Messages

You have SSH, WebConfig and IDRAC Honeypot open to the internet?

And many others as well.  Im a cyber security engineer.  I also work with AZCWR ( http://azcwr.org )

This is an urgent one for those running opnsense firewalls.

Block 163.172.112.193

It has scanned my IP space before(i have a lot), but mostly passively, then moves on to others, BUT today when it crossed my IP Space and found the new OPNSense i have up and running for development and testing for PFMonitor, it suddenly began brute forcing like crazy against SSH, The Web Config, and OpenVPN all simultaneously and rapidly.  When it ran into my pfSense unit it tried a few passwords then gave up, but the OPNSense it strangely targetted quite heavily and continuously for a while.

I Also have a Dell IDRAC6 Honeypot up and running and it hit that a few times as well, i log all of this of course to see what nasties are out and about scanning my territory online.

Just a safety warning.  Block that IP!

If you really want to earn money with this solution, you should definately spend some time for a website redesign.

It doesn't look very profressional where I want to spend my money. This is just my opinion!!

Spending money on the website design means i would have to recoup it from sales, meaning i would have to increase the cost.  See what your actually asking me to do there.....

I want to keep the price low so people dont have to be a rich IT department to afford to use it.

PFMonitor now supports OPNSense in all features that pfSense does with the exception of the interface statistics feed, which is just a matter of a little more time.

https://pfmonitor.com      - still updating pages to indicate opnsense support.

binged on finishing up the OPNSense Agent for PFMonitor for about 5 hours now, it even installs the nessicery cron job itself the first time you execute the agent.  Still writing out the basic install intructions.

This is a spot i will share usefull random tidbits of code found or made from my development on opnsense.

How to get human friendly uptime from opnsense

Code Select Expand

uptime | awk -F'( |,|:)+' '{print $4,$5",",$6,"hours,",$7,"minutes."}'
4 days, 12 hours, 09 minutes.

As the Developer of PFMonitor, i am here to express my great interest in adding support for OPNSense to my platform.

It would greatly help in that quest if someone who is at least moderately versed with the source code differences, or just the source code itself of OPNSense, could answer some questions for me, and speed up my discovery process so i can build a fork of the pfSense agent i created that works with OPNSense.  I already checked and it does not work properly straight away, there are some differences to be adjusted for.

Minor compensation for such an assisting person is not out of the question but im not rich so dont expect me to make you rich ;)