Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - joe99

#1
Hello

I am required to use an application under Windows7, which sends telemetry-information to a static
IPv4 address over HTTPS and does download some programm-code everytime it's started.

I gave up trying to configure Windows-Firewall for this :(



Questions:

- is it possible to set such a rule in OPNsense?

- or should I use a personal firewall installed on that Windows machine?

- does it make a difference if I do have a Dualstack or DSlite?



Thank's a lot for your feedback!

Joe


PS
Do not yet have an OPNsense based firewall
#2
Quote from: tiermutter on September 01, 2022, 05:04:59 PM

AdGuard hat dnscryptproxy bei mir abgelöst, ich habe keinen Bedarf beides zu verwenden, das macht alles adguard.
Interessant.. verstehe ich dich richtig, adguard ist auch eine Alternative zu dnscryptproxy?

2.
Und das alles im gewohnten(standalone) AdGuard GUI?

Danke und Gruss,
Joe
#3
Danke tiermutter fuer die Rueckmeldung. Ist natuerlich viel einfacher wenn diese Tools per PlugIn installiert werden koennen und nicht eine separate Box dafuer eingesetzt werden muss.

Verstehe ich richtig,  DNSCrypt Proxy ist auch/bereits in ADguardHome vorhanden?
Verwendest Du DNSCrypt Proxy immer noch?

Gruss

Joe



#4
Hallo

habe schon interessante Berichte ueber den DNSCrypt Proxy im ct gelesen.

- Ist DNSCrypt Proxy Bestandteil von OPNsense ?

- oder muss eine externe DNSCrypt Proxy Box (zum Beipspiel auf einem Raspi installiert) in OPNsense
  integriert/konfiguriert werden?


Vielen Dank!

Joe
#5
Thank you for the feedback hushcoden!

Joe
#6
Hello forum

Does OPNsense support a second WAN interface (3G, 4G, modembackup) as automatic fallback/take-over
for the case the regular internet connection goes is down?

Thank you!

Joe
#7
Hello forum

Is it possible to have OPNsense rejected every traffic(on all 7 OSI-layers) if a machine is booted e.g.
with Windows7, meanwhile if the same machine is booted with Linux or Windows10, network/internet-access
should be  granted? How?


Thank's a lot for any feedback!

Joe
#8
Thank you very much Fabian for the excellent answer!

Joe
#9
Hello Forum

I would like o make sure that no unwanted network communication takes place (mainly from Windows based machines in the network).

Therefore i would like to be asked everytime an application or the Windows-OS itself would like to establish a connection to a remote host/service.


Question:
Does OPNsense already offer such a feature?


Thank you very much!

Joe




PS1:
I understand that such a feature would require an agent on each client(workstation)

PS2:
I do know that some personal firewalls do offer such a feature and as well some very advanced.