Messages

1

19.7 Legacy Series / Re: 503 Service unavailable (opnsense has died)

« on: August 21, 2019, 03:55:08 pm »

I found the reason and right now I'm running out of RAM.
I see a lot of processes from pinger.

I hasten to add that I do not have any special settings and this problem arose after moving from 19.1 (everything was stable there) to 19.7

2

19.7 Legacy Series / Re: 503 Service unavailable (opnsense has died)

« on: August 21, 2019, 09:16:47 am »

I found the reason and right now I'm running out of RAM.
I see a lot of processes from pinger.

By the way, I think it's worth including htop in the package...

3

19.7 Legacy Series / Re: 503 Service unavailable (opnsense has died)

« on: August 16, 2019, 08:56:11 pm »

Sorry, but so far I don’t have time to look at the logs.
I also suspected that RAM was ending and this is so.

4

19.7 Legacy Series / Re: 503 Service unavailable (opnsense has died)

« on: August 16, 2019, 04:26:32 pm »

Such behaviour could be related to bad Flash or Harddisk. Maybe the services die because of I/O errors.

The point is that after reboot for several days I’m doing fine ...

5

19.7 Legacy Series / 503 Service unavailable (opnsense has died)

« on: August 16, 2019, 03:16:21 pm »

Hello.
This is the second time I have noticed a problem when opnsense stops responding and I have to reboot it.

In addition to the fact that when I try to connect to www, I get the code 503, so I still can not connect via ssh.
Opensense itself is available only locally.
After some period of time, the network drops and I can’t do anything else, how to reboot the device.

I have the latest version.

What data do I need?

6

19.7 Legacy Series / Re: idea filebeat / metricbeat

« on: August 13, 2019, 03:35:35 pm »

I think we won’t wait.
But so much could be added - netflow, suricata ...

7

19.1 Legacy Series / Re: Open ICMP for interface - how?

« on: July 27, 2019, 10:42:44 am »

You create a firewall rule allowing ICMP on the interface with the corresponding IP.
OPNSense will respond by default if it gets a echo request.

Can I have an example of the rule? Screenshot.
I would be very grateful.

Here are the means of NAT, I have no problems, everything works. Through the firewall rules, by no means.

8

19.1 Legacy Series / Re: Open ICMP for interface - how?

« on: July 27, 2019, 08:57:35 am »

For all this time, I could not get to work.

9

19.7 Legacy Series / Re: idea filebeat / metricbeat

« on: July 22, 2019, 11:01:10 pm »

http://pfelk.3ilson.com/
Bloody envy that everything is so simple.

10

19.1 Legacy Series / Re: Open ICMP for interface - how?

« on: July 21, 2019, 11:44:59 am »

Pfsense has this: https://docs.netgate.com/pfsense/en/latest/config/example-basic-configuration.html?highlight=icmp

And in opnsense how to open icmp for interface?

11

19.1 Legacy Series / Open ICMP for interface - how?

« on: July 20, 2019, 12:18:49 pm »

Hello.
The interface has its own address, which is obtained from BGP and must be pinged.
How do I open ICMP for this address?

12

19.1 Legacy Series / Re: snort subscription

« on: July 18, 2019, 07:39:17 pm »

I don’t have much to say about the phrase `for our NGIPS`, although I know what` NGIPS` is.

13

19.1 Legacy Series / snort subscription

« on: July 18, 2019, 07:38:32 pm »

I ask for help with the analysis of subscriptions.
There are two options for $ 30 and $ 400: https://www.snort.org/products#rule_subscriptions

What is the difference between the rules?

14

19.7 Legacy Series / Re: idea filebeat / metricbeat

« on: July 18, 2019, 02:00:08 pm »

https://extelligenceblog.it/2017/07/11/elastic-stack-suricata-idps-and-pfsense-firewall-part-1/
https://pkg.freebsd.org/freebsd:11:x86:64/latest/All/
https://freebsd.pkgs.org/12/freebsd-ports-latest-amd64/beats-6.7.1.txz.html

15

19.7 Legacy Series / idea filebeat / metricbeat

« on: July 18, 2019, 01:02:33 pm »

Hello friends!
I propose to develop plugins for the integration of filebeat and metricbeat, as well as their configuration.

I raise the question a second time ... Still, there is support for suricata and this is very good. And suricata with geodata.