Topics

1

23.7 Legacy Series / [SOLVED] 23.7.8 - No Label in Live View

« on: November 09, 2023, 05:28:35 pm »

Hi,
the label is no longer displayed in the Firewall live view.

cheers
tillsense

2

23.7 Legacy Series / Unbound Dash/Logs does not show correct Time

« on: October 16, 2023, 07:50:56 pm »

Hi all,

the dashboard, firewall live rules and logs all have the correct time as stored in the system as time zone. Only the Unbound reporting shows UTC in live logs and its own dashboard? And why only 24h or 1000 entries? Only one OPNsense update needs about 30 requests (entries) Why that? ( 23.7.6)

cheers
till

3

23.7 Legacy Series / [SOLVED] Suricata stops Unbound(TLS)

« on: July 29, 2023, 07:26:11 pm »

hi all,

suricata stops unbound after some seconds. no more dns resolution is possible. in the overview there is a "drop" as action. in the log of unbound error: 

1 error: SSL_handshake syscall: Broken pipe

2 error: outgoing tcp: bind: Can't assign requested address

workaround is to stop suricata

configured DNS over TLS (test with 23.7.r_44-amd64)

do I have to reconfigure anything?

cheers
till

4

Hardware and Performance / EEPD EM PRO R1102G ...just embedded AMD low Voltage Router

« on: June 06, 2023, 08:39:59 pm »

[Manufacturer]
https://shop.eepd.de/en/

[Top FAQ]
Fanless - Yes (R1102G)
TDP - <=6W (R1102G)
Ports - 2x Intel I210 with IEEE1588 (R1102G)


cheers till


[Changelog]
31.07.2023 - Typo TDP / Fanless
06.06.2023 - First Post

5

23.1 Legacy Series / [SOLVED] 23.1.r2 - Unbound Error

« on: January 24, 2023, 07:53:14 pm »

Hi all,

Unbound Log:

Code: [Select]

SystemError: <built-in function close> returned a result with an error set
  os.close(ctx.pipe_fd)
  File "dnsbl_module.py", line 265, in deinit
  Traceback (most recent call last):
  The above exception was the direct cause of the following exception:
  AttributeError: 'NoneType' object has no attribute 'security'
  ctx.log_entry(*info, ACTION_PASS, SOURCE_LOCALDATA, None, rcode, 0, rep.security, rep.ttl)
  File "dnsbl_module.py", line 234, in local_cb
2023-01-24T18:18:43 Error unbound [24474:0] error: pythonmod: python error: Traceback (most recent call last):
2023-01-24T18:18:43 Error unbound [24474:0] error: pythonmod: Exception occurred in function deinit
2023-01-24T18:16:53 Error unbound Unable to open pipe. This is likely because Unbound isn't running.


dnsbl_module.py I assume are the Unbound DNS blacklists but they are not active...also I have thousands of dns requests to "rulesets.opnsense.org". What is this?

The only thing I changed is to enable the dns statistics locally under reporting. (Still the DOT config with 3 times start of Unbound...)

cheers
till

6

22.7 Legacy Series / Unbound DNS DoT config contact to root server

« on: December 15, 2022, 06:20:59 pm »

Hi all,

Unbound contacts the root server(s) at startup. With a DoT config and firewall rules that prevent port 53 makes no sense. An option in the gui to prevent this would be suitable at the point or even in this case the default?

cheers
till

7

22.1 Legacy Series / [SOLVED] Unbound DNS Log is empty

« on: January 27, 2022, 08:10:42 pm »

Hi all,
unbound dns log is empty in all levels?

OPNsense 22.1-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1m 14 Dec 2021

cheers
till

8

Development and Code Review / e2guardian Plugin

« on: December 19, 2019, 09:57:21 pm »

Is started by Michael:

http://e2guardian.org/cms/index.php Same features as squidquard which is often requested but active developed. I'd build a plugin around it.

https://twitter.com/mimu_muc/status/1186278727262658561

9

Hardware and Performance / PCENGINES APU New models

« on: September 13, 2019, 08:37:41 pm »

APU2E2 / APU2E4 - https://www.pcengines.ch/apu2e4.htm

10

Development and Code Review / DNSBL and additional features Plugin for Unbound

« on: September 05, 2019, 07:55:00 pm »

Is started by Michael:

Today I'll start building a plugin for Unbound additional features, bringing DNSBL to @opnsense without the need for BIND or dnscrypt-proxy. Future versions will offer DoT and more (depending on your ideas)

https://twitter.com/mimu_muc/status/1169482538009747461


Ideas:
Please schedule a field for regex entries

11

19.7 Legacy Series / 19.7.r1 now 19.7 - Netflow freeze System again

« on: July 15, 2019, 09:47:07 pm »

Hi all,

NetFlow e.g. flowd uses up to 90% of a cpu core all the time and when changing the listening interfaces the system freezes again completely (opnsense-patch 24dc2a82b is installed)...?

cheers
till

12

19.7 Legacy Series / Plugin OS-Smart / Widget on Dashboard shows only status unknown

« on: July 13, 2019, 07:04:12 pm »

Hi all,

does anyone have the smart widget active in the dashboard (Smart Plugin required) and can please give a feedback if he gets a smart status from his devices on 19.7.r1?

cheers
till

13

Hardware and Performance / Open Coreboot Firmware Device List

« on: June 14, 2019, 08:19:25 pm »

PcEngines  -  https://www.pcengines.ch/ - Firmware Support: https://pcengines.github.io/
                                                                - Forum Topic: https://forum.opnsense.org/index.php?topic=4200.0
Protectli     -  https://protectli.com/          - Firmware Support: https://protectli.com/kb/coreboot-on-the-vault/
                                                                - Forum Topic: https://forum.opnsense.org/index.php?topic=11781.0

14

19.1 Legacy Series / NTP problems only IPv4

« on: February 27, 2019, 08:15:47 pm »

Hi,
i noticed that the time after the new connection is no longer synchronous. Since I wanted to do a test with only IPv4 anyway i changed the ntpd.inc a bit and after a restart of the service the protocol log also showed these start parameters and the service ran without ipv6 sockets.

After restarting OPNsense these start parameters are not used according to the protocol log output and the sockets confirm that ipv6 is running. An immediate restart of the service causes again the correct start with the changes and also the missing of the ipv6 sockets confirm this again?

My guess is that something seems to be wrong with the sequences?

cheers
till

15

Hardware and Performance / Embedded World 2019 - Messe Nürnberg

« on: February 19, 2019, 09:11:52 pm »

Hi all,

Is there anyone here? / Ist jemand hier anzutreffen?

cheers till