1
General Discussion / Re: honeypot log in nginx?
« on: January 30, 2023, 07:20:59 am »
It should be possible to have to copies of logs, because I can read logs from webgui of OPNsense and syslog server at the same time.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
General Discussion / honeypot log in nginx?
« on: January 25, 2023, 02:50:36 pm »
Hi, everyone:
I've found some interesting settings in the nginx plugins, which is called "honeypot". If any ip had visited this location, the source ip will be added to the nginx_block_list, and that's a great feature.
But after some ips get blocked, there will be no access/error log in the webgui. How can I get the info about what the bad guys did? e.g. hostname, url, timestamp, action, etc.
I've found some interesting settings in the nginx plugins, which is called "honeypot". If any ip had visited this location, the source ip will be added to the nginx_block_list, and that's a great feature.
But after some ips get blocked, there will be no access/error log in the webgui. How can I get the info about what the bad guys did? e.g. hostname, url, timestamp, action, etc.
3
General Discussion / Firewall rule for CARP on ipv6?
« on: February 18, 2019, 09:08:02 am »
Hi, I'm an newbie to bsd and I do think OPNsense is good for testing and learning.
I've deployed two OPNsense on a proxmox server and tried the CARP feature but meet some problems, the CARP on ipv4 works fine, but the CARP on ipv6 will become dual masters on WAN interface and not things goes wrong on LAN interface.
guessing it's a firewall problem
so I tried to add some firewall rules to WAN interface but it doesn't help.
finally, I turn the whole firewall off and that "fix" the problem.
after some google, I cannot find any further information about the protocol and how to pass it on firewall.
hope to get some help here
I've deployed two OPNsense on a proxmox server and tried the CARP feature but meet some problems, the CARP on ipv4 works fine, but the CARP on ipv6 will become dual masters on WAN interface and not things goes wrong on LAN interface.
guessing it's a firewall problem
so I tried to add some firewall rules to WAN interface but it doesn't help.
finally, I turn the whole firewall off and that "fix" the problem.
after some google, I cannot find any further information about the protocol and how to pass it on firewall.
hope to get some help here
Pages: [1]