Messages

1

Hardware and Performance / The barebone pc doesn't really sleep when not in use, almost full watt usage?

« on: September 29, 2023, 04:57:46 am »

It draws around 10 instead of the usual 11-13.

I thought it (minipc from china) would start auto hibernate or something when not in use? Is this not the case? I tried entering bios of it but couldn't think of what to change to make it draw as little power as possible when not in use.

As of right now I'm simply powering it off during night ... Any main settings to change to make it stop wasting energy when not in use?
I have the opnsense settings enabled for PowertD and hiadaptive on all.

2

General Discussion / Re: DNS over TLS setup and test final

« on: September 23, 2023, 08:42:47 pm »

1) Stop using "free" VPNs - there's no such thing

2) Your browser of choice will make a decent attempt to secure your DNS and keep all your data in the process - by defaulting to an encrypted DNS setting. You'll have to make sure that setting is disabled in every browser you want to obey your network's DNS settings.

1. It's called SetupVPN - Lifetime Free VPN and I'm using it right now. How do you mean?

2. I think chrome might use it but not firefox, atleast not when the VPN that you say doesn't exist is enabled.

3

Intrusion Detection and Prevention / Guide Intrusion Detection - What rules to download ?? + Only on LAN!?

« on: September 22, 2023, 05:27:56 pm »

I'm a beginner over here. I watched few videos on the subject. It appears that I should avoid download and enable certain ones and 'choose the ones I need' from what I heard. For example, I might not want to block the chat option and so on?

____
Firstly I just want to mention the only thing I enabled was the choice 'Enabled' and 'IPS mode' together with 'Hyperscan' option in dropdown menu, is this correct for home use? I also have it set to watch only on the LANs, is this enough for good protection in home use (some say that watching WAN is not needed since LAN gets all traffic anyway)?
____

I've so far chosen to download the following:

ET open/botcc   2023/09/19 19:12      
   ET open/botcc.portgrouped   2023/09/19 19:14      
   ET open/ciarmy   2023/09/19 19:14      
   ET open/compromised
ET open/dshield   2023/09/19 19:14
ET open/emerging-attack_response   2023/09/19 19:40
ET open/emerging-current_events   2023/09/19 19:40
ET open/emerging-dos   2023/09/19 19:40      
   ET open/emerging-exploit   2023/09/19 19:56      
   ET open/emerging-exploit_kit
ET open/emerging-malware   2023/09/19 19:56
ET open/emerging-phishing   2023/09/19 19:56   
ET open/emerging-worm   2023/09/19 19:56
____________

Are these downloads relevant for the home user, and what more if any should I choose?
Any other settings I should enable or custom rules/policies to add protection?

Thanks

4

General Discussion / Re: DNS over TLS setup and test final

« on: September 22, 2023, 05:00:06 pm »

You can check here

https://on.quad9.net/

Think I already did that, it says no. However in the log it reports I'm using it. So what's wrong?

edit: Actually it showed yes in chrome browser, however in firefox using free vpn addon it shows no.

5

General Discussion / DNS over TLS setup and test final

« on: September 22, 2023, 01:25:29 pm »

Hello, is this guide correct or is something missing
https://www.youtube.com/watch?v=MVfcK9dAvSg
(regarding the ending of video I have no idea how to do that extra step)
any additional instruction to harden security or what have you is welcomed.

So I set everything up and got connection through google dns but that stopped working after reboot so changed to cloud9 and it seems to be working now (atleast can use internet using it) here are settings
_______________
9.9.9.9
853
dns.quad9.net

and

149.112.112.112
853
dns.quad9.net
________________

I did enable the log queries option and then went into log like video says to check it and it seems to indicate that it is being used (after the test I disabled the log option incase it draws power etc).

However are there no online tests one can use to make sure this DNS over TLS is actually in effect? I tried some web adresses for this online test but they did not show that it was working so I have really only the log file to go on whether or not it is working. Is that enough or should I be able to test online somehow and if so what page to go to to test that everything is working correctly?
As mentioned also please instruct of any missing steps to make it work or work better.

Thanks

6

Tutorials and FAQs / Re: Smartphone connect to USB in tethering - WAN configuration

« on: September 22, 2023, 01:55:41 am »

text

It immediately worked simply by choosing share internet with  Ethernet Tethering (from usb to ethernet adaptor plug ethernet cable into wan port obviously on firewall) which is a default option in android lol, so didn't have to set up a thing simply plug in and go problem solved, thanks for pointing this out great job! 

7

Tutorials and FAQs / Re: Smartphone connect to USB in tethering - WAN configuration

« on: September 21, 2023, 01:42:48 am »

I will surely test both and see how far it goes, will report back

8

Tutorials and FAQs / Re: Smartphone connect to USB in tethering - WAN configuration

« on: September 20, 2023, 03:10:41 am »

Hello, I have the same question as op. Can someone actually provide a guide as to how to do this in a simple manner.(I only found on old iphone guide that didn't make much sense, and I have an android phone ..)

Do we just plug in the phone after enabling share internet over usb or..? (I also have usb c to ethernet but did some digging at it seems to me that this is a no go to plug into wan)
Then something should show up in interfaces->assignments you mean?
How do we configure everything correctly as close to a fast on off solution as possible if ISP goes down?
Feel free to elaborate would be greatly appreciated since I'd rather not plug in the phone directly to computer anymore now that I got this thing up and running