Messages

1

22.1 Legacy Series / Gateway monitoring 100% loss but Interface is UP and there isn't any packet loss

« on: February 09, 2022, 04:59:15 pm »

I added a new WG interface to the existing one.

WG1 is the new WG interface. I've done everything exactly as I did for my original interface, WG0.

In gateway monitoring, WG0 works correctly, 0% loss. However, WG1, posts 100% loss no matter what monitoring IP I use.

Both WG interfaces are up and have successful handshakes. I know for a fact there should not be a 100% loss on WG1 but it is showing 100% loss.

Anyone has any ideas why this is happening?

2

21.7 Legacy Series / Re: A way to change the order of plugin startup when booting?

« on: December 19, 2021, 09:17:52 am »

Only thing that sucks is on AdGuard the queries only show 127.0.0.1, ::1, and the Fe80 IPv6 addresses. Instead of the actual client name (hostname). Is there a way around this? Some setting within OPNsense?

You set the IP for Adguard DNS in your DHCP DNS settings.

3

Intrusion Detection and Prevention / Re: Suricata still crashing ( please help )

« on: December 19, 2021, 06:03:00 am »

Rollback to an earlier version.

Run in shell;
opnsense-revert -r 21.7.5 suricata

4

21.7 Legacy Series / Re: Interfaces randomly go down/unroutable

« on: December 18, 2021, 06:29:35 am »

It has not been fixed in 21.7.7 for me.

Also I have only enabled suricata on my WAN interface which has no virtual interfaces, so I don't understand why I am impacted.  For now disabling suricata has solved the issue.

Did you try rolling back the suricata version to the one before 21.7.6? It works wonderfully for me after a rollback.

5

General Discussion / Re: Research Internet connectivity issue

« on: December 13, 2021, 06:30:02 am »

The issue is most likely Suricata. Disable intrusion detection. See if that helps.

6

General Discussion / Re: Different gateways for different computers

« on: December 09, 2021, 04:41:54 am »

Create a firewall ALIAS. Put those IPs for WAN2 in the ALIAS and use a firewall rule to forward that ALIAS to WAN2.

7

21.7 Legacy Series / Re: OPNSense blocking legit sites, not idp or web filtering

« on: December 09, 2021, 04:35:32 am »

Check your MTU and adjust it.

8

General Discussion / Re: Is there an advantage to using adguard over the unbound black lists?

« on: December 07, 2021, 09:23:39 am »

You can set per device settings. Per device restrictions, etc.

Also adguard home beta now has optimistic caching. Which works fantastic. My DNS requests average 2ms now.

9

General Discussion / Re: ETPro Telemetry edition difficulties

« on: December 07, 2021, 09:21:33 am »

Hi,

We checked the order and manually approved it. You should be getting a token via mail within the next hour.


Cheers,
Franco

Hi Franco,

Unfortunately, I still haven't received an email with the token. I've also checked my spam folders.

Cheers!

10

General Discussion / Re: ETPro Telemetry edition difficulties

« on: December 06, 2021, 01:44:55 pm »

Thanks!

11

Intrusion Detection and Prevention / Re: 21.7.5 IDS error

« on: December 06, 2021, 08:31:26 am »

Hi!
I have the same error. About one time a day the network communication stops working. Then i have to restart the suricata service and then it works again. i found nothing in the logs which could explain this problem. The machine is a Xeon e5-2620 with 32 GB Ram and 600 GB HDD, so there should be no problems. I use dual-WAN and IPS on WAN side and Sensei on LAN-side. So maybe it is a problem in the last release?
Greetings
Rudolf

I have the same problem but no errors in the logs. Can't even SSH in and GUI unresponsive. Needs a reboot for everything to come back up.

Disabled suricata IPS and it's ok in IDS mode. Only enabling IPS mode causes this issue.

12

General Discussion / ETPro Telemetry edition difficulties

« on: December 04, 2021, 04:26:47 am »

I tried to order ETPRO telemetry edition from the shop but was declined with the following;

Your order has been declined due to inconsistencies in your application, within a couple of days we will manually inspect the order to see if the automated checks were correct.

I wonder what went wrong. Anyone else encountered this error?

13

Virtual private networks / Re: Wireguard selective routing for all except those listed in the alias

« on: November 28, 2021, 06:47:04 pm »

Managed to figure it out.

Used 'Network Group Aliases' to put the whole network as forwarded to WG and another list for exclusions.

14

Virtual private networks / Wireguard selective routing for all except those listed in the alias

« on: November 28, 2021, 05:27:38 pm »

Hi all,

I followed, https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html and got my OpnSense to connect to AirVPN and all is working well.

ProTIP for those new to this: Adjust the MSS to 1300 or you will get slow speeds and dropouts.

Anyway, I want to do the opposite of selective routing. I want all LAN devices to default to being routed over Wireguard and have a list of IPs in an Alias that must have traffic go directly to WAN.

I tried selecting "Source / Invert" on the Alias but it isn't working as I expected. Anyone care to provide any hints?

Thanks.