Messages

1

Virtual private networks / WG access to the Client ( Endpoint ) not possible

« on: January 20, 2023, 03:12:00 pm »

Hi,

I need acess to the clients ( Endpoints) of server side (LAN)

I install a Glinet Mango mini routers with VPN Client of my OPNSENSE, in this case all ok, client ( Glinet) acess to the my Lan ( NAS, WEbserver, etc..)  Bur my problem i need acess to the my client.

In this case:

OPNSENSE LAN --  192.168.5.x
WG -- 10.10.10.x

Glinet

LAN 192.168.8.x
WG- 10.10.10.2

If ping to the Glinet ( Client Side) to the LAN Opnsense or ip WG not ping. ( Allowed IP 0.0.0.0/0)

In OPNSESNE if Ping to client 10.10.10.2 in this case the ping is ok,


I need access to the LAN 192.168.5.x ----> CLIENT (GLINET ROUTER) (192.168.8.x)

Any help?

2

Intrusion Detection and Prevention / Re: IPS not showing alerts and Mass IPS DROP/Rule Enable? - Coming from PFSense

« on: July 09, 2019, 06:57:23 pm »

My version of OPNSENSE is:

 OPNsense 19.1.10-amd64

WAN: PPPoE

Settings:
Enabble X
IPS Mode X
Promiscuous mode  X
Pattern matcher:  Hyperscan
Interfaces : WAN ( PPPoE)

The problem is in the alerts and logs is Empty.

The problem is the same in older versions of Suricata taht not inspection with Interface Wan is PPOE???

Any idea for solved this?


Thx

3

Spanish - Español / VLAN3 Voip Movistar

« on: June 26, 2019, 10:08:12 am »

Hola,

Una pregunta.. alguien tiene funcionando la VOZ IP de Movistar? 
Con PFsense si me iba, simplemonte instlae el plugin RIP .

La VLAN 3 , me da la IP 10.22xx.xx   pero desde la LAN no hago ping, y veo que recibo las rutas...

En este enlace lo explica muy bien, pero claro no es ni con PFsense ni con OPNsense..
http://www.luispa.com/archivos/266

Alguna ayudita?

4

Intrusion Detection and Prevention / Rules recomended for Home Network

« on: July 03, 2018, 09:43:56 pm »

Hi,

Whats is the rule recomended for opmize perfomance IDS/IPS.

** My WAN connection is PPoE

My questions is:

• Is recomended active the IDS/IPS when PPoE Wan connection?
• If is active what is the Rules active for major perfomance and security?

Thx
-

5

Intrusion Detection and Prevention / Re: Performance tuning for IPS maximum performance

« on: May 30, 2018, 09:22:41 am »

Some of the tunables and settings do come with a resource price. Try reducing the interrupt rate. The queue size is a NIC dependent setting and depends of the buffer size in the NIC itself.

Hi,

Is possible put youtr config, in APU2C4?

I read de tuto, bit when insert the config in the loader.conf, when reboot i lost all config.

I hace a FFTH 600MB/600MB .
IPS/IDS activo :  100/100MB
IDS/IPS not active:   300MB/600MB

Is posible that the APU2C4 is poor hardware?

I have ordered a QOTOM on ALLIEXPRESS core i7 8Gb RAM

Do you think that installing PFSENSE will improve this in the APU2C4?