Topics

1

General Discussion / Enabling load balancer on WAN does not allow connecting to internal services

« on: August 28, 2024, 12:24:50 am »

Hi Forum, I have two WAN connections and I am doing load balancing between both and it works, but when I activate the firewall rule that goes out to the Internet to the entire VLAN, I lose access to internal services such as email, web and other apps.

Attached is an image of the GW group and the FW rule, The rule that added the load balancer in the firewall is the last one.

note:

2

Intrusion Detection and Prevention / Disable Rule not working

« on: May 11, 2024, 07:57:32 am »

Hi forum , I am trying to deactivate an ips rule, it blocks my vpn (openvpn) traffic, deactivate the rule and restart suricata, but it continues to block the traffic, any ideas?

3

General Discussion / packages with vulnerability

« on: April 29, 2024, 04:23:24 am »

***GOT REQUEST TO AUDIT SECURITY***
Currently running OPNsense 24.1.6 at Sun Apr 28 20:20:29 CST 2024
vulnxml file up-to-date
ruby-3.1.4_1,1 is vulnerable:
  ruby -- Arbitrary memory address read vulnerability with Regex search
  CVE: CVE-2024-27282
  WWW: https://vuxml.FreeBSD.org/freebsd/2ce1a2f1-0177-11ef-a45e-08002784c58d.html

1 problem(s) in 1 installed package(s) found.
***DONE**

any idea how to fix them?

4

General Discussion / when my internet connection drops

« on: August 25, 2022, 12:21:13 am »

Hi, I have a strange situation there are days where my internet connection drops for a couple of mn, and comes back again, but the internet drops and I have to restart the unbound dns service or restart the firewall, any idea what can it be?

my version of opnsense is:

OPNsense 22.7.1-amd64

5

General Discussion / web ui port 80

« on: May 24, 2019, 12:17:16 am »

hi , i am trying to put nginx in opnsense and it tells me that port 80 is used, I check the port and it is using lighttpd

root     lighttpd   47193 7  tcp4   *:80                  *:*
root     lighttpd   47193 8  tcp6   *:80                  *:*

in the configuration of the gui I am using the 444 and https, why lighttpd do I still use it?

add the screenshot

any help?

6

Hardware and Performance / performance Intel Atom D525

« on: May 20, 2019, 09:29:37 pm »

Hi , I need a bit of your experience and help, I am installing a firewall opnsense with this hardware, I have about 60 users, and I need to activate, NAT, dhcp, vlan, ips and webfilter, it is possible to do it with this hardware, some recommendations based to your experience?.

any advice?

7

16.7 Legacy Series / [SOLVED] squid proxy

« on: March 29, 2016, 12:53:31 am »

Hi forum , I'm trying to mount the proxy server with caching, when I give access to ip does not allow , for example I have a list of ip to which I want to surf the web freely, add the ip, but does not work.

access denied when I try to navigate, I read the doc wiki