Messages

1

Zenarmor (Sensei) / ZenArmor blocking SMB shares in Windows

« on: August 16, 2023, 06:25:29 am »

Windows 11 22h2 is the SMB host, Windows 10 22h2 is the SMB client.

Running ZenArmor engine 1.14.2, database 1.14.23072611.

SMB connection fails unless ZenArmor is configured in Passive mode.

What is the setting that would allow SMB connections with ZenArmor in Routed Mode please?

2

Virtual private networks / Way to allow specific URL to bypass VPN?

« on: April 05, 2023, 01:22:03 am »

I don't know if what I want to do is possible -- having setup NordVPN using OpenVPN, is there a way that a specific set of URL's can bypass the VPN?

I know you can set specific device(s) to not use the VPN, but what I want is to be able to define URL's that will not route through the VPN for all connected devices.

Any thoughts / help greatly appreciated!

3

23.1 Legacy Series / Re: OPNSense 23.1.5 - NTP service fails

« on: March 29, 2023, 05:20:30 pm »

Having same issue since this morning's update.

4

Tutorials and FAQs / Re: NordVPN configuration

« on: March 22, 2023, 03:45:00 am »

You are using Unbound in "query forwarding mode."  Basically, you are just pointing the router to NordVPN's DNS servers.

5

23.1 Legacy Series / Re: ipv6 trouble here as well, dhcpd6 dies

« on: February 28, 2023, 10:25:44 pm »

I have found a work-around, though I don't quite follow why it works.

After a cable modem reboot / restart, and I log into the firewall, dhcpd6 will be dead.  If I restart dhcpd6 and try to release / reload on the WAN interface, dhcpd6 just dies again.

However, if I start hdcpd6 and then restart the unbound DNS service, I can do a release / reload without dhcpd6 dying, restoring ipv6 connectivity.

6

23.1 Legacy Series / Re: ipv6 trouble here as well, dhcpd6 dies

« on: February 27, 2023, 07:19:21 pm »

I appreciate the tip!  Unfortunately, did not make any difference in my case.  Exact same symptoms.

7

23.1 Legacy Series / ipv6 trouble here as well, dhcpd6 dies

« on: February 27, 2023, 04:39:25 am »

OPNSense 23.1, ipv6 works but if the cable modem reboots, dhcpd6 dies.  You can restart it but ipv6 connectivity never returns. If you try to release / reload on the WAN interface, dhcpd6 immediately dies again.

To restore ipv6 connectivity, you have to reboot the firewall.

In the previous OPNSense version, same configuration, dhcp6 would stay up past a modem reboot and release / reload worked without killing the service.

8

23.1 Legacy Series / Re: Proofpoint Telemetry Status

« on: January 29, 2023, 10:34:23 pm »

Update -- this seems to relate to issues with Unbound DNS.  Because of not being able to check email (Comcast), I have moved back from Unbound to using a separate Pi.Hole DNS server, and this appears to resolve the issue with the telemetry gadget not showing correctly.

9

23.1 Legacy Series / Proofpoint Telemetry Status

« on: January 29, 2023, 05:47:02 pm »

With 23.1, on the Dashboard, the widget for Telemetry Status for ET Telemetry just shows a spinning circle.  The first time I noticed, I removed the widget and added it back, which seemed to resolve it.  However, a few minutes later, back to the spinning circle.

Thanks.