Messages

I am not able to understand this can you please brief with one example my major concern is I want to connect two or three opnsense firewall using puppet for a common/central management server

I want to create a user who can execute only some commands like "tcp dump", "hardware configuration", "firewall", "packetfilter", etc. for CLI using CLI only.

I had installed puppet agent on the machine, and trying to configure opn-cli on opnsense machine, it is asking for ca.pem, does anyone have any idea where did I get this file. I had tried the certificate inside System->Trust->Certificate but it is a TLS certificate but I need SSL certificate, please let me know where can I get that file and also please let me know if I am doing it wrong or not. If yes then let me know the right way to do it.

During the BUILD process, repositories other than "core", "src", "ports", "plugins", "tools", are the other repositories like like "rules", "installer", etc., used in the BUILD process

I was trying to blink the LED on my hardware machine using console and not the RJ45 Cables, but it seems to be tricky. How can I blink the LED on my hardware machine(ethernet ports) using the console?

How do I change the ntp server from build and not after installation.

As OPNsense uses ports from software ports (not harware or physical ports) from both freebsd as well as openbsd. Which repository in OPNsense or which part of the build process is responsible for assigning physical ports and mapping them with respective physical ports number.

After installing the ISO, the ethernet ports in my ngfw the ports are assigned randomly, e.g., port 6 -> igb0, port5 -> igb1 and so on, and also I had checked this issue in couple of devices. How to overcome this issue.

Well, Thanks for the suggestions, I thought about it, But I think that I might have to submit the ISO image to the department for testing. So I think things changed in the pre-built would standout! I think for this stage it is sufficient but making it more relevant seems the right step.

Hi Patrick,
Thank you for your response.
I have seen your file, but I am confused about which repository of OPNsense I should add this code.

Hi CJ,

I am a 3rd year student  trying to develop a custom fw for our lab, I plan to present this as a final year project. My professor actually had recommended to use OPNsense as it has a proper development manual given and opensource support.

With respect,
Nitish

Hi ureyni,

Thanks for your help, please verify the steps as mentioned below,

1. Edit the file in /usr/local/opnsense/build/23.7/amd64/sets/packages***.txz
         Extract the txz file then download the os-sensei and all the packages inside "All" folder and then using tar -cvf command make the .txz file and copy it at the above mentioned location.
2. then run make dvd

Also made changes on Makefile inside tools /usr/tools/ add ADDITIONS to os-sensio

Please let me know is their any other steps which is missing or am I doing it wrong.

You mentioned to download OPNsense ISO but their is not any "All" folder inside the ISO but I got the "All" folder inside the packages file.

Hi ureyni,

Thanks for your respond but the link you provided shows "Sorry the page can't be loaded", and also after using curl on freeBSD machine it returns the html page stating the same.

Please let me know how can I get those .pkg files, so that I can pre-install zenarmor on my ISO.

I want to add some packages on the OPNsense machine while installing it. i.e., while installing the ISO it will install the package by itself. I don't need to install the package manually.

I am trying to create an ISO which has default password of root "nitish" instead of "opnsense".

Please let me know which files do I need to modify to achieve it.

Cheers,
Nitish