Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - gertfriend

#1
23.7 Legacy Series / DynDNS
August 01, 2023, 04:33:34 PM
Contratulations, you did it. Now ddclient is the only DynDNS-Client and its a bullshit because of no support.  >:(
#2
23.1 Legacy Series / Re: ddclient-devel is broken
April 19, 2023, 09:21:48 AM
Hello devteam,

do you still want to switch to the program, despite the very poor supports?
If someone has several firewalls with ddclient active and his dnydns-provider changes method to update IP he will be unable to use it until the ddclient-master will update it, seen, that i added regfish.de early october an until now it has not been released a new release with service integrated i think ddclient can not be the solution for such a important service.
I know it its possible to use custom but if the service does not work after a while you have to access a lot of firewalls to move from configured service to custom but this can not be a solution.

Greeting
#3
Sorry, my mistake. There was no Gateway set in Interface WAN2 so this interface wasn't declared as Gateway and in consequence there wasn't defined a Outbound NAT rule.
#4
Hi,

can someone help me with Gateway switching.

I'm having 2 WAN on 2 Interfaces:
WAN1 -> 192.168.1.10
WAN2 -> 192.168.2.10

Now, if i enable Gateway switching and set priorities WAN1 10 and WAN2 20:
If WAN1 is online everything is working fine
If WAN1 is down the gateway is switching but browsing is not possible. The firewall can communicate with the Internet but the computers in Lan not.
If i manually add a Outbound NAT Rule for WAN2 browsing is working until WAN1 is back and WAN2 fails. Then browsing isn't possible anymore because Outbound NAT Rule for WAN1 is second and for the first Outbound rule the gateway isn't reachable.

What i'm doing wrong? Shouldn't work anything without creating a second Outbound Nat Rule.

Time ago i used Gateway Groups for this but first i'm not able to bring back working this and second are there limitations and additional configurations needed for VPN so i would do Failover with Gateway switching.

Thanks anybody for help.
#5
19.1 Legacy Series / Re: Trouble with using API
March 21, 2019, 10:00:33 AM
Sorry Franco, i didn't want nerve you and your team seen witch great work you do, i only thought that more people are using API and could help resolve the problem.

Now i resolved it. The problem was, that i was using curl from windows and windows has since ever trouble with quotas respectively double quotas so the solution for windowsuser is to enter change the -d in "{\"upgrade\":\"all\"}" so the single quotas should be replaced with double quotas and the double quotas will be escaped.

curl -XPOST -d "{\"upgrade\":\"all\"}" -H "Content-Type: application/json" -k -u "key":"secret" https://192.168.1.1/api/core/firmware/upgrade
#6
19.1 Legacy Series / Trouble with using API
March 15, 2019, 02:36:57 PM
Hello,

i have trouble with the API.

I use curl. For now the following commands work:
curl -k -u "key":"secret" https://192.168.1.1/api/core/firmware/status
and
curl -XPOST -d '{}' -H "Content-Type: application/json" -k -u "key":"secret" https://192.168.1.1/api/core/firmware/poweroff

But none of the following commands work:
curl -XPOST -d '{"upgrade":"all"}' -H "Content-Type: application/json" -k -u "key":"secret" https://192.168.1.1/api/core/firmware/upgrade
nor
curl -XPOST -d '{"address":"1.0.1.10"}' -H "Content-Type: application/json" -k -u "key":"secret"  https://192.168.1.1/api/firewall/alias_util/add/BANNED

The result is always {"status":"failure"}.

And what should be posted to do a release update: 18.7 to 19.1

Thanks for any help
#8
18.7 Legacy Series / Monitoring of Internetspeed
October 04, 2018, 12:13:53 PM
Hi again,

is there any possibility to monitor only the maximal Internetspeed used on WAN for download an upload for a couple of days?

Thanks again.

EDIT: Sorry, opening the eyes would help
IPERF is the required tool
#9
Hallo,

is there a possibility to import and update a own cer-certificate scheduled from the shell used for the gui?

Thanks for any answer.
#10
Found solution

In Firefox type about:support and there click "Refresh Firefox ..." and it worked.
#11
Hello, i use Firefox to access OPNsense from WAN with one limited IP. I set the configurationport to 44443. Since one of the last Firefoxupdates the performance to access the GUI is extremly slow so that i must wait 2 minutes until the GUI opens and also when i click on submenu in GUI the performance is slow. When i close Firefox i become a Crashscreen from Firefox.
I tried it with different OPNsense-Versions and on different Computers always the same. What can i do?
#12
Is there a possibility to create Vouchers witch will be activated on first login?

It means, that at first logon time and date will be inserted in database and from there its valid for example a week.

This would be fine for preparing some Vouchers for future usage.
#13
Nobody of the team?
#14
Quote from: gertfriend on April 07, 2017, 03:26:41 PM
That would be a great feature.

Would it be possible also to integrate a statistic for the connected users, for example to see how much clients were connected yesterday at 09.00?

For now i solved it with the following script, witch will write date and time and the number off logged in users in the cplogins.txt and this script is scheduled every 5 minutes:


z=$(date +"%d.%m.%Y %H:%M")
l=$(configctl captiveportal list_clients 0 | grep -w "anonymous" | wc -l)
echo $z $l >> /root/cplogins.txt
#15
Would it ever be possible to whitelist URLs in Captive Portal, for example someone having a page info.clientsurl.com in which they host a page with internal information: dinner menu, activities for today ... without links to other URLs

I saw that this was just asked in github but i would ask to you if it would be integrated in newer versions.