Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - hushcoden

#496
My log's got hundreds of those alerts: is this something to worry about or ?

Tia.
#497
Quote from: spuky on July 30, 2020, 05:21:14 PM
From the 20.1.9 Releas notes:
Quote
20.7-RC1 is already available and the final release of 20.7 is scheduled for July 30. A hotfix release for 20.1.9 will enable the upgrade path some hours after the initial 20.7 announcement is out

So just wait for the Hotfix... then you can upgrade...
Do we know when the Hotfix will be released?

Thanks.
#498
I've the WAN rules (attached) which I reckon I don't have to change/amend and I have rules (the same) for LAN and LAN2 (also attached).

If I want to consolidate the LAN and LAN2 rules by creating just one set of rules in 'Floating', can I do so by seelcting in 'Interface' both LAN and LAN2 and in Source 'any' ?
#499
Quote from: mimugmail on July 26, 2020, 04:01:43 PM
2 rules source any, destination firehol and vice versa. No Interface selected

Do you mean I delete the rules in 'LAN' and 'LAN2' and I consolidate them into 1 in 'Floating' but without selecting the two LAN interfaces ?? Sorry, I'm confused  :o Can you be more specific ?  :-\
#500
Quote from: mimugmail on June 10, 2020, 02:01:21 PM
1) block is better since with reject the Firewall has to generate a packet (cost cpu cycle)
2)+3) Interface LAN, Source LAN net, direction ALWAYS *IN*, never use out ..
I have another question: if I use float rules, I can select both my two LAN interfaces rather than duplicate rules from LAN to LAN2  :o but in 'Source' I can't select bot 'LAN net' and LAN2 net', only one, so should I select 'any' or 'This Firewall' ?

Thanks.
#501
Tutorials and FAQs / Re: Equipment to run OPNsense
July 23, 2020, 09:19:19 PM
Quote from: jschroeder on July 23, 2020, 04:22:45 PM
Where can I find a few different options as far as some budget friendly equipment to install OPNsense on? It will be used for my house, and there is really only 1 computer, 2 iphones, and 1 roki device running simultaneously.
This is a good starting point: https://opnsense.org/partners/

If you have a 1 Gb/s Internet link, you'd look at a powerful router, especially if you start to play around with IDS/IPS...

That said, I also use a PC Engines board (APU2E4) and I'm quite happy with the performance, and here you can find the list of the official resellers: https://pcengines.ch/order.htm

+ other three hw resellers that I came across while I was searching for my hardware:

  - https://teklager.se/en/products/routers/

  - https://www.miniserver.it/

  - https://protectli.com/
#502
20.1 Legacy Series / Re: DHCP not giving leases
July 23, 2020, 07:03:00 PM
That's strange behaviour... Anyway, one thing for sure is you have to disable the TP-Link DHCP!

Your TP-Link is acting as an access point and your OPNsense router will give out the IP addresses to the wireless devices...

How did you assign the IP address to the TP-Link? In my case it's a static IP assigned within my OPNsense router, but I believe it should work also if you assign the IP within the TP-Link itself, as long as the IP address is outside your OPNsense's DHCP range, in your case anything outside the range 10.1.1.100 - 10.1.1.199, i.e. 10.1.1.50

Delete DNS servers/gateway and try again...
#503
20.1 Legacy Series / Re: DHCP not giving leases
July 22, 2020, 09:15:31 AM
Quote from: fczaja on July 21, 2020, 08:13:54 PM
Hi hushcoden,

I did it but no success...
When disable DHCP server of AP, the OpnSense does not give lease and nothing connect on wifi.

Attached the last log.
Hope it give some tip.

Thanks
I don't know which router/AP you're using, but in my case (NG R7800) when put it in AP mode the DHCP is automatically disabled...
#504
20.1 Legacy Series / Re: DHCP not giving leases
July 21, 2020, 09:26:16 PM
Quote from: fczaja on July 21, 2020, 08:13:54 PM
Hi hushcoden,

I did it but no success...
When disable DHCP server of AP, the OpnSense does not give lease and nothing connect on wifi.

Attached the last log.
Hope it give some tip.

Thanks

Can you attach a screenshot of Services -> DHCPv4 -> [LAN] or whatever the name of the interface where the WAP is connected to is ?

I've attached mine, if it can help...
#505
20.1 Legacy Series / Re: DHCP not giving leases
July 21, 2020, 06:04:03 PM
Quote from: fczaja on July 15, 2020, 12:39:02 AM
Hi Folks,

I've just installed my Opnsense Server and made all config adjustments to my network.
However, the DHCP is not giving leases to the endpoints over the network.
I revised many times all the configs and did not found what could be wrong.
The funny thing is if I configure the wifi router as DHCP, all endpoints can connect to the network, but when I configure the wifi router as bridge, I can't connect to the network, because the endpoints don't receive IP from Opnsense.
I'm using 20.1 version i386.
Does anyone have an idea of what could be wrong?

Cheers,
Fred
My OPNsense box is connected to a Netgear R7800 configured in AP mode and I have no such issues...

What is your router (WAP) ? Try to configure it as Access Point rather than put it in Bridge mode...
#506
Thank you both, with 1508 it works  8)
#507
I'd like to test MTU=1500 on my PPPoE interface, but if I enter the value on 'interfaces' -> 'wan' -> MTU and saving it doesn't actually change it (still 1492): is there a way perhaps through CLI to force the value to 1500?

Tia.
#508
I'm currently using the ET Open rule-set, but if you look at the plugin section you'll see not just the Pro rule-set but also the ones as per my subject, hence I'm bit confused of what the differences are between ET Open / ET Pro and that PT Research ruleset...

Thanks.
#509
Before installing that, can anyone please explain what does this rule-set provide more than the standard open rule-set that I'm using ?

Tia.
#510
It's not a bug, then go to systems -> settings -> cron and there it is  8)