Messages

Sorry if this is a stupid question, but i've noticed my WAN's external IP addr is included as a route in the loopback address... is that to be expected?

Disabling IOMMU in the BIOS has brought it way down

This expected memory usage with ZenArmor running? (APU2c4)

I can't really remember what is was prior to the issue with 1.13, but I don't remember it being this high.

I'm seeing very high RAM usage to (+/-80% of 4GB) with high usage related to what appears to be ZenArmor services

I tried reinstalling ZenArmor and then opnsense factory reset, but none of it helped

Saw a msg saying services were waiting to start or failing

Looks like there's something wrong with it, for me at least (us)

can confirm there appears to be an issue here with the essentially security policies

if any of the following are enabled, all filtering across app, web, and security stops working :

bad ip
non-existent domains
hacking sites
potentially dangerous
undecided not safe

tested using mobile browser with no addons enabled and an ad block test site

just went through the essential sec policies enabling and disabling one after another

I've noticed having the Crowdsec IDS enabled results is a lot of CPU usage.

If I just enabled just the IPS bouncer, will the blocklist aliases still update?

I've also got ZenArmor running.

Been looking for a fibre provider who doesn't use PPPoE.

Toob (UK) said they use IPoE.

From what I've read this is not an encapsulated protocol, using DHCP options for auth.

Just wanted to checked if IPoE's an issue with BSD based routers, like the single threaded PPPoE daemon is?

Are there other issues that could impact performance or limit functionality?

do you still have to set up hybrid NAT rules for UPNP to work properly?

Using the blocklist does it for me

Disabled everything except Threatfox IOC... no problems

APU's have IOMMU support in the CoreBoot BIOS.

I know it's a virtualisation thing, but wondering if it's something you'd want enabled anyway for other purposes?

What NIC's does your router use?

Code Select Expand

The current Suricata/Netmap implementation limits this re-injection to one thread only.
Work is underway to address this issue since the new Netmap API (V14+) is now capable of increasing this thread count.
Until then, no benefit is gained from RSS when using IPS.

Any news on this?  This plus RSS on lower power multi-cored devices sounds interesting.

Cloudflare DNS is an anycast network.

https://www.cloudflare.com/en-gb/learning/cdn/glossary/anycast-network/

Just a guess, but some of those reponses, for whatever reason, could be coming from the other side of the world.

ignore
:D

I'm strugglgin with this to.

I can ping in to my LAN from a ZT node via OPNsense, just not the other way around.