Messages

1

Hardware and Performance / Dec4240 Console Port

« on: October 06, 2024, 07:34:38 am »

 Hey,

we look for to buy a dec4240 appliance. Have anyone running it? We want use zenamor with ca 100 clients.
My question are , remote access , when gui and ssh stuck. The console port and usb port are rs232? Why no rj45 port. How can we access without stay on the applaince. Can we connect with a adapter the port to a switch ? Or used with a converter? How you used this?

2

24.7 Production Series / Re: wireguard 2fa defguard

« on: September 24, 2024, 03:17:04 pm »

but i will try defguard, and can tell , if this tool are good for the community!

3

24.7 Production Series / Re: wireguard 2fa defguard

« on: September 24, 2024, 03:07:37 pm »

because its a external pkg, so i would here of othe rpeople use that tool or have other ideas for a 2fa/mfa option for wireguard with opnsense.

4

24.7 Production Series / wireguard 2fa defguard

« on: September 24, 2024, 02:37:22 pm »

Hey ,

 i read that defguard has a plugin for the opnsene , with that plugin 2fa for wireguard are possible. have anyone run this setup with defguard or how you secure your wireguard vpn ? or other options for 2fa /mfa for wireguard?

5

24.7 Production Series / Re: caddy plugin dns propagation_timeout

« on: August 22, 2024, 01:54:12 pm »

Hey,

i tried with patch and the new update 27.1.2 with os-caddy-1.6.3

"error","ts":"2024-08-21T20:13:27Z","logger":"tls.obtain","msg":"will retry","error":"[sub.domain.de] Obtain: [sub.domain.de] solving challenge: sub.domain.de: [sub.domain.de] authorization failed: HTTP 403 urn:ietf:params:acme:error:unauthorized - Incorrect TXT record "rekord" (and 1 more) found at _acme-challenge.sub.domain.de (ca=https://acme-staging-v02.api.letsencrypt.org/directory)","attempt":2,"retrying_in":120,"elapsed":124.751260674,"max_duration":2592000%7D

The disable dont help by netcup. The options with longer propagation where needed. Do you still need more for debug?

with other dns example clouflare its workes, so its looks like its needed the higher value for netcup.

thanks for your work !

6

24.7 Production Series / Re: caddy plugin dns propagation_timeout

« on: August 21, 2024, 01:15:20 pm »

retries yes, but , example netcup need longer propagation time , when not infinity loop.

https://github.com/caddy-dns/netcup

NOTE: You may need to set an unexpectedly high propagation time (≥ 900 seconds) to give the netcup DNS time to propagate the entries! This may be annoying when executing caddy run/start manually but should not be a problem in automated setups. In exceptional cases, 20 minutes may be required. See

can we have this option? to set a propagation time and delay ?

7

24.7 Production Series / Re: caddy plugin dns propagation_timeout

« on: August 21, 2024, 11:15:20 am »

ich habe den patch eingespielt, sehe auch das disable, aber wo kann ich die werte an sich dann mitgeben? zb für netcup 600 oder 900s?

8

24.7 Production Series / caddy plugin dns propagation_timeout

« on: August 20, 2024, 08:40:28 am »

Hey,

How can i set the propagation_timeout and propagation_delay? When i type this keyword sin the fields , i dont see the config parameter in the json file. Example with netcup you need a high propagation_timeout and propagation_delay time.

Its this possible in the gui or must it have set on the cli?


Greets

9

24.1 Legacy Series / squid update 6.9 to 6.10 failed

« on: July 15, 2024, 07:14:20 pm »

hello,

on one sense i can not upgrade squid to 6.10 :

missing files 6.9 license , gplv2, catalog.mk


pkg-static failes rename ...

have anyone the same problem?

10

24.1 Legacy Series / Re: 24.1.9 NAT Reflection

« on: June 19, 2024, 05:10:47 pm »

 its this the same problem , why my 1:1 NAT outbound was deleted? only the rule for the 1:1 was deleted , the other nat outbound rules was not deleted.

11

German - Deutsch / Re: Problem mit 1:1 NAT auf IPv4 in Verbindung mit TCP-Ports

« on: June 19, 2024, 11:40:31 am »

schau mal bitte bei der 1:1 übersicht , bevor du die regel editierst ob dein external network angezeigt wird oder nur in der 1:1 regel?

12

German - Deutsch / Re: Problem mit 1:1 NAT auf IPv4 in Verbindung mit TCP-Ports

« on: June 19, 2024, 11:33:12 am »

bei mir war es der outbound, weil es über eine andere ip auf wan 1:1 umgesetzt wird. diese war nach dem update weg, sodass es nur noch über die normale wan ip raus ging.

13

24.1 Legacy Series / Re: 24.1.9 NAT Reflection

« on: June 19, 2024, 10:49:39 am »

do you mean me? i recover the rules from a backup config file, for the outbound NAT.

14

24.1 Legacy Series / 24.1.9 bgp Port open

« on: June 19, 2024, 10:23:02 am »

 After update to 24.1.9 i ran a port scan, this time a have a open bgp port

179/tcp open  bgp     (open)

i dont the see port on the wan fw rules open?

i dont use bgp .

i have a ip range from a provider. could it be his device what bgp has open, to communicate with his network?

15

24.1 Legacy Series / Re: 24.1.9 NAT Reflection

« on: June 19, 2024, 09:48:59 am »

After update to 24.1.9 1:1 Nat outbound was not working anymore, the outbound rule over a specific ip was deleted.