Messages

what list are you use?

@franco what is a resolution? in the log to unbound:
blocklist download : unable to download file from https://raw.githubusercontent.com/StevenBlack/hosts/master/alternates/porn/hosts (error : HTTPSConnectionPool(host='raw.githubusercontent.com', port=443): Max retries exceeded with url: /StevenBlack/hosts/master/alternates/porn/hosts (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x80261cc10>: Failed to establish a new connection: [Errno 8] Name does not resolve'))).

Thanks ;)

My config: Intel(R) Pentium(R) Dual CPU E2160 @ 1.80GHz, My card ethernet: i use WAN - LAN with 2 port integret with the motherbord and one pci port. I have't tested for qos disable.

I need help with my setup. A dual core computer, 4GB ram, 3 ethernet port. The problem is, when there is a lot of bandwidth usage, the CPU is almost at 100% periodically. I am using traffic shaper. I am using opnsense latest version.

***GOT REQUEST TO CHECK FOR UPDATES***
Currently running OPNsense 21.7 (amd64/OpenSSL) at Mon Jan  1 03:34:23 EAT 2001
Fetching changelog information, please wait... Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
5632920113152:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
fetch: https://pkg.opnsense.org/FreeBSD:12:amd64/21.7/sets/changelog.txz.sig: Authentication error
Updating OPNsense repository catalogue...
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://mirror-opnsense.serverbase.ch/FreeBSD:12:amd64/21.7/latest/meta.txz: Authentication error
repository OPNsense has no meta file, using default settings
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
Certificate verification failed for /C=US/O=Internet Security Research Group/CN=ISRG Root X1
4396528599040:error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed:/usr/src/crypto/openssl/ssl/statem/statem_clnt.c:1915:
pkg: https://mirror-opnsense.serverbase.ch/FreeBSD:12:amd64/21.7/latest/packagesite.txz: Authentication error
Unable to update repository OPNsense
Error updating repositories!
pkg: Repository OPNsense cannot be opened. 'pkg update' required
Checking integrity... done (0 conflicting)
Your packages are up to date.
***DONE***

Bonjour à tous! j'aimerai savoir si quelqu'un à déjà réussie à mettre en place le plugin bind(similaire pfblockerNg sous pfsense). j'ai déjà suivi le tuto sur le site (https://www.routerperformance.net/opnsense/dnsbl-via-bind-plugin/) mais ça ne marche pas sauf si on configure le firewall. Mes domaine override ne marche pas quand j'utilise  la config sous firewall. Que faire?

Hallo, Sie können uns genau die Konfiguration zeigen, die Sie für die Einrichtung von bind vorgenommen haben. danke

Hello!
why the addon bind not block a porn site??

Bonjour, je suis sous opnsense 19.1.4 avec bind et proxy active. En ouvrant ce site ses.ac-versailles.fr l'erreur suivant s'affiche 408 Request Time-out Your browser didnt't send a complete request in time. Que ce passe t il? Merci d'avance!!

Hi! I have a same problem, but if possible would you help for configured a port forward if i have a web server in local and i would allow from wan access.