1
Zenarmor (Sensei) / Re: 1.18 Wireguard is disconnected
« on: November 02, 2024, 12:24:12 pm »
Is my deployment mode and WG interface selection correct? On the lan, I am using intrusion detection with Surricata.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
Virtual private networks / Monit WG does not start
« on: October 13, 2024, 06:17:14 pm »
Updated to 24.7
WG goes into loop and need to use monit
Followed the link
https://forum.opnsense.org/index.php?topic=35919.0
I needed to use lower case ‘s’ and not upper case
/usr/local/sbin/pluginctl -S wireguard
Start: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard start xxxx-xx-tt-yy-uuuuuuu'
Stop: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard stop xxxx-xx-tt-yy-uuuuuuu'
I get a monit status error
Any suggestion ?
WG goes into loop and need to use monit
Followed the link
https://forum.opnsense.org/index.php?topic=35919.0
I needed to use lower case ‘s’ and not upper case
/usr/local/sbin/pluginctl -S wireguard
Start: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard start xxxx-xx-tt-yy-uuuuuuu'
Stop: /bin/sh -c '/usr/local/sbin/pluginctl -s wireguard stop xxxx-xx-tt-yy-uuuuuuu'
I get a monit status error
Any suggestion ?
3
Virtual private networks / Re: WireGuard -> Tunnel status information for automatic restart by monit
« on: October 12, 2024, 02:34:12 pm »
How did u setup the WG monitor? I used this link
https://forum.opnsense.org/index.php?topic=35919.0
https://forum.opnsense.org/index.php?topic=35919.0
4
24.1 Legacy Series / Audit health log error(?)
« on: May 04, 2024, 05:49:51 pm »
I am getting an error in the audit health log. What is it?
Running wireguard, intrusion detection,zenarmour.
It was not there after I started from 24_1-> 24_1_6. Only after I restored my Opnsense-config.xml file
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
size (299, 364)
sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x69344d6e7acbd6e60e93c10865e489c54293af7143ef5cc58127aa67175d0dd2)
>>> Check installed repositories
Running wireguard, intrusion detection,zenarmour.
It was not there after I started from 24_1-> 24_1_6. Only after I restored my Opnsense-config.xml file
>>> Check for missing or altered base files
Error 2 occurred.
etc/sysctl.conf:
size (299, 364)
sha256digest (0x45f469e7a9b4eef887bab7b55397305043fe101e1d6ce6f7e23d758e72f56dc6, 0x69344d6e7acbd6e60e93c10865e489c54293af7143ef5cc58127aa67175d0dd2)
>>> Check installed repositories
6
Hardware and Performance / WiFi 7 PCI-e card
« on: March 12, 2024, 11:56:23 pm »
Has anyone tried to integrate this wifi 7 card into their opnsense system?
Just found this amazing item on AliExpress. Check it out! $29.87 | Comfast 8774Mbps WiFi 7 Intel BE200 Pcie Wireless Wifi Adapter Bluetooth 5.4 Tri Band 2.4G/5G/6GHz Wifi7 Card Win10/11 Linux
https://a.aliexpress.com/_mrvOh70
Just found this amazing item on AliExpress. Check it out! $29.87 | Comfast 8774Mbps WiFi 7 Intel BE200 Pcie Wireless Wifi Adapter Bluetooth 5.4 Tri Band 2.4G/5G/6GHz Wifi7 Card Win10/11 Linux
https://a.aliexpress.com/_mrvOh70
7
24.1 Legacy Series / Re: 24.1 - DHCP server moves to KEA - implications?
« on: March 12, 2024, 07:28:00 pm »
Hansen97124
Is it in between <reservations> and </reservations> tags?
Does the reservations show up in the kea reservation gui?
Are u sure the reservation subnet uuid is correct for your network?
Search on the subbnet uuid. 19b11319-3d95-40c0-8668-56b15a05a6c0
It should match ur network u declared earlier.
Is it in between <reservations> and </reservations> tags?
Does the reservations show up in the kea reservation gui?
Are u sure the reservation subnet uuid is correct for your network?
Search on the subbnet uuid. 19b11319-3d95-40c0-8668-56b15a05a6c0
It should match ur network u declared earlier.
8
24.1 Legacy Series / Re: 24.1 - DHCP server moves to KEA - implications?
« on: March 11, 2024, 09:42:50 pm »
Open the ur config-OPNsense*.xml, the reservation uuid is unique per reservation and should have one subnet uuid if they belong to that subnet.
</reservations>
<reservation uuid="6a688941-02f8-46aa-abc6-8121fa434809">
<subnet>7046c7cb-a9fb-4a50-8a49-3b6e77d42809</subnet>
<ip_address>192.168.1.100</ip_address>
<hw_address>90:a1:b1:c1:d1:e11</hw_address>
<hostname/>
<description/>
</reservations>
</reservations>
<reservation uuid="6a688941-02f8-46aa-abc6-8121fa434809">
<subnet>7046c7cb-a9fb-4a50-8a49-3b6e77d42809</subnet>
<ip_address>192.168.1.100</ip_address>
<hw_address>90:a1:b1:c1:d1:e11</hw_address>
<hostname/>
<description/>
</reservations>
9
24.1 Legacy Series / Re: [Solved] DNS over TLS is not working
« on: March 11, 2024, 01:30:40 pm »
I have a new issue. This morning the client could not do nslookup 8.8.8.8, the Firefox browser on max protection (nextDNs) said pick a new selection. I restarted the wireguard service and no dns. I had to reboot opnsense and everything worked. Any suggestions? The w11 nic connectivity always said it had internet access.
10
24.1 Legacy Series / Re: [Solved] DNS over TLS is not working
« on: March 10, 2024, 05:27:16 pm »
@CJ
I fixed my Firefox browser and selected maximum protection and selected NextDNS in the security and privacy settings. Thank u.
I fixed my Firefox browser and selected maximum protection and selected NextDNS in the security and privacy settings. Thank u.
11
24.1 Legacy Series / Re: 24.1.2 Wireguard does not work after updating
« on: March 10, 2024, 02:25:03 pm »
@Valentinas
What rule did u add to the wireguard ip pool? Can post a pic or provide details?
What rule did u add to the wireguard ip pool? Can post a pic or provide details?
12
24.1 Legacy Series / Re: DNS over TLS is not working
« on: March 10, 2024, 01:52:18 pm »
Update: 02112024 What an idiot! This morning, I looked closer and the client had a W11 static lease with a dns set to Google 8.8.8.8 Needed to set it back to dhcp. DNS over TLS is now working. nslookup pornhub.com is now blocked as it should be by NextDNS.io. Relief.
13
24.1 Legacy Series / Re: [Solved]Python script converts Opnsense configuration file into kea reservations
« on: March 10, 2024, 03:20:15 am »
@randyg53
No problem. It really added to my Python, xml, ElementTree, Python dictionary, json object, json array, regex understanding and knowledge. It was challenging but it is not my day job.
No problem. It really added to my Python, xml, ElementTree, Python dictionary, json object, json array, regex understanding and knowledge. It was challenging but it is not my day job.
14
24.1 Legacy Series / [Solved] DNS over TLS is not working
« on: March 10, 2024, 02:05:59 am »
After the latest upgrade, nslookup google.com uses google dns and not my NextDNS.io dns server.
Anyone having a similar experience? It was working on previous opnsense releases.
ISC & KEA has a dns server and they point to the same ip address.
Where is /etc/kea/ there is a config file I need to take a look at?
My configuration is wireguard, kea dhcp, zenarmor and Suricata . It is not NextDNS since my pfsense network nslookup works fine.
Anyone having a similar experience? It was working on previous opnsense releases.
ISC & KEA has a dns server and they point to the same ip address.
Where is /etc/kea/ there is a config file I need to take a look at?
My configuration is wireguard, kea dhcp, zenarmor and Suricata . It is not NextDNS since my pfsense network nslookup works fine.
15
24.1 Legacy Series / Re: Created a migration tool for DHCP Static Reservations to Kea DHCP Server
« on: March 10, 2024, 12:57:50 am »
I also wrote one too last month but in python. It automatically merges the isc static leases into the kea reservation section by reading the array of json objects into the xml sub-elements of ElementTree. It also checks if u have a subnet uuid.
https://github.com/patrick0525/Python-Opn-isc-kea
https://github.com/patrick0525/Python-Opn-isc-kea