Messages

1

General Discussion / Re: NordLynx (WireGuard NordVPN implementation)

« on: February 15, 2021, 10:25:31 am »

From NordVPN:

Keep in mind that NordLynx is NOT available yet for manual connection methods such as router setups.
In other words, there are no configuration files for it.

2

General Discussion / Re: NordLynx (WireGuard NordVPN implementation)

« on: February 09, 2021, 09:22:30 am »

Thank you.
I doubt we can directly use the standard WireGuard protocol since NordVPN made its own version called NordLynx.
(see the link in my first post).

The .rpm and .deb they provide includes their customized WireGuard version, am I wrong?

3

General Discussion / Re: NordLynx (WireGuard NordVPN implementation)

« on: February 08, 2021, 12:51:09 pm »

Thanks but I'm afraid these instructions won't work on FreedBSD 12.1. and may crash OPNSense.
Berkeley Unix is different from the AT&T System V Unix based systems...

4

General Discussion / NordLynx (WireGuard NordVPN implementation)

« on: February 07, 2021, 12:18:31 pm »

Hi,

I'd like to use NordLynx but OPNSense currently doesn't support it.
https://nordvpn.com/blog/nordlynx-protocol-wireguard/

Any news to come?

Thanks

5

General Discussion / Re: Wireguard server?

« on: June 13, 2020, 03:30:01 pm »

Thanks very much, I really wasn't sure!

6

General Discussion / Wireguard server?

« on: June 13, 2020, 12:46:36 pm »

Hi,

I'm wondering if the OPNsense WireGuard plugin is capable of acting as a VPN server, I mean is the plugin sufficient to build a tunnel between a Windows WG client and OPNSense WG?

I need to access to my Windows 10 home computer remotely via internet from a laptop also on Windows 10.
My home computer is my local lan, behind OPNSense.

Is it possible?

Thanks!

7

20.1 Legacy Series / Re: Lund, SE, Firmware Update Mirror : "Could not authenticate the selected mirror."

« on: June 08, 2020, 03:08:35 pm »

Why do you say that I don't trust programmer's download site? Nonsense!

It's just that the traceroute to the swedish website is much closer to my internet access, hence less possibilities for man in the middle attacks.

8

20.1 Legacy Series / Re: Lund, SE, Firmware Update Mirror : "Could not authenticate the selected mirror."

« on: June 06, 2020, 08:56:41 pm »

I prefer swedish girls :-)
Sumfink?? What do you mean? thanks google. something!

9

20.1 Legacy Series / Re: Lund, SE, Firmware Update Mirror : "Could not authenticate the selected mirror."

« on: June 06, 2020, 07:27:59 pm »

up - problem still unsolved

10

20.1 Legacy Series / Lund, SE, Firmware Update Mirror : "Could not authenticate the selected mirror."

« on: June 04, 2020, 02:48:02 pm »

Since a few weeks... see attachment

I"m running OPNsense 20.1.7-amd64 BTW...

11

General Discussion / Re: MAIL SERVER (postfix plugin ?)

« on: May 07, 2020, 11:15:18 pm »

I know! I perfectly understood what he meant! This is why I proposed 2 plugin categories, see above.

12

General Discussion / Re: MAIL SERVER (postfix plugin ?)

« on: May 07, 2020, 07:48:36 pm »

franco said people will ask for recovery/backup of mails, feature after feature, issues with upstream software involved, Microsoft compatibility issues....

I can understand he doesn't want to provide tech support for that...

13

General Discussion / Re: MAIL SERVER (postfix plugin ?)

« on: May 07, 2020, 06:54:24 pm »

Thanks but IMHO, a hypervisor is able to act as a keylogger, take screenshots, include a backdoor, especially closed code sources from commercial companies. I won't add any additional security risk.

"The use of hypervisor technology by malware and rootkits installing themselves as a hypervisor below the operating system, known as hyperjacking, can make them more difficult to detect because the malware could intercept any operations of the operating system (such as someone entering a password) without the anti-malware software necessarily detecting it (since the malware runs below the entire operating system). Implementation of the concept has allegedly occurred in the SubVirt laboratory rootkit (developed jointly by Microsoft and University of Michigan researchers) as well as in the Blue Pill malware package. However, such assertions have been disputed by others who claim that it would be possible to detect the presence of a hypervisor-based rootkit. In 2009, researchers from Microsoft and North Carolina State University demonstrated a hypervisor-layer anti-rootkit called Hooksafe that can provide generic protection against kernel-mode rootkits.

14

General Discussion / Re: MAIL SERVER (postfix plugin ?)

« on: May 07, 2020, 01:16:02 pm »

It's a pity but I understand, no problem.

Maybe it can be clearly specified that no help/tech support will be provided for recovery/backup of mails, issues with upstream software involved, Microsoft compatibility issues.... A sort of plugin "as is" like many new others that would correspond to this category... You could offer 2 plugin categories :

1) the standard one, where people can ask for tech support.
2) the non-standard one, where people will clearly be informed that no tech support will be provided whatsoever.
This makes me think of linux distribution repos, officials ones and others.

By the way. I like Arch linux (Manjaro) and I'm wondering if it is better for security or not.
I haven't been following Unix for a while, but I've learnt it at the very beginning (UNIX System V Release 3.2 (1987) & Minix & Xinu!!

Thank you for your good work anyways.

15

General Discussion / Re: MAIL SERVER (postfix plugin ?)

« on: May 07, 2020, 12:55:14 pm »

Even if it is in the firewall DMZ? I mean there should be a way to isolate it from the firewall... without having to buy another computer to make a mail server run + all the additional tiresome routing configuration and maintenance that it will imply... please francisco?