Messages

1

22.1 Legacy Series / Re: os-ddclient

« on: January 30, 2022, 07:06:28 pm »

With the current os-dyndsn service I can select "Custom" as the "Service type" and enter the information that my Dynamic DNS provider sent me (Username, Password and URL).

I tested the os-ddclient plugin today and noticed that it (currently) only supports a finit list of providers. My Dynamic DNS provider is very likely to small to ever end up in that list.

Are there plans to add a "Custom" entry to os-ddclient?

2

General Discussion / Re: OpenVPN: Setting advanced options

« on: November 08, 2020, 06:17:34 pm »

@bartjsmit Thanks for pointing me in the right direction. I found the configuration file in the folder.

I want to set the following options:
user nobody
group nogroup
tls-version-min 1.2

(I didn't see any fields in the ui to configure this)

3

General Discussion / OpenVPN: Setting advanced options

« on: November 08, 2020, 11:35:56 am »

I have two questions concerning running an OpenVPN server.

1. What is the recommended way to set advanced options of an OpenVPN server?

I saw the „Advanced“ field in VPN –> OpenVPN -> Servers section but the description states that this field will be removed:
This option will be removed in the future due to being insecure by nature. In the mean time only full administrators are allowed to change this setting.

2. Can I connect to the shell and see the complete configuration file somewhere? (I would like to double check that all the options are set as expected)

4

General Discussion / Blocklist on WAN interface

« on: November 06, 2020, 06:13:22 am »

The following page describes how to configure the Spamhaus blocklist:
https://docs.opnsense.org/manual/how-tos/edrop.html

The blocklist is applied to both the WAN and the LAN interface.

What is the advantage of using the blocklist on the WAN interface?
I would have expected that this isn't necessary since the WAN interface denies everything by default (default deny rule).