Messages

TY Sir! For some reason the mirror was set to 'custom'. I have no idea how that got set but I set to default and update went perfect.

All good, thanks!  ;)

Currently on OPNsense 24.1.4-amd64 and upgrading to the latest 24.1.10. I usually update regularly but have not updated in several months. However it seems like there is an issue now with the repo?

[1/92] Fetching php82-dom-8.2.20.pkg: ......... done
[2/92] Fetching php82-simplexml-8.2.20.pkg: ... done
[3/92] Fetching py311-charset-normalizer-3.3.2_1.pkg: .......... done
[4/92] Fetching py311-pyasn1-modules-0.4.0.pkg: .......... done
[5/92] Fetching easy-rsa-3.1.7,1.pkg: ....... done
[6/92] Fetching py311-pyyaml-6.0.1.pkg: .......... done
[7/92] Fetching py311-aioquic-1.2.0.pkg: .......... done
[8/92] Fetching e2fsprogs-libuuid-1.47.1.pkg: ..... done
[9/92] Fetching bind918-9.18.27_1.pkg: ....... done
pkg-static: cached package bind918-9.18.27_1: missing or size mismatch, fetching from remote
[10/92] Fetching bind918-9.18.27_1.pkg: .......... done
pkg-static: bind918-9.18.27_1 failed checksum from repository
Starting web GUI...done.
Generating RRD graphs...done.
***DONE***

I have rebooted twice but still gets stuck updating each time. Any advice? Maybe I missed a post about this, not sure?
I did find this one thread with something similar but not sure if this is needed in my case?
https://forum.opnsense.org/index.php?topic=40834.msg200221#msg200221

@sy, just sent the report, please let me know if you need anything else.  ;D

Also, under Sensei: Reports: Connections I see plenty of stuff, but under Blocks, I see nothing! I would think with the settings I have there should be plenty being blocked and logged here right?  :-\
Also I think its configured right? I have all 6 interfaces selected.

Hi, so not sure I am doing this right but trying to re-direct all DNS queries to OPNsense as even thought I have my SmartTV set to this (GW of .1), it still ends up going to google (8.8.8.8). All other devices on the network are fine and use their default GW for DNS.




Here is how I have the NAT port forwarding setup as described in this link: https://forum.opnsense.org/index.php?topic=9245.0

I may need to reply to that thread also to ensure this is right.

Hi, so not sure I am doing this right but trying to re-direct all DNS queries to OPNsense as even thought I have my SmartTV set to this (GW of .1), it still ends up going to google (8.8.8.8). All other devices on the network are fine and use their default GW for DNS.

Here is how I have the NAT port forwarding setup.

Sure, I will get those next. I am sure there are some "ads" being blocked and logged but not the visible ones normally seen while using the official YT app. Will post back soon.... Thanks

Well, I think we are on to something here. After looking at these pages, I seen NO blocks! After looking around it appears my Smart TV is bypassing my DNS servers/settings and going straight to Googe 8.8.8.8!  >:(
I know there is a way to fix this with FW rules, so looking into this now. At least this is step 1.
@Sy, will reply back tomorrow once I can get this fixed and working properly.

Sure, I will get those next. I am sure there are some "ads" being blocked and logged but not the visible ones normally seen while using the official YT app. Will post back soon.... Thanks

So I have a new OPNsense install with the latest updates, Sensei installed with the following blocks:






On a PC with a browser, this is no issue as UBO takes care of this easily. However under the YT app on WebOS, nothing seems to work. Any ideas here? Is this even possible?

I also have unbind setup with several DNSBL lists enabled which seem to work good but not sure if they are able to help here too?

I dont have any YT specific app blocked as I dont want to block the app itself, right?

Any advice on blocking ads and/or surveys on YT here?

LOL... I thought it was only me stressing over this setup, even though I consider myself "decent" with Networking and such...  :o

Yea I really do like OPNsense ALOT and I think once I figure out what I need to know (there are so many options available it seems if I ever need them), I will be good. I dont see myself needing or wanting to change to anything else. I am trying to clean and simplify my FW rules and optimize where I can, taking backups along the way. Nearly locked myself out of the GUI the other day changing the LAN interface assignment, luckily I still had access through another vlan, lol! Locking that down is next but glad it was still open for now. Next up is setting up a NAS, but I am getting OT now.

Thanks again guys...  ;D

So I think I figured out why none of my devices were using the DNS servers I had listed under System.... I did not have the DNS Query Forwarding checked, Duh.... Seems like things are running good now... In case anyone runs into this, here is where it is under unbound.

Just use Unbound. It has no safesearch but easier to configure

Thanks mimugmail!!

I was actually following your site to help set this up. "Blocking Ad's (Option 0 – NEW)"

So for now, I disabled Bind and only using unbound. I think I still have some testing to do as I dont think my DNS servers listed under
System: Settings: General are actually taking effect. I am testing with both 8.8.8.8 (temp test) and nothing, and Cloudflare still shows up on a dnsleaktest result. I would expect my ISP DNS servers to be listed. Eventually I want to use Cloudflare 1.1.1.1 servers.

Thanks for the reply!!

Yea I guess I need to pick one, sounds like unbound is prob enough, esp since I am not sure what I am "missing". I will look further into this and prob disable bind.

Thanks for the link, I have been wanting to do this also, esp with using a VPN on one client, trying to force DNS through OPNSense to help with ad blocking and such.

Every little bit of info helps...   ;D

Hello, can anyone Please help out here... Thanks...   ???

Any help with this setup... plz  :-\