Messages

https://redmine.openinfosecfoundation.org/issues/6762

It's an upstream issue with Suricata 7.0.3, but it shouldn't matter much. https://github.com/opnsense/core/issues/7260

ok, thank you.

Hi,
After the update to 24.1.2 I noticed these entries in the suricata logs. Is it a misconfiguration from my side, do I need to do any thing about these errors.

Code Select Expand

2024-02-20T22:01:12 Error suricata [100315] <Error> -- failed to obtain number of NUMA nodes in the system
2024-02-20T22:01:12 Error suricata [100315] <Error> -- unable to open /sys/devices/system/node/

OPNSense is running on a dedicated Intel hardware.

I have two boxes running nearly the same config. IPS is enabled on both boxes.
One are suffering from this issue and the other one is running fine. Both are based on Intel.

Same issue here.
Running IPS on the LAN side.
Web-gui get unresponsive after a few minutes and the network works as crap.
Igb interfaces.

ok, thank you.
I read this and it helped me clear up my confusion.
https://docs.opnsense.org/manual/firewall_generic.html#address-types

So if I want to block all traffic from 192.168.11.0/24 (IoT net) to 192.168.2.0/24 (Default net) I should use (see below)?

Firewall/Rules/IOT
Action: Block
Interface: IOT
Direction: IN
Source: any
Destination: Default address

Hi,
When I look into my firewall rules I see  "Lan net" and "Lan address". Whats the difference between these two types and in which cases should they be used?

I know that firehol lvl 3 have a bad habbit of blacklisting some of githubs ips...
http://iplists.firehol.org/?ipset=firehol_level3

Hi,

Do I need to add any tunables or settings to make use of IIMB?

[Phase 1]

Hi,
I'm trying to migrate my current Ipsec S2S connection (Tunnel Settings) to the new "Connections" but I'm not sure which algorithms etc to select. Could any of you help me choose a secure and fast algorithms? 
My current settings are (I ended up with these after some reading but I'm not sure that they are perfect...)
Phase 1
Encryption algorithm: 256 bit AES-GCM with 128 bit ICV
Hash algorithm: SHA512
DH key group: 21 (NIST EC 521)
Phase 2
Protocol: ESP
Encryption algorithms: aes256gcm16
Hash algorithms: none
PFS: 21 (NIST EC 521 bits)

Hi,
I see these errors in my logs. Do any of you know anything about why the site are unavailable?

Code Select Expand

download failed for https://feodotracker.abuse.ch/downloads/feodotracker.rules (HTTPSConnectionPool(host='feodotracker.abuse.ch', port=443): Max retries exceeded with url: /downloads/feodotracker.rules (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: self signed certificate (_ssl.c:1134)'))))

Thank you!
It worked and I'm using the predefined cronjob.

Hi,
Do any of you know how to see if the drive supports TRIM?
I have tried hdparm and lsblk but they are not found.

Thank you.