Topics

hi all,

made a rule to block cameras to the internet as i dont want to manage on the cloud anymore as i have a local NVR set up

this is my rule

https://postimg.cc/kBq4V72N

and these are my aliases

rfc1918
<content>10.0.0.0/8
172.16.0.0/12
192.168.0.0/16</content>

cameras
<content>10.100.1.249
10.100.1.250</content>

and there def the ips as when i stream them via vlc i see the streams

am i doing something stupid

thanks,
rob

hi all,

enabled DNS over TLS via here

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-dot-on-opnsense

getting stuck when i create my own fw rules and nat to stop 53 out

as i have a few fw rules, should i create the block for 53 at the bottom so its first or at the top

thanks,
rob

hi all,

just want to know whether opnsense supports configuring DoT DNS over TLS or DoH DNS over HTTPS

if so what one should i use for my ISP not to spy on me and see what im doing

thanks,
rob

hi all,

made a floating rule, so i can block in/out, here it is

https://i.postimg.cc/t4jhdhyB/block-internet.png

i know its disabled atm but it was enabled and it is working ie it blocks ping to 8.8.8.8 and any internet bookmarks i have it just cant gewt to them, times out

i have done invert dest as i still want to access internal websites like opnsense and hosted websites, all works

but when i send myself a teams/outlook on my phone, it comes through to my "rkw_pc" ie the "source" why is this please

thanks,
rob

hi all,

im trying to set up pxe boot for my DRBL server, is this where i do it and what options do i put in please

https://i.postimg.cc/nzF4VFHr/pxeboot.png

heres the link to the DRBL server install, cant see what options i need to put in

https://drbl.org/installation/

thanks,
rob

hi all,

my opnsense just rebooted by itself, how can i look at the logs or web gui into seeing why it happened, happened about 22/03/2025 09:40

thanks,
rob

hi all,

I have made a firewall group but when i try to add a new interface to my group i cant as when i edit the group its blank, is this a bug, do i need to update my fw?

I attach pic in link

https://i.postimg.cc/Vv8rRnZ1/Screenshot-2025-02-09-031314.png

https://i.postimg.cc/59L8CNKb/Screenshot-2025-02-09-030334.png

thanks,
rob

hi all,

i would like to know when you edit the "wan interface" on the gui, what file does it edit on the cli as i would like to edit that file or cat it and make sure its not putting in a weird format in replace of my quotation marks 

thanks,
rob

hi all,

i have opnsense, do you think its worth me enabling DNS over TLS, is it really more secure

also what guide should i follow

https://www.dnsknowledge.com/unbound/opnsense-set-up-and-configure-dns-over-tls-dot/

https://www.zenarmor.com/docs/network-security-tutorials/how-to-configure-dot-on-opnsense

thanks,
rob

hi all,

im going to be getting PIA and just want to know if i can set it up on my router instead of every host device

if possible i only want PIA to route only certain traffic ie a port down it, is this possible and would like to set up the kill switch no leaks dns etc aswell

thanks,
rob

hi all,

im moving from Zen to sky BB

is anyone on sky here and have they setup there opnsense with it?

ive seen this guide

https://docs.opnsense.org/manual/how-tos/SkyUK.html

anything else i need to know

thanks,
rob

Hi all,

Looking for an ad blocker for opnsense that can by default block adds specially for YouTube

Is there a native one on there by default or do I need to download a package, rather choose to not pay for it but if any good i will

Thanks,
Rob

hi all,

whats the best ad blocker as i want to get rid of ads

for ex i want to still go on youtube but just block the ads

thanks,
rob

hi all,

got a weird issue when i lose internet on my pc (ethernet) and mobile (wifi), when i go to

interfaces > diagnostics > ping

i ping google.co.uk/google.com/scan.co.uk using the wan interface and all good, i get a responses for all

but still no internet on mobile or pc, the only way to get internet working again is to save the global DNS settings again

system > settings > general

when i click the save button, my internet works again, im still using, i havnt changed any settings on the page

thanks,
rob

hi all,

im using os-ddclient and one of my ddns accounts isnt updating, ie its not showing my "current ip" and "updated" columns

https://i.postimg.cc/Kjybjwzb/Capture.png

i dont know what i should choose for "check ip method" or if should should tick untick "force ssl"

thanks,
rob

hi all,

making a firewall rule but instead of the destination being an "ip" i want it to be a "DNS" record, is it possible to put in a DNS name ie dns.msftncsi.com and that resolves to the ip

if not has it got the plugin squid?

thanks,
rob

hi all,

will this wifi card work with my opnsense fw

https://linitx.com/product/compex-wle900vx-minipci-express-card-802.11-abgnac-wle900vx/15467

and i have an apu2 board

https://pcengines.ch/apu2.htm

thanks,

rob

EDIT - just realised this

Wifi option:

    wle200nx / wle600vx / wle900vx wifi module (wle600vx not supported by all operating systems)
    2 pigsma pigtail cable
    2 antsma / antsmadb antenna

so if i get the 900, as its got 3 antenna/pigtail connections i can only use 2 as my case has only got room for 2 antenna/pigtail connections, will this work

or shall i just get the 200

https://linitx.com/product/pc-engines-compex-wle200nx-minipcie-wireless-card-for-apu-boards-+-antennas/14348

Hi all,

Just come across a new vpn or if it is that, called zerotier

https://docs.opnsense.org/manual/how-tos/zerotier.html

I have already on my firewall ipsec openvpn and wireguard

Just wondering if anyone's used it and what you think

Thanks,
Rob

hi all,

my DDNS is with dynu DDNS but it hasnt got the DDNS service for it so i have to use "custom"

what values do i have to fill out for it please

thanks,
rob

hi all,

atm im using noip for DDNS but it doesnt offer DNS challenge for the ACME client

ive heard of http://www.duckdns.org/

just wondered what you think of it as it can do both DDNS and DNS challenge for ACME client

thanks,
rob