it up again.

[Alex Atkin UK]

System / Advanced / Miscellaneous : Cryptographic & Thermal Hardware: AES-NI CPU-based acceleration.

[Ronski]

Thanks Alex

[Chrysalis]

We're back up and running, packages didn't restore, may be as it wasn't connected to the internet when I booted it up.

So I thought I'd restore just the packages from a backup, but that doesn't seem to work, either that or I never backed up the packages, although I'm sure I did.

Anyway to tell?

I think the packages are marked for restoration rather than being part of the backup, so restores package configuration, marks them for reinstall, and at first chance will restore via internet access.  Not sure as never have manually examined a backup.   Just had a look they just marked for restore.

Package information can be skipped on backups, hopefully you didnt do that.

The binaries and libraries from packages could be backed up as part of the files/folders backup but personally I wouldnt do that as they wouldnt be in sync with the package database.

[Alex Atkin UK]

I've found package restoration is very flaky too on first boot and with it all happening in the background its not at all clear when everything is done.

[Chrysalis]

It used to be all done in foreground on console boot with the boot not finishing until they all done, but I think they changed it to make the basic pfsense system come online quicker so now it does some of it in the background after the UI etc. is loaded.  Then at that point have to hope it works out ok, I think its the same process as used when doing a in place upgrade which also reinstalls all packages.

I am guessing they did this as was people doing these in place upgrade's without console access and getting impatient waiting for the UI to come back up.

[Ronski]

I can appreciate it only waiting for so long to enter a password, but once you start typing that time should be extended, rather than timeout half way through typing the password, that's just stupid.

[Chrysalis]

Yeah in my opinion thats a bug, I can report it if you want, since I am registered on their redmine page.

Otherwise you can report it here.

https://redmine.pfsense.org/

[Ronski]

If you would please, thanks.

[Chrysalis]

Just to confirm, you installed 2.7.0?

[Ronski]

Yes, 2.7.0.

[Chrysalis]

Ronski was it USB during install or USB during first boot?

They say there is a 30 second timeout on ECL which they can look at, but they want confirmation.

https://docs.netgate.com/pfsense/en/latest/backup/restore-during-install.html#restore-using-the-external-configuration-locator-ecl

or

https://docs.netgate.com/pfsense/en/latest/backup/restore-during-install.html#restore-configuration-from-usb-during-install