Messages

Thx

Is there a way for a particular app or program to explicitly use the host DNS server of my ISP and for all other programs the DNS servers (General / Settings / System) specified by me?

thx
regards rené

using

Code Select Expand

opnsense-update -kr 18.7.7 failed ?

opnsense-update -kr 18.7.6 is the current version ?

This means one of their servers has an invalid certificate (incorrect hostname, not in valid time range, untrusted CA etc.). It is usually not an error at your side.

Would be great if opnsense would have a solution as pfsense too.
I assume that I'm not the only one who uses windows clients.

According to squid wiki this should work here, only the options are missing in opnsense:
https://wiki.squid-cache.org/ConfigExamples/Caching/WindowsUpdates

Unfortunately, I know that this works for pfsense. Its only possible in opnsense by editing the config files only manuel. But I prefer to keep my fingers off.

Thx for your Information.

Regards,
Rene

so sometimes it works and sometimes not. usually not. why it sometimes works is not clear to me.

most time proxy gets these errors:

cache:

Code Select Expand

routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0)

access:

Code Select Expand

TAG_NONE/503 4283 POST https://fe3.delivery.mp.microsoft.com/ClientWebService/client.asmx - HIER_NONE/- text/html

Anyone knows how to fix this?

Strange, right in the moment I dropped my posting it worked. I will post my solution here then if I know what exactly where and must register and what domains now really work.

I use squid transparent with certificat.

have already tried everything but under windows 10, the updates are not recorded. get exactly the same error message.

Code Select Expand

kid1| Error negotiating SSL on FD 36: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (1/-1/0)

does anyone know this or can implement such a feature in opnsense?

I misspelled the entry in the "no ssl bump" section. I wrote ".dropbox" and forgot ".com".
After I have corrected this, everything now works as it should.

:-)

hope someone can help me or just give me a good advise!

i use transparent squid proxy with cert for https and http.

i have a problem using dropbox as a networkdrive for uploading and syncing!

1. i opened up ports 17500, 17600 and 17603!
https://www.dropbox.com/en/help/desktop-web/configuring-firewall

2. i made a no rdr rule for traffic the goes directly to dropbox.com and http://dropbox.com by alias!
i even pinged the url to get the ip´s and and entered them to alias list too.
3. i added the ip of dropbox.com to "unrestricted ip adresses" under access control list.
4. i added "*.dropbox.com, .dropbox.com " to the whitelist.
5. i added ".dropbox.com" to the no ssl bump sites.

but i only get my networkdrive working for uploading and syncing by completely disable the nat rules for transparent proxy. "No RDR" doesn´t work and i found no solution in the forum.
Entering the dropbox by browser works but networkdrive can´t establishe any connection.
Firewall log says nothing!

can someone help me find the problem ?

regards
rené

Danke!  :)

I do understand jokes, its just that I dont like them :)

Ok, to be serious: (possibly) the core team are wasting a lot of their precious time if the frequently asked questions are answered every single time in this forum. Instead of getting the same answer (as it has already been typed into the database in the past), copy-paste it to a relevant place on the wiki. Instant win! No need to type it twice, forum is not inflated unnecessarily, and wiki pages are progressing at least into some form of completion.

That was not meant as a joke.
Unfortunately, there are a lot of members who offer good solutions, but then prefer to let others do it.

Counting, unfortunately, only does what is implemented.

I think thats what I am going to do. After I learned how Github basics works.

The only thing worries me, why nobody from the thousands of community member has already added these simple parts? Is your approval system, that makes people give up the effort to make docs better?

Since I feel that you would enjoy it, I think that from now on you will be the chosen person who can make a documentary about the best free firewall.
By doing so, you would make the entire community very happy and relieve many developers.

:-)

see my screenshot