1
Tutorials and FAQs / Re: [Tutorial] - How to configure fq_codel for comcast to help bufferbloat / QoS
« on: September 27, 2024, 11:41:03 pm »
@theogravity Thanks for creating this works nicely!
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
General Discussion / MTU Size PPPOE Clarification
« on: September 16, 2022, 02:43:01 pm »
Hi Guys,
i have a Question about the MTU size for PPOE.
When i have a calculated ping -f -l of 1448 mtu do i add 20 header or 28 header+ppoe in the WAN Interface of the OPNsense?
Many Thanks
i have a Question about the MTU size for PPOE.
When i have a calculated ping -f -l of 1448 mtu do i add 20 header or 28 header+ppoe in the WAN Interface of the OPNsense?
Many Thanks
3
General Discussion / Re: [SOLVED] 16.1.20 to 16.7.1
« on: August 22, 2016, 08:09:45 am »
yup works will test OVPN with tab later.
4
General Discussion / [SOLVED] 16.1.20 to 16.7.1
« on: August 15, 2016, 03:56:37 pm »
Hi Guys,
atm i'm still on 16.1.20 and just wanted to ask if assigning a vlan interface as wan still work?
Also does openvpn device mode tap work now?
greetings neo
atm i'm still on 16.1.20 and just wanted to ask if assigning a vlan interface as wan still work?
Also does openvpn device mode tap work now?
greetings neo
5
German - Deutsch / Re: Broadcasts zwischen Openvpn und Interface Lan1
« on: April 08, 2016, 10:55:40 am »Mit OpenVPN könnte man Probleme mit der Reihenfolge bekommen und/oder sich aussperren.
Mhh möchte wer es ausprobieren habe leider kein Testsystem q.q.
Was mir noch aufgefallen ist,wenn man 2 Openvpnserver über die Opnsense laufen lassen möchte geht das nicht oder? Er erstellt keinen eigenen Firewalltab für den zweiten VPN Server und schmeißt alle Regeln in einen, diese sind auch Identisch.
Habe mal Testweise ein Openvpn Access Server auf meinem ESX aufgesetzt bekomme auch über die sense eine IP, DNS wird auch gesetzt. Ich komme an den Access Server komme aber nicht in mein lokales Netz oder ins Internet.
Ein Gateway wird auch nicht gesetzt sollte das der Fall sein? Ich wollte das er den kompletten Traffic über den Access Server leitet. Blockiert die Sense solche geschichten?
6
German - Deutsch / Broadcasts zwischen Openvpn und Interface Lan1
« on: April 07, 2016, 11:21:14 am »
Hallo Leute,
wie bekomme ich es hin das Broadcasts zwischen Lan1 und dem Openvpn hin und her geschickt werden können ?
hier mein Setup:
Client: Firewall aus
VpnClient: Firewall aus
Opnsense Firewall regeln sind: * * * * * etc. in beide Richtungen.
Openvpnserver ist wie folgt konfiguriert:
tap
UDP
das Lan Netzwerk ist voll verfügbar Pings NFS etc. funktionieren ohne Probleme
push "route xxx.xxx.xxx.xxx 255.255.255.0"
gibt es sonst noch etwas was ich Einstellen muss damit Broadcasts durch die beiden Netze geschickt werden?
Gruß Neo
wie bekomme ich es hin das Broadcasts zwischen Lan1 und dem Openvpn hin und her geschickt werden können ?
hier mein Setup:
Client: Firewall aus
VpnClient: Firewall aus
Opnsense Firewall regeln sind: * * * * * etc. in beide Richtungen.
Openvpnserver ist wie folgt konfiguriert:
tap
UDP
das Lan Netzwerk ist voll verfügbar Pings NFS etc. funktionieren ohne Probleme
push "route xxx.xxx.xxx.xxx 255.255.255.0"
gibt es sonst noch etwas was ich Einstellen muss damit Broadcasts durch die beiden Netze geschickt werden?
Gruß Neo
8
General Discussion / [SOLVED] Alias Changes
« on: March 26, 2016, 03:24:38 pm »
Hi Guys,
did something change with aliases?
i can't modify old alias rules with port ranges like 1000-2000 error: not valid.
The wiki says port ranges are set by an : but there i also got the error: not valid.
Also New Rules won't work with - or :.
What I'm doing wrong?
Greetings Neo
did something change with aliases?
i can't modify old alias rules with port ranges like 1000-2000 error: not valid.
The wiki says port ranges are set by an : but there i also got the error: not valid.
Also New Rules won't work with - or :.
What I'm doing wrong?
Greetings Neo
9
General Discussion / suggestion for mtu
« on: March 26, 2016, 01:31:51 am »
Hi Guys
would you suggest to lower the MTU even with a fibre connection?
Greetings Neo
would you suggest to lower the MTU even with a fibre connection?
Greetings Neo
10
General Discussion / measure packetloss
« on: February 15, 2016, 10:54:51 am »
HI Guys,
is there a way to measure packetloss between isp opnsense and internet?
Greetings Neo
is there a way to measure packetloss between isp opnsense and internet?
Greetings Neo
11
General Discussion / Re: DNS Rebind Protection
« on: January 05, 2016, 08:31:35 am »
seems to work thanks. I need it for plex
https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections
https://support.plex.tv/hc/en-us/articles/206225077-How-to-Use-Secure-Server-Connections
12
General Discussion / [SOLVED] DNS Rebind Protection
« on: January 04, 2016, 01:35:34 pm »
Hi Guys,
I wish all of you a Happy New Year.
Now to my Question
how can i make a exlusion for DNS Rebind Protection?
Greetings Neo
I wish all of you a Happy New Year.
Now to my Question
how can i make a exlusion for DNS Rebind Protection?Greetings Neo
13
General Discussion / [closed]Outbound Nat set
« on: December 10, 2015, 02:45:15 pm »
Hi Guys,
is it possible to set the automatic created rule to static port?
setting it to manual holds the standard ones and you can modify them so closed.
Greetings Neo
is it possible to set the automatic created rule to static port?
setting it to manual holds the standard ones and you can modify them so closed.
Greetings Neo
14
German - Deutsch / Re: Port Forwarding Problem
« on: November 19, 2015, 04:13:58 pm »
haste die vielleicht aktiviert?
block * RFC 1918 networks * * * * Block private networks
Block private networks
When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.
block * RFC 1918 networks * * * * Block private networks
Block private networks
When set, this option blocks traffic from IP addresses that are reserved for private networks as per RFC 1918 (10/8, 172.16/12, 192.168/16) as well as loopback addresses (127/8). You should generally leave this option turned on, unless your WAN network lies in such a private address space, too.
15
Hardware and Performance / Re: APU1D4, Performance Tuning
« on: November 19, 2015, 08:34:27 am »
but you use an apu case right?
mine is at Max 60°C for 120 Mbit/s
mine is at Max 60°C for 120 Mbit/s