Surpise notification

bgroper

Hi forum
I'm using pfSense :
Version 2.4.5-RELEASE (amd64)
built on Tue Mar 24 15:25:50 EDT 2020
FreeBSD 11.3-STABLE
I've recently received some emails from the pfSense as follows :

13:04:47 pfSense is restoring the configuration /cf/conf/backup/config-1586660137.xml

Why does this happen ? Should I be worried ?
TIA's

Gertjan

@bgroper said in Surpise notification:

I've recently received some emails from the pfSense as follows :

Not all the details are in the mail.
More details are in the system log.

jimp

Typically when that happens it's because something was introduced into config.xml which is not valid in XML. Commonly this is from things like international characters in certain fields which don't support them.

bgroper

Found these entries in the system logs. [BTW, I view the logs top-down, ie reverse order.]

Apr 12 13:03:34 	php-fpm  /vpn_openvpn_csc.php: New alert found: pfSense is restoring the configuration /cf/conf/backup/config-1586660137.xml
Apr 12 13:03:34 	php-fpm  /vpn_openvpn_csc.php: pfSense is restoring the configuration /cf/conf/backup/config-1586660137.xml
Apr 12 13:03:34 	php-fpm  /vpn_openvpn_csc.php: XML error: Undeclared entity error at line 2285 in /conf/config.xml

So I was changing some openvpn settings that became borked ?
Remote workers doing the WFH right now, so its working.
Should I check anythings else to be sure ?

Gertjan

Here :

@bgroper said in Surpise notification:

Undeclared entity error at line 2285 in /conf/config.xml

Some specific VPN client override setting ?

bgroper

@Gertjan said in Surpise notification:

Some specific VPN client override setting ?

Our use case is described in this thread.
https://forum.netgate.com/topic/152012/ovpn-single-site-multiple-remote-users/3
We have one-to-one mapping between remote users and their personal desktops using CSO's.
Seems all good.
Thx for helps.

jimp

We can't speculate as to what you were doing then -- only you or other admins on that firewall would know.

A guess would be that you've used an accented or other international character in a client-specific override description or common name.