1
20.1 Legacy Series / Re: Problem with configuring Port-Forwarding
« on: July 03, 2020, 03:53:49 am »
i'm also having problems port forwarding lan address
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
2
20.1 Legacy Series / Re: Limit connection by duration
« on: May 15, 2020, 02:39:17 am »
marjohn56 suggestion would be pretty much a safe bet other than giving voucher to your kids.
not possible to redirect to SSL website because it will break SSL rules, hence doing so will be illegal.
you could also add static mapping for your kids devices...
setup a firewall rule with schedules
restrict only out outgoing rules (to the Internet)
havent really tried "schedules" but there is an option in the firewall rules
(last two options in the firewall rule)
this way, they could still connect to your printer, if that is permitted
https://docs.opnsense.org/manual/firewall.html
not possible to redirect to SSL website because it will break SSL rules, hence doing so will be illegal.
you could also add static mapping for your kids devices...
setup a firewall rule with schedules
restrict only out outgoing rules (to the Internet)
havent really tried "schedules" but there is an option in the firewall rules
(last two options in the firewall rule)
this way, they could still connect to your printer, if that is permitted
https://docs.opnsense.org/manual/firewall.html
3
20.1 Legacy Series / Re: CAPTIVE Portal Idle/Hard Timeout not working
« on: May 15, 2020, 02:31:40 am »
I have run a CRON job in System->Settings->Cron
"Restart CAPTIVE PORTAL"
hope it fixed the issue
EDIT:
issue fixed
"Restart CAPTIVE PORTAL"
hope it fixed the issue
EDIT:
issue fixed
4
20.1 Legacy Series / Re: Captive portal not working
« on: May 14, 2020, 09:12:53 am »Monitoring on 20.1.5 was ok, now since 20.1.6 it is not working again !
(So portal OK with manual entry, but not popping up automatically)
mostly manual also in may case
but most smart phones will present a pop signin
not on computers/desktops, rare pops out
5
20.1 Legacy Series / CAPTIVE Portal Idle/Hard Timeout not working
« on: May 14, 2020, 09:00:19 am »
possible for captive portal to be refresh or restarted everyday?
after a while captive portal seems not to disconnect idle or long conencted users.
not really sure for now what triggers it. but after 5days of continues use
when I re save and hit appply on the portal zone... the system disconnects
alot of user with
2020-05-14T14:56:06 captiveportal: session YbRXHzi2XQmkMuu/tHaZdg== hit idletimeout
2020-05-14T14:56:06 captiveportal: session oKJItPtmS0bGdSWlREcc3g== hit idletimeout
2020-05-14T14:56:06 captiveportal: session bDSiwyJG7ce2s/oEn6TH8w== hit idletimeout
2020-05-14T14:56:06 captiveportal: session Lq22ZFs73BOPfgo5ihMZNA== hit idletimeout
my idle timeout is 60minutes, a hardtimeout of 8hours...
so it should idle timedout most users
OPNsense 20.1.6-amd64
FreeBSD 11.2-RELEASE-p19-HBSD
OpenSSL 1.1.1g 21 Apr 2020
after a while captive portal seems not to disconnect idle or long conencted users.
not really sure for now what triggers it. but after 5days of continues use
when I re save and hit appply on the portal zone... the system disconnects
alot of user with
2020-05-14T14:56:06 captiveportal: session YbRXHzi2XQmkMuu/tHaZdg== hit idletimeout
2020-05-14T14:56:06 captiveportal: session oKJItPtmS0bGdSWlREcc3g== hit idletimeout
2020-05-14T14:56:06 captiveportal: session bDSiwyJG7ce2s/oEn6TH8w== hit idletimeout
2020-05-14T14:56:06 captiveportal: session Lq22ZFs73BOPfgo5ihMZNA== hit idletimeout
my idle timeout is 60minutes, a hardtimeout of 8hours...
so it should idle timedout most users
OPNsense 20.1.6-amd64
FreeBSD 11.2-RELEASE-p19-HBSD
OpenSSL 1.1.1g 21 Apr 2020
6
Development and Code Review / Re: Sensei on OPNsense - Application based filtering
« on: May 10, 2020, 05:39:17 am »
Policies & Filtering
where is this in 1.5?
is this available in free?
also can we now upload list instead?
where is this in 1.5?
is this available in free?
also can we now upload list instead?
7
Development and Code Review / Re: Sensei on OPNsense - Application based filtering
« on: May 10, 2020, 05:36:29 am »Disregard, I was able to address the issue.
Installed Sensei and subscibed but stuck at "waiting for database service to come up." Any suggestions as I have tried w/ out success.
I reinstalled elasticsearch5 w/ out success.
Thanks
there should be a next button at the bottom...
in anycase... try to uninstall (via web or console) and reinstall then do the wizard again
8
General Discussion / Re: Multi-WAN failover works - sort of
« on: May 08, 2020, 02:00:42 pm »
i guess the issue is the trigger or the lack of correct trigger?
well just post here again if you have further notes
well just post here again if you have further notes
9
20.1 Legacy Series / Re: Dual WAN - WAN2 should really be used only in case WAN1 is dead (WAN2 metered)
« on: April 25, 2020, 09:17:27 am »
you need to proabbaly install ntop
to monitor what packets goes to the connection...
150mb is alot for pings only...
may be your wan1 sometimes goes down?
or is detected to be down hence goes to wan2
but yeah you need a plugin to monitor and log the actual data
passing through and how often..
in reporting->insight you could see the spread of that 150mb data
in top right you could select the date range in hours and days
in the middle portion you could select the adapter you want to monitor
that should help, se what ports are access, ips access.. that should help some
to monitor what packets goes to the connection...
150mb is alot for pings only...
may be your wan1 sometimes goes down?
or is detected to be down hence goes to wan2
but yeah you need a plugin to monitor and log the actual data
passing through and how often..
in reporting->insight you could see the spread of that 150mb data
in top right you could select the date range in hours and days
in the middle portion you could select the adapter you want to monitor
that should help, se what ports are access, ips access.. that should help some
10
General Discussion / Re: Multi-WAN failover works - sort of
« on: April 25, 2020, 09:04:37 am »
good for you
11
20.1 Legacy Series / Re: Captive portal not working
« on: April 25, 2020, 08:55:50 am »
could check accessing www.neverssl.com as test site
", like affter a restart or on a new device, portal doesn't come."
and you cant browse the net?
have you added na DNS allow rule? (Lan ->DNS -> firewall should be allowed)
it should be on top of most rules you have
your clients should also use DHCP, to force them to use your gatewate/DNS server/ubound
also using DHCP without portal... Internet works fine right? for your lan?
", like affter a restart or on a new device, portal doesn't come."
and you cant browse the net?
have you added na DNS allow rule? (Lan ->DNS -> firewall should be allowed)
it should be on top of most rules you have
your clients should also use DHCP, to force them to use your gatewate/DNS server/ubound
also using DHCP without portal... Internet works fine right? for your lan?
12
20.1 Legacy Series / Re: Dual WAN - WAN2 should really be used only in case WAN1 is dead (WAN2 metered)
« on: April 20, 2020, 07:13:31 pm »
it will be be used to some extent... since opnsense will monitor your wan2.
in gateway you can disable monitoring for wan2(setting of wan2)
give your wan1 a higher priority (by giving a lower priority number, wan1 should be marked "active")
you may also opt for gateway group, in failover mode.
and used that group as your gateway in your firewall
i dont think pings can used alot of MB maybe it is activated?
try the above first, disable monitoring for wan 2(may have side effects though not being able to detect if it is online).
set failover group and use that... set proper link priority...
you may want to check, reporting then insigth, and verify the used data if it matches your sim2 data volumn.
you can drill down the data to specific wan, and length/days
in gateway you can disable monitoring for wan2(setting of wan2)
give your wan1 a higher priority (by giving a lower priority number, wan1 should be marked "active")
you may also opt for gateway group, in failover mode.
and used that group as your gateway in your firewall
i dont think pings can used alot of MB maybe it is activated?
try the above first, disable monitoring for wan 2(may have side effects though not being able to detect if it is online).
set failover group and use that... set proper link priority...
you may want to check, reporting then insigth, and verify the used data if it matches your sim2 data volumn.
you can drill down the data to specific wan, and length/days
13
20.1 Legacy Series / Re: Captive portal not working
« on: April 20, 2020, 06:49:59 pm »
ok i missed some of your comments..
you mean it was working before?
now it aint? but disabling captive portal makes your connection work?
then it is probably a corrupt db. you may need to go to shell and follow the instruction to delete the db. it should refresh itself once you reenble captive portal.
you may want to check logs to verify if db is corrupt
system-log files-back end
there should be a long message about captive portal or any db error, file locked and/or failed read/write
https://forum.opnsense.org/index.php?topic=12843.msg59581#msg59581
you mean it was working before?
now it aint? but disabling captive portal makes your connection work?
then it is probably a corrupt db. you may need to go to shell and follow the instruction to delete the db. it should refresh itself once you reenble captive portal.
you may want to check logs to verify if db is corrupt
system-log files-back end
there should be a long message about captive portal or any db error, file locked and/or failed read/write
https://forum.opnsense.org/index.php?topic=12843.msg59581#msg59581
14
20.1 Legacy Series / Re: Captive portal not working
« on: April 20, 2020, 06:44:38 pm »have you added the 2 firewall "allow" rule?
allow dns
and allow access to captive portal? it should be in the wiki instruction.
15
Development and Code Review / Re: UniFi Controller
« on: April 05, 2020, 08:45:15 am »Quote
Sorry for opening a new "issue"https://github.com/gozoinks/unifi-pfsense/issues/170
I just wanted to report that I've been successful installing Unifi Beta 5.13.10.0-g7664a3c6 on OPNsense 20.1.3.
The link I used was: https://dl.ubnt-ut.com/teunis/wpa3/5.13.10/UniFi.unix.zip
Thanks for your hard work!!
OPNsense 20.1.3
could be great
have not tried though, need more instruction, not really familiar with the console