Messages

@my_network, no, i don't use it.
and i don't think that package from repo can cause kernel panic....
problem somewhere else.

i also have issue with upgrading... interesting, how to make old version permanent to boot for time being.

i've tried to
root@OPNsense1:~ # mv /boot/kernel /boot/kernel.bak
root@OPNsense1:~ # cp -r /boot/kernel.old /boot/kernel
root@OPNsense1:~ # shutdown -r now

but it didn't worked.... and more: i can't find kernel panic in logs.
where is the boot log stored?
from screen i manager to get that:

@chrisC as a VERY DIRTY solution you can add strrings to /usr/local/opnsense/service/templates/OPNsense/Tor/torrc

this one is template, which is used to generate config on each restart.

and it will allow to live a bit longer without editing exact torrc file till next time tor will be upgraded.

as a reminder, you can also add trigger to monit, that will send you message, where your line is absent.

hm... no one answers...

but issue still exist...

there is an opened ticket already: https://github.com/opnsense/plugins/issues/961

i've tried to search by "tor" keyword, and there are toooo many links)
but for obfs4 found that: https://forum.opnsense.org/index.php?topic=19114.msg87568#msg87568

so sad, it doesn't have any comments :(

Hello,

situation: tor is started to being blocked on country wide policy, and obviously it stopped to work.

How it was:
Tor plugin was receiving connections on 9040 port, firewall/NAT was set up to forward all "blocked" traffic to tor. And it was working really cool, till some days ago.

I tried to run fresh tor-browser from same network - it is working without issues.
Also, i've read that: https://blog.torproject.org/tor-censorship-in-russia/ and https://forum.torproject.net/t/tor-blocked-in-russia-how-to-circumvent-censorship/982

noticed, that there are talks about obfs4 bridges. so i've got some bridges, but looks like tor on opnsense doesn't support that.


So asking for advice - are there any workarounds?

thank you!

so, soon it will work... cool.

Hello,

what is the best way to setup custom settings for nginx reverse-proxy in main part?

for example, i need to configure `worker_rlimit_nofile`?
i saw, that `worker_connections` exist on main configuration in UI... but what about things, which are not added?

also, is it possible to add some vhost.conf file, instead of configuring all thru UI?
would be cool, actually, if there will be special place in `Other` tab to add custom config, where it will be possible to add some things which are not implemented in UI.

ps. why? as it suggested by vendor: https://www.jetbrains.com/help/youtrack/standalone/Reverse-Proxy-Configuration.html#Nginx_Config

you can setup HAproxy as with as many sites as you wish.

SSL certificates may be generated with lets encrypt plugin, or you can use your own. no need to use wildcard.
But you will need to define "frontend" and "backend" records, and then map it to each other.

from my opinion, setting up HAproxy is more complicated, then nginx... but still, you can do all things with one public IP.

this is quite nice thing, but now it is not needed to write any sh scripts.

in most cases only need is to add service with:
Name: gmirror status
Type: Custom
Path: /sbin/gmirror status
Tests: NonZeroStatus

and that's it.
it will check `gmirror status` and trigger alerts if status is changed.

ok.

tried adding

Code Select Expand

status /usr/local/www/clients.log and it works as we need it: we can run curl https://192.168.0.1:8080/clients.log and parse it locally.

Hello,

i need to set static IP for special openvpnclients... but, it doesn't work in the way how it was working on plain openvpn config: i'm trying to add "ifconfig-push 192.168.200.200 255.255.255.0"  to Client Override config.

client can't connect with this setting.

So, if there are problem to set static address - is it possible somehow to get ip addresses thru RestAPI (maybe there are hidden feature) or thru cli interface (like connect thru ssh and run "openvpn get clients")

both ways will work, also like setting static IP

great! thanks a lot!

Thank you, @fabian.

it make sense... but where to find this checkbox?

on server config i cant see it...


and yes, in mobile development customer asks to set special User Agent... like: okhttp/2.1.2.2