Messages

Thanks, will have to pass over the opportunity to buy Zotac Magnus One.

Thanks, information on Killer: https://www.intel.com/content/www/us/en/support/products/215259/ethernet-products/intel-killer-ethernet-products/intel-killer-ethernet-controller/intel-killer-ethernet-e3000-2-5-gbps.html

Just wanted to check if Realtek RTL8168/8111 and 2.5 Gigabit Killer E3000 is supported?
System details: https://www.zotac.com/us/product/mini_pcs/magnus-one-ecm73070c-barebone (without the GPU)

[Regarding I5 8000U, afraid I have to upgrade the whole system (using Qotom mini pc).Would N6005 be any better?]

I5 8000U should handle 1000 also in IPS mode. Which rules do you use? Hyperscan active?

Pattern matcher: is indeed set to Hyperscan.
How do I get the list/count of rules from command line?

Regarding I5 8000U, afraid I have to upgrade the whole system (using Qotom mini pc).
Would N6005 be any better?

Would you be able to direct me to correct resource(s)?

[CPU: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz (2 cores, 4 threads)Networking: Intel Gigabit LANMemory: 8GBVersions: OPNsense 22.1.10-amd64Intrusion Detection: Enabled Promiscuous mode: Not Selected Detect Profile: High]

CPU: Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz (2 cores, 4 threads)
Networking: Intel Gigabit LAN

Memory: 8GB
Versions: OPNsense 22.1.10-amd64
Intrusion Detection:   Enabled
   Promiscuous mode: Not Selected
   Detect Profile:         High

I am using iperf for network performance measurement, and iperf3 on the OPNsense host  shows <300 Mbits/sec. Strange thing is that after a restart it's around 950 Mbits/sec, before dropping back to 250-300 range. To rule out network issue I tried iperf3 across multiple other systems and it's in around 950 Mbits/sec.

Is this expected with this hardware setup?

Hi,
  Unbound seems to be crashing at regular intervals.

What changed:
  Tried enabling Blacklist, which immediately resulted in a crash.
  Disabled the same and Unbound seemed to be stable but crashed again after 10-12 hours.
  No other changes were done.
  Also, suricata seems to be going down very frequently as well. Not sure if it's connected.

System information:
  OPNsense 21.1.5-amd64
  FreeBSD 12.1-RELEASE-p16-HBSD
  OpenSSL 1.1.1k 25 Mar 2021

Regards.

  After upgrade, have noticed that the memory usage has shot up drastically. Suricata shows usage of roughly 2GB.

System:
Intel(R) Core(TM) i3-5005U CPU @ 2.00GHz (4 cores)
OPNsense 21.1.1-amd64
FreeBSD 12.1-RELEASE-p13-HBSD
OpenSSL 1.1.1i 8 Dec 2020
 
  What could be the cause?

Correct

Thanks.

 

Backup custom, remove custom, go to Misc submenu and add 1.1.1.1@853,1.0.0.1@853

Thanks, am assuming:
1. Save configuration before upgrade.
2. Upgrade.
3. Remove from custom
4. Add entries under Misc.

I have this set-up in with 20.1.x     
forward-zone:
      name: "."
      forward-ssl-upstream: yes
      forward-addr: 1.1.1.1@853 # Cloudflare DNS
      forward-addr: 1.0.0.1@853 # Cloudflare DNS

How to set-up the same in 20.7.3 ?

I have this working with 20.1.9_1, followed the steps listed below:

https://www.reddit.com/r/OPNsenseFirewall/comments/97vikk/opnsense_and_pihole_a_guide_to_obscuring_your_dns/

[<Netflow version="1.0.0">]

Hi,
  I have been using OPNsense since last couple of years.
  Thanks for this wonderful piece of software.

  Was earlier on 20.14, and decided to skip 20.1.5 and upgraded today to 20.1.6.
  After reboot, I lost internet connectivity.
 
  Network topology: [computers] --- [switch] --- [opnsense(PPPoE)] --- [Modem]
 
  I tried restoring last known good configuration dated 10th April 2020 after factory reset.
  This again worked for some time probably 10 minutes before I realised that I have lost connectivity.
  Next thing I tried is to take a diff between last know good config and one after upgrade.
  Do still see following differences:
  Working:     
     <Netflow version="1.0.0">
      <capture>
        <interfaces/>
        <egress_only>wan</egress_only>
        <version>v9</version>
        <targets/>
      </capture>
      <collect>
        <enable>0</enable>
      </collect>
    </Netflow>
  20.1.6:
      <Netflow version="1.0.1">
      <capture>
        <interfaces/>
        <egress_only>wan</egress_only>
        <version>v9</version>
        <targets/>
      </capture>
      <collect>
        <enable>0</enable>
      </collect>
      <activeTimeout>1800</activeTimeout>
      <inactiveTimeout>15</inactiveTimeout>
    </Netflow>
  </OPNsense>

  Please let me know, not sure that the above difference could be the cause of this.
  Should I install OPNsense 20.1.4 again from scratch and restore the configuration file ?

  Last but not the least, check for updates from within the GUI doesn't throw connectivity error.
  Though Audit Now, throws No address record.
  For some reason, that's the only component capable of connecting to the internet.
 
  Appreciate pointers to resolve this.

Regards,
Prashant

Update: Disabling DNSSEC on Pi-Hole solved the issue, this was working prior to update.