Messages

1

21.7 Legacy Series / Re: Upgrade to 21.7.5 did not succed completely

« on: November 12, 2021, 09:00:21 am »

Many thanks Franco ;o)

Switching to the default mirror to pickup 21.7.5_2 worked perfectly

2

21.7 Legacy Series / Re: Upgrade to 21.7.5 did not succed completely

« on: November 12, 2021, 07:51:18 am »

I received the same missing libssl.so.50 error on the 21.7.5 update - I'm on the libressl flavour

3

General Discussion / Re: Port Scanning block and Port Knocking - is it possible in OPNsense

« on: November 08, 2021, 12:52:28 am »

fwknop does port knocking with a GPG encrypted / signed packet & is available as a package in FreeBSD. It would need manual configuration. I've used it on Linux & it's quite good.

https://www.cipherdyne.org/fwknop/

psad by the same author detects port scanning but is not in FreeBSD.

4

Virtual private networks / Re: Wireguard as Client with routing

« on: November 08, 2021, 12:15:36 am »

Allowed IP's in Wireguard when run as a client needs to be

Code: [Select]

0.0.0.0/0 - note the zero final octet

I tried restricting the ip's to the LAN subnet & it worked until an update requiring a reboot. At the moment without wireguard dropped packet logging it's difficult to see which required ip's are being blocked (loopback ?)

5

Development and Code Review / Re: Build Error from source

« on: August 03, 2020, 09:42:58 am »

Rust needs 8gb+ of RAM to build - https://rustc-dev-guide.rust-lang.org/building/prerequisites.html

After giving my build machine more RAM making ports succeeded (ram usage went up to 7.5gb while building rust)