Topics - 5k7m4n

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - 5k7m4n

Pages1

Hardware and Performance / Intel I217LM - 100baseTX <full-duplex>(not working at gigabit)

March 06, 2022, 08:23:01 AM

Any help would be appreciated. What I tried:

Code Select

vi /usr/local/etc/pkg/repos/FreeBSD.conf
FreeBSD: { enabled: yes }

pkg update
pkg install intel-em-kmod

vi /boot/loader.conf.local
if_em_updated_load="YES"

Reboot

Still will not connect at 1000baseT <full-duplex>

Code Select

em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> metric 0 mtu 1500
        description: LAN
        options=4219b<RXCSUM,TXCSUM,VLAN_MTU,VLAN_HWTAGGING,VLAN_HWCSUM,TSO4,WOL_MAGIC,VLAN_HWTSO>
        ether 70:4d:7b:x:x:x
        inet x.x.x.x netmask 0xffffff00 broadcast x.x.x.255
        media: Ethernet autoselect (100baseTX <full-duplex>)
        status: active
        nd6 options=29<PERFORMNUD,IFDISABLED,AUTO_LINKLOCAL>

OPNsense 22.1.2_1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021

I did find this post that says not to but compile from source. Wondering if that would help?

edit: hw probe

I did try different cables!

22.1 Legacy Series / Config Backup XML is HTML page

March 06, 2022, 05:02:42 AM

I saved the backup of the config by clicking download and saving the config-[myrouterdns]-[date]-xml file.

I then replaced the hardware, installed a fresh copy opnsense, setup the basic config, and downloaded backup of a fresh config.

I went to compare the 2 xml files to migrate settings and realized that both xml files are actually the webpage.

Code Select

<!doctype html>
<!--[if IE 8 ]><html lang="en-US" class="ie ie8 lte9 lte8 no-js"><![endif]-->
<!--[if IE 9 ]><html lang="en-US" class="ie ie9 lte9 no-js"><![endif]-->
<!--[if (gt IE 9)|!(IE)]><!--><html lang="en-US" class="no-js"><!--<![endif]-->
  <head>
    <meta charset="UTF-8" />
    <meta http-equiv="X-UA-Compatible" content="IE=edge">

    <meta name="robots" content="noindex, nofollow, noodp, noydir" />
    <meta name="keywords" content="" />
    <meta name="description" content="" />
    <meta name="copyright" content="" />
    <meta name="viewport" content="width=device-width, initial-scale=1, minimum-scale=1" />

    <title>Backups | Configuration | System | [myrouterdns] </title>
...

Running:
OPNsense 22.1.2_1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021

20.7 Legacy Series / OpenVPN not saving settings

October 10, 2020, 04:35:04 AM

I am having problems setting up the road warrior vpn. I am using OPNsense 20.7.3-amd64

When I try and use the Wizard it doesn't make any WAN rules to open the port I select. It creates the new interface but does not enable it. The firewall after enabling opt1 then has rules for OpenVPN and OPT1.

When I edit the server nothing is saved.
VPN -> OpenVPN -> Servers
Click pencil icon to edit, make any changes, Click save
Go back and edit again and the no changes were made.
I have to trash the openvpn server to try again.

Hardware and Performance / WiFi6 pcie card

August 10, 2020, 04:37:29 PM

I read the stickied topic and am ready for the rotten fruit.

My thought is that $300-400 is a lot to spend on a new router. Especially when the new cards are $40 and I won't use anything except passthrough on the wifi router. I also miss the convince it was having everything in one box, when I used to run tomato.

I understand the technical limitations and the philosophical too. I know many people would like to do this. I also know people have just given up on having one box that does home networking. I have tried and failed many times. I just really would like to get faster wifi standard without spending a ton of money.

I don't see the new standard on the pfsense netbsd compatibility chart. So...I realize this might be a long shot. I see openbsd has a driver but do not know about station mode.

General Discussion / Firewall Rules - SOLVED

July 19, 2020, 07:52:45 PM

I started working on adding wireguard but ran into some trouble.

I was following this guide https://homenetworkguy.com/how-to/configure-wireguard-opnsense/ and when I added the interface I didn't select one. Now I have an extra category in my firewall rules that I can not delete.

The only forum post I found was this https://forum.opnsense.org/index.php?topic=13912.0 but it doesn't help. Because I did rename the existing WG and it rename one of the rules but not the one that doesn't seem to have an interface associated with it.

Is there a config file I can edit to remove the extra rule?

Web Proxy Filtering and Caching / HAProxy 2FA

July 19, 2020, 06:28:18 PM

I am currently using 2FA on opnsense and it is working for the webadmin. I am also successfully using HAProxy and Lets Encrypt for external websites.

I am wondering if it is possible to add user and 2fa password authentication to haproxied websites?

I haven't been able to find any examples yet on doing this, and I see that HAproxy plugin has its own users and groups, so I don't know if the 2fa would even work.

Anyone approached this?

Pages1