Messages

1

17.1 Legacy Series / Re: How to give clients IP Address, Gateways and DNS using OPNSense?

« on: February 02, 2018, 01:54:49 pm »

LOL !

Why are you speaking about S2S vpn ?? seriously, I m agree with hutiucip to let the Maximum parameters by default for him because he doesn't have the basic network knowledge

Speaking and ask to perform advanced configure tasks to a user is the best way to lost customers/users

We should just help basic users and neophyte users about the solution witch are discuss around it.
Step by step

So next step is probably : How to replace our initial modem/router equipment by a single OPNsense utm
Enjoy it

2

Tutorials and FAQs / Re: Set gateway group as default gateway

« on: February 02, 2018, 11:51:14 am »

Hi nicovell3,

Did you have put some static route to reach specific/particular private network (like labotory network) ?

There are also possibilities with firewall policy based routing  (need to check if OPNsense permit this feature)

Regards,
Greg

3

Documentation and Translation / Re: Translation

« on: February 02, 2018, 11:04:23 am »

Hi all,

I have just one simple question about some term translation.

For lot of english terms , i think it's corresponding to variables but I saw in German translation there are translated.

For exemple the term "authscope" located at Unit #115598 at https://translate.opnsense.org/de/gui/translate/de.po#unit=115598 is translated to "Authentifizierungsscope"

Are you sure need to translate this term and lot of other located below it ?
If it's used to populate the variables, that will be probably generate bug.

Could you please confirm me the necessary to translate them ?

Thank you in advance.
Regards,
Greg.

4

General Discussion / Features proposal (Geolocation lookup)

« on: July 13, 2016, 09:08:18 pm »

Hi,

What did you think to add a Geolocation lookup for IP address ?
That permit to determine quickly the country source for all incoming or outgoing communication.

GreG

5

General Discussion / Re: ADD option in Alias object

« on: April 27, 2016, 10:52:40 pm »

Hi Franco,

To explain more precisely the function, in the example below, when creating a host object, we can set between "None (static IP) and "Automatic"(=dynamic).

The automatic update function for host object will update automatically the IP address of the object in background process (the default interval is 5 minutes but possible to modify this value with a CLI command)

The Green circle indicate a button that execute manually the update dns resolution for the object creating or when edit an host object. I think this manual button execute a simple script to perform a dns lookup on the object name then paste the result (if found and correct) to the IP address field of the concerning object.

PS: I may search the script or command used with this update function, if you want.
For information the OS of this firewall is based on FreeBDS.

Regards,
GreG

6

French - Français / Re: OPNsense 16.1

« on: April 27, 2016, 05:58:30 pm »

Merci à tous les deux effectivement sur la version OPNsense 15.7.25  c 'est ok pour le proxy .

j espère une Mise à jour avec un proxy plus fictionnel .

Barvo  pour le travail un grand merci aussi au traducteur  .

Bonjour,

Les traducteurs vous remercie même si le travail est encore loin d'être terminé.

Cordialement,
GreG

7

General Discussion / Re: Wishlist: Collection of features & strategy proposals for OPNsense

« on: April 25, 2016, 06:55:14 pm »

Hi all,

I think the good values were to add some essentials information into the banner (top banner) like these info listed below.

• Hostname (short value, without the domain name/fqdn) (I think it's already added in last OPNsense version)
• Version of the firewall (ex: 16.1.
• Account name currently login on the firewall
• Current rights of the account login if several administrators can be logon th firewall in same time to permitt to know if the admin user have the read/write permissions or read only because another administrator has login previously)
• Help and Logout links are already exists in banner

Optional:

• Ethernet ports status (link state Up or Down for each Ethernet port could be indicated by a green or black  network port pictures integrated into the banner)

PS: I think essentials informations or links are important into the banner but need to stay clearly readable and visible.

Regards,
GreG

8

General Discussion / Re: ADD option in Alias object

« on: April 24, 2016, 12:58:45 pm »

Hi Franco,

Sure I'm looking for an Host alias (object) with two option, one permit to create host alias with static IP address and second option permit to create Host alias with automatic IP address updates.

The second point consist to create a Group that can be contain other several  objects (in the same type of course) or other groups (groups in group).

Regards,
GreG

9

French - Français / Re: Traduction

« on: April 21, 2016, 01:31:22 pm »

Ok cool car il y'a pas mal de boulot avant d'arriver à 80%.
Il faudrait faire une révision de ce qui a déjà été traduit car je tombe souvent sur des traductions Google du genre "Firmware Flavour" traduit en "Saveur du Firmware" même si le firmware OPNsense a l'air gouteux

Merci.

10

General Discussion / Re: DHCP Relay Agent

« on: April 19, 2016, 06:17:10 pm »

Hi Biga,

First, VDI's Clients doesn't need to be in the same network that the DHCP servers or Domain.
If VDI's clients are in different network of DHCP servers, you need to relay the DHCP request.
The DHCP relay service offer to do this by transforming the multicast request to an unicast request.
This is working to deserve several subnets to one or several DHCP servers (for load balancing or fault tolerance).
In this case, if you have several vlan configured (one for each VDI's clients), you need to activate DHCP relay service with indicate theIP adresses of DHCP server(s) and all VDI's clients networks.
The router (or switch) configured with DHCP relay need to have one network interface in each clients' subnets and one interface in the DHCP servers subnet. By default a DHCP relay are listen on all network interfaces but I suggest you to limit only to clients computers network.
The DHCP server will offer the correct Network configuration for clients because the network source is know by the router.

11

General Discussion / Re: Rule Separators

« on: April 18, 2016, 06:07:48 pm »

Red : The dynamic Objects (alias) menu with the first field that's permit to sort the list of objects dynamically by typing first characters of objects (alias).
Second red circle permit to filter the category of objects (alias) to view only these in the objects menu in the left. For example: machines, network, protocols, ports, groups, .. objects.
And the last red circle permit to create directly an object (alias) or a group of objects from this menu without exit the filter rules page.
Dark Blue : Search field that permit to filter dynamically the rules view (I think like the OPNsense "Filter by category" option)
Pink circles : There are drag and drop fields object. Can be drag&drop between rules or from the objects menu in the left side.
Green : This is Separator rule (with custom colours) that permit to regroup all rules until the next separator and indicate the number of contained rules in the separator.

12

General Discussion / Re: Rule Separators

« on: April 18, 2016, 05:18:56 pm »

Hi Franco,

I see this category to filter rules, there are indexed on the description field or rule name?

I do a screen shot to exactly show you all interesting options.

Regards,
GreG

13

General Discussion / Rule Separators

« on: April 18, 2016, 04:23:49 pm »

Hi, there is some indispensable options in firewall rules and NAT rules interface: Separators and object drag and drop.
Something Like this https://redmine.pfsense.org/issues/5373 but with regroup rules below each inserted separators.

One more essential option is regarding the objects (alias) database, an quick dynamic menu access to the objects (alias) in the same rules page configuration will be really appreciated and the drag&drop function to copy and paste an object (alias) from one rule to another rule.

Thanks.

14

French - Français / Re: Traduction

« on: April 16, 2016, 02:57:41 pm »

Bonjour, y'a t il encore des personnes actives sur la partie de traduction française ?
Merci

15

French - Français / Re: Traduction

« on: April 05, 2016, 06:47:21 pm »

Si vous êtes toujours à la recherche de volontaires