1
General Discussion / Re: Firewall rules are not applied immediately
« on: June 29, 2023, 02:36:11 am »
It works now.
Thanks a lot.
Thanks a lot.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
Pages: [1]
2
General Discussion / Firewall rules are not applied immediately
« on: June 28, 2023, 05:06:46 am »
Hi everyone!
I installed OPNsense 23.1.7 and everything works fine.
However, even if the rule is disabled in the firewall rule, the network goes out from the local to the outside.
No new internet, but already connected sessions continue to work.
How can I immediately block an already connected sessions?
Firewall:Rules:LAN
Action : Pass
Direction : in
TCP/IP Version : IPv4
Protocol : any
Source : 192.168.0.15
Destination : any
Gateway : WAN_GW
I installed OPNsense 23.1.7 and everything works fine.
However, even if the rule is disabled in the firewall rule, the network goes out from the local to the outside.
No new internet, but already connected sessions continue to work.
How can I immediately block an already connected sessions?
Firewall:Rules:LAN
Action : Pass
Direction : in
TCP/IP Version : IPv4
Protocol : any
Source : 192.168.0.15
Destination : any
Gateway : WAN_GW
3
Intrusion Detection and Prevention / Re: Loss network when I enable IPS
« on: January 18, 2023, 07:09:59 am »
I used pciconf -lv | grep -A1 -B3 network command and got the following output.
root@OPNsense:~ # pciconf -lv | grep -A1 -B3 network
em0@pci0:0:25:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x153a subvendor=0x1028 subdevice=0x05a4
vendor = 'Intel Corporation'
device = 'Ethernet Connection I217-LM'
class = network
subclass = ethernet
--
re0@pci0:4:2:0: class=0x020000 rev=0x10 hdr=0x00 vendor=0x10ec device=0x8169 subvendor=0x10ec subdevice=0x8169
vendor = 'Realtek Semiconductor Co., Ltd.'
device = 'RTL8169 PCI Gigabit Ethernet Controller'
class = network
subclass = ethernet
em0 is LAN and re0 is WAN.
I am enabling IPS on WAN.
When IPS is enabled, after a while, the ping command hangs up.
If IPS is disabled, the ping command will be issued again.
root@OPNsense:~ # pciconf -lv | grep -A1 -B3 network
em0@pci0:0:25:0: class=0x020000 rev=0x04 hdr=0x00 vendor=0x8086 device=0x153a subvendor=0x1028 subdevice=0x05a4
vendor = 'Intel Corporation'
device = 'Ethernet Connection I217-LM'
class = network
subclass = ethernet
--
re0@pci0:4:2:0: class=0x020000 rev=0x10 hdr=0x00 vendor=0x10ec device=0x8169 subvendor=0x10ec subdevice=0x8169
vendor = 'Realtek Semiconductor Co., Ltd.'
device = 'RTL8169 PCI Gigabit Ethernet Controller'
class = network
subclass = ethernet
em0 is LAN and re0 is WAN.
I am enabling IPS on WAN.
When IPS is enabled, after a while, the ping command hangs up.
If IPS is disabled, the ping command will be issued again.
4
Intrusion Detection and Prevention / Re: Loss network when I enable IPS
« on: January 17, 2023, 07:31:24 am »
No VLANs are used.
5
Intrusion Detection and Prevention / Loss network when I enable IPS
« on: January 17, 2023, 03:47:01 am »
Hi everyone!
I recently installed 22.7.10_2-amd64.
However, when IPS is enabled, the network dies.
What causes this and is there any other way to enable IPS?
I hope for a good reply.
I recently installed 22.7.10_2-amd64.
However, when IPS is enabled, the network dies.
What causes this and is there any other way to enable IPS?
I hope for a good reply.
6
Development and Code Review / Re: How to make changes to "core" and test them?
« on: June 24, 2021, 10:13:43 am »
Hi, everyone.
I'm going to build "core".
Even after editing the php file, the modified contents are not reflected.
What should I do?
I'm going to build "core".
Even after editing the php file, the modified contents are not reflected.
What should I do?
8
21.1 Legacy Series / Build Error OpnSense
« on: May 07, 2021, 03:36:53 am »
Hi, everyone!
I installed FreeBSD 12.2 Release version.
And then;
# pkg install git
# cd /usr
# git clone https://github.com/opnsense/tools
# cd tools
# make update
After;
# make kernel
It's build successfully, but
# make base
ld: error: undefined symbol: clang::Sema::BuildCallToMemberFunction()
>>> referenced by Sema.cpp
>>> Sema.o: in archive /usr/obj/usr/src/amd64.amd64/tmp/obj-toos/lib/clang/libclang/libclang.a
~~~~
>>> referenced 7 more times
ld: error: too many errors emitted, stopping now
c++: error: linker command failed with exit code 1
--- clang ---
*** [clang] Error code 1
Make[4]: stopped in /usr/src/usr.bin/clang/clang
~~~
Stop.
Make: stopped in /usr/tools
Anyone help me!!!
I installed FreeBSD 12.2 Release version.
And then;
# pkg install git
# cd /usr
# git clone https://github.com/opnsense/tools
# cd tools
# make update
After;
# make kernel
It's build successfully, but
# make base
ld: error: undefined symbol: clang::Sema::BuildCallToMemberFunction()
>>> referenced by Sema.cpp
>>> Sema.o: in archive /usr/obj/usr/src/amd64.amd64/tmp/obj-toos/lib/clang/libclang/libclang.a
~~~~
>>> referenced 7 more times
ld: error: too many errors emitted, stopping now
c++: error: linker command failed with exit code 1
--- clang ---
*** [clang] Error code 1
Make[4]: stopped in /usr/src/usr.bin/clang/clang
~~~
Stop.
Make: stopped in /usr/tools
Anyone help me!!!
Pages: [1]