Messages

Can this connection go through a switch or does it have to be NIC to NIC?

Do I connect the LAN side or WAN side of the new firewall?

All,

I am in the midst of building a secondary firewall. Can I connect the LAN interface of the new firewall to my current network, so I can get the updates?

Thanks,
Steve

Only enable Rules you really need. No phpnuke stuff and so on

Is there a guide on what we should enable?

Which one...there are a number of them. I would assume either in the /conf directory or the /usr/local/etc directory?

Hello all,

Is there a way to reset Web Proxy back to defaults, so I can start again with its configuration.

Thanks,
Steve

Are you running Pi-Hole also?

I highly recommend you read this: https://forum.opnsense.org/index.php?topic=18191.msg82705#msg82705

Thanks...

Ok I have now added rules for transparent proxy capabilities. Here is a screenshot of the new rules layout. Am I ok in the order they are in now?

Hello all,

I have setup my proxy firewall rules but wanted to make sure the order of my rules is correct. Do I need to move the default allow to the bottom?

Thanks,
Steve

Hello all,

I am seeing this in my proxy log:

kid1| Initializing https:// proxy context
kid1| ERROR: loading file '/usr/local/etc/squid/errors/local/ERR_ACCESS_DENIED': (13) Permission denied

Many more of the second line. Is this a permissions issue and if yes what should I set the permissions to be on the /usr/local/etc/squid/errors/local directory.

Thanks,
Steve

Stupid question but are the web proxy ports TCP or UDP?

OK first let me say I do not know if OPNsense is the causing element but I am hoping someone could assist. I am running OPNsense 20.7.5 at home and have Unbound handling DNS and the DHCP server handling DHCP requests. I also have Pi-Hole handling adlists processing.

If I ping a device by its server name it resolves to its original IP, meaning the IP the server got created and registered to DHCP with. I have since given most servers static IPs, and did this within the DHCP service of OPNsense. When I ping the device by its FQDN it resolves to the proper IP, so somewhere I have incompatible DNS entries.

I double checked both DHCP and Unbound and things seem ok. Any thoughts?

I take iot back...its now running.

Has anyone been able to monitor OPNsense using the Zabbix agent? I am running Zabbix 5.2 and the instructions on the web are for older versions.

What I am showing is that this never starts, no matter what I do. Any thoughts?