Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - FOOLiSH

#1
General Discussion / Re: Problem 100% cpu suricata
July 15, 2020, 02:26:04 PM
solved to create a script
https://forum.netgate.com/topic/64563/pfsense-auto-reboot-script-when-google-is-unreachable
i have modify something

#!/bin/bash
#
# put -xv after bash to debug
#
HOSTS="www.google.com"
COUNT=10
echo "----------------------"
#debug
echo "Host to Ping -----> " $HOSTS
echo "----------------------"
echo "Ping to do   -----> " $COUNT
echo "----------------------"
######
for myHost in $HOSTS
do
  counting=$(ping -c $COUNT $myHost | grep 'received' | awk -F',' '{ print $2 }' | awk '{ print $1 }')

  #debug

  echo "Ping replied -----> " $counting

  ######
  if [ $counting > 5 ]; then
echo "----------------------"
   echo "Ping Host OK ----->" $HOSTS
echo "----------------------"
  else
        echo "Reboot Suricata WAN DOWN!"
        echo "STOP Suricata Service"
        sleep 3
        sudo service suricata stop
        echo "Wait 15 seconds"
        sleep 15
        echo "Reset ALL state"
        sleep 3
        sudo pfctl -F state
        echo "Wait 10 seconds"
        sleep 10
        echo "START Suricata Service"
        sleep 3
        sudo service suricata start
fi
done

after create a new crontab every minute execute script for chek www.google.com its ping ok do nothing if ping go down reboot service
#2
General Discussion / Re: Problem 100% cpu suricata
July 15, 2020, 11:08:23 AM
its possible to create a schedule for reboot automatically the service?
#3
General Discussion / Re: Problem 100% cpu suricata
July 14, 2020, 09:00:38 PM
news for this problem?
#4
General Discussion / Problem 100% cpu suricata
July 01, 2020, 08:33:48 PM
hi, when my pppoe go down, suricata, cpu go 100%, i must reboot the service manually. why?
this is the error
uricata: [100928] <Error> -- [ERRCODE: SC_ERR_NETMAP_READ(264)] - Error reading data from iface 'pppoe0': (55u) No buffer space available
#5
su opnsense vai su System ---> Configuration ---> Defaults
poi clikki su YES
#6
Italian - Italiano / Re: OPNsense come server DNS
June 19, 2020, 12:00:45 PM








#7
General Discussion / Wireguard on OPNsense
June 19, 2020, 11:54:54 AM
Hi all,
someone set up wireguard on opnsense with NordVPN service?
#8
Italian - Italiano / OPNsense & openVPN
May 29, 2020, 08:43:57 AM
Ciao a tutti, ma vi risulta che limiti la banda a 30mega?
#9
Italian - Italiano / OPENvpn non va in rete
April 03, 2020, 01:33:15 PM
Ciao a tutti. vado diretto al sodo sperando di trovare gente competente  8)
ho messo in piedi tra 2 opnsense una vpn con certificati e chiavi TLS. un opnsense vpn server, l'altro client. la vpn si collega regolarmente, il server passa al client regolarmente alcune rotte imposte per l'accesso a determinate reti lato server.
se dal mio computer nella lan provo a pingare il GW della vpn non pingo ne quello, ne nessuna macchina remote ne mi collego in rdp a vari server. dal firewall client, riesco a pingare tramite l'interfaccia di default il gw della vpn ma se imposto il sorgente la mia lan non pingo nulla...
ho provato a caricare il mio profilo .ovpn sul client del mio pc e tutto funziona, dove sbaglio?
#10
Italian - Italiano / Re: OPNsense come server DNS
January 10, 2020, 06:45:08 PM
risolto 8)
#11
Italian - Italiano / OPNsense come server DNS
December 16, 2019, 05:50:34 PM
Ciao a tutti, รจ possibile rendere il prorpio opnsense un server dns locale? ho letto che con Dnsmasq dovrebbe essere possibile, ma abilitandolo e impostando il mio firewall come gateway e come dns non risolve....dove sbaglio? grazie a tutti