Messages

1

Intrusion Detection and Prevention / Re: Constant DNS queries for opnsense.emergingthreats.net

« on: November 11, 2024, 11:21:18 pm »

Getting the same, only the number of queries is much larger for me. Anyone got any idea how to mitigate against this?

2

General Discussion / Re: opnsense dashboard is killing my chrome tab

« on: October 11, 2024, 03:42:45 pm »

Not just you. I get the same freeze or widgets that start failing after a while. Dashboard starts with animation graphs smooth as butter and then start stuttering until they eventually turn the page unresponsive. Happens in all browsers and on both Windows and Mac.

3

24.7 Production Series / Re: [CALL FOR TESTING] PPPoE restructuring and IPv6 improvements

« on: August 27, 2024, 07:23:03 pm »

Tried the old trick of pretending to change something to both LAN and WAN but saving with no changes, tried to apply and revert the patches again, now IPv6 works as usual. I have no idea why

LE: IPv6 connectivity dropped after a few minutes.

4

24.7 Production Series / Re: [CALL FOR TESTING] PPPoE restructuring and IPv6 improvements

« on: August 27, 2024, 07:20:14 pm »

You need to revert them in reverse order I'd say.

That's exactly what I did and that's the end result.

5

24.7 Production Series / Re: [CALL FOR TESTING] PPPoE restructuring and IPv6 improvements

« on: August 27, 2024, 07:07:49 pm »

Let's not make multiple wrongs a right. I want to continue testing PPP refactor patches.

To continue testing regression free changes on 24.7.2 community release please use:

https://github.com/opnsense/core/commit/77531748
https://github.com/opnsense/core/commit/7582088d

# opnsense-patch 77531748 7582088d

If you want to test full set of IPv6-only capability please use the development release bundled with 24.7.2 instead. There is actually a follow up patch that completely disables IPv4 in this case which isn't in the development release:

https://github.com/opnsense/core/commit/cb09c6671b

# opnsense-patch cb09c6671b


Cheers,
Franco

Ok, I've applied the first two patches mentioned above and now I have no IPv6 connectivity. My ISP gives me a dynamic /56 prefix on WAN but with the patches I no longer get one. When trying to revert the patches I get 1 hunk failed for interfaces.inc

6

Intrusion Detection and Prevention / Suricata and Crowdsec for dual stack setup

« on: August 23, 2024, 03:56:38 pm »

Apologies in advance for being a novice. I have a dual stack setup with a static ipv4 and a dynamic /56 ipv6 prefix from my ISP. I understand (maybe incorrectly) that Suricata (which I have set up to monitor LAN) and CrowdSec (which I have set up to monitor WAN) support both ipv4 and ipv6 but I am lost as to how exactly to set them up for that. Any help would be appreciated.