questions about opnsense

[glennmckenna]

hi
may i congratulate you
i've spent about 15 mins on this site and i'm virtually hooked for using opnsense over pfsense

• much better GUI nice and modern
• looks more user friendly
• more up to date ?

if i've got one tip it would be getting known more
(i was searching for opensense but with no luck)


but i'm yet to be convinced on one or two points

is there any thing like squid guard in opnsense ?
if yes does it support black lists ?
and again if yes does it support auto updating of the black list (something the squid guard doesn't ) ?

[glennmckenna]

hit wrong button ....

[phoenix]

Squid is available and you can add Access Control Lists to it and update them via cron.

[AdSchellevis]

No problem, thank you for your feedback  its always nice to hear people like our product.

Our proxy does support blacklists using lists from third parties, go to the "Remote Access Control Lists" tab in the proxy and add lists there.
We probably will add some quick selections later on.

Documentation will be available later, but the basics are very simple. Just add urls like ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/malware.tar.gz in there and click download.
You can use the cron button to schedule the data retrieval.

[glennmckenna]

thanks for the help
i read some were about dns filtering
can the same thing be done but through dns rather than proxy ?

[AdSchellevis]

You should be able to do so using opendns (services_opendns.php), I haven't tried this myself though.

[glennmckenna]

You should be able to do so using opendns (services_opendns.php), I haven't tried this myself though.

and is opendns built (like squidgurd) into opnsense or is it just a link to the cloud ?

[AdSchellevis]

The setup is in OPNsense, but you need an opendns account to use it... so technically its a cloud service.

Someone wrote a setup document some time ago https://www.kirkg.us/posts/using-opendns-with-opnsense/