Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - ptaylor

#1
Done - Thanks
#2
Tutorials and FAQs / BIND Youtube restrict moderate
April 21, 2020, 04:13:39 AM
Hi,

I'm new to OPNsense and found the BIND plugin to help me secure searches on google, and others, especially YouTube.  However, the restrict.youtube.com domain seems to be VERY locked down. 

It seems that the BIND plugin is following the recommendation to:

Add a CNAME for the following hostnames:
www.youtube.com
m.youtube.com
youtubei.googleapis.com
youtube.googleapis.com
www.youtube-nocookie.com
To set strict restricted access, set the CNAME value to restrict.youtube.com.

BUT, just below that line there's another option:
To set moderate restricted access, set the CNAME value to restrictmoderate.youtube.com.

I think it would be good to have this available in the Web interface.  For now, I'm just going to get the A record for restrict.youtube.com, and set the others to that same IP - That should have the same effect, but this would be one more option to give users.

Edit:  I seem to have placed this in the wrong forum.  Can a moderator move it to a more appropriate location?
#3
20.1 Legacy Series / New install 20.1.4
April 19, 2020, 05:26:25 AM
Hi all

Installed OPNsense tonight.  I'm trying to get upnp working for my son's Nintendo Switch.  Previously, I've been using an Eero, which had upnp support, but wanted something with more control.  I tried pfSense (had experience with it before), but we couldn't get upnp working with it, so I saw OPNsense and thought I'd give it a shot.  We are encountering the same problem.  In the logI'm getting messages like this:

Apr 18 23:08:18 OPNsense1 miniupnpd[43000]: PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
Apr 18 23:08:25 OPNsense1 miniupnpd[43000]: shutting down MiniUPnPd
Apr 18 23:08:25 OPNsense1 miniupnpd[93008]: HTTP listening on port 2189
Apr 18 23:08:25 OPNsense1 miniupnpd[93008]: HTTP IPv6 address given to control points : [fdbd:e67d:6b19:aac8::]
Apr 18 23:08:25 OPNsense1 miniupnpd[93008]: setsockopt(udp, IPV6_RECVPKTINFO): Invalid argument
Apr 18 23:08:25 OPNsense1 miniupnpd[93008]: Listening for NAT-PMP/PCP traffic on port 5351
Apr 18 23:08:25 OPNsense1 miniupnpd[93008]: PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
Apr 18 23:09:26 OPNsense1 miniupnpd[93008]: shutting down MiniUPnPd
Apr 18 23:09:26 OPNsense1 miniupnpd[5076]: HTTP listening on port 2189
Apr 18 23:09:26 OPNsense1 miniupnpd[5076]: HTTP IPv6 address given to control points : [fdbd:e67d:6b19:aac8::]
Apr 18 23:09:26 OPNsense1 miniupnpd[5076]: setsockopt(udp, IPV6_RECVPKTINFO): Invalid argument
Apr 18 23:09:26 OPNsense1 miniupnpd[5076]: Listening for NAT-PMP/PCP traffic on port 5351
Apr 18 23:09:26 OPNsense1 miniupnpd[5076]: PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host
Apr 18 23:11:51 OPNsense1 miniupnpd[5076]: shutting down MiniUPnPd
Apr 18 23:11:51 OPNsense1 miniupnpd[64898]: HTTP listening on port 2189
Apr 18 23:11:51 OPNsense1 miniupnpd[64898]: HTTP IPv6 address given to control points : [fdbd:e67d:6b19:aac8::1]
Apr 18 23:11:51 OPNsense1 miniupnpd[64898]: setsockopt(udp, IPV6_RECVPKTINFO): Invalid argument
Apr 18 23:11:51 OPNsense1 miniupnpd[64898]: Listening for NAT-PMP/PCP traffic on port 5351
Apr 18 23:11:51 OPNsense1 miniupnpd[64898]: PCPSendUnsolicitedAnnounce() IPv6 sendto(): No route to host


I was trying some IPv6 stuff to see if that made any difference, since it seems to complain about IPv6. But, no, it doesn't.

Basically, I downloaded and installed all the updates, installed the upnp plugin and enabled it, but I am not seeing anything happen at the Status page.  (Just like with pfSense)

Does anyone have any solid troubleshooting steps I could perform to try to figure out what is going on?

Thanks,
Paul