Topics

1

German - Deutsch / Ein bisschen was zum schmunzeln

« on: January 27, 2017, 12:47:08 pm »

Falls ihr mal jemanden ärgern möchtet, der ein Windows 7 verwendet, dann lasst ihn doch mal das USB Image von OPNsense per Rufus unter Windows auf einen beliebigen USB Stick kopieren. 
Der Vorgang ist abgeschlossen, wenn euer Rechner ein Standbild liefert und ihr den Reset Knopf eures Rechners betätigen müsst. 
SYSTEM_THREAD_EXCEPTION_NOT_HANDLED
0x1000007e
ffffffff`c0000094
fffff800`03733fd9
fffff880`039afe88
fffff880`039af6e0
ws2ifsl.sys
ws2ifsl.sys+1ae21f8
ntoskrnl.exe+4d9fd8   


Das Praktische daran ist aber, dass ihr mit dem Anstecken des Sticks an einem beliebigen Windows 7 Rechner diesen "Bildschirmschoner" reproduzieren könnt. 
Oder mal anders ausgedrückt, benutzt lieber Linux zum Aufspielen des Images auf einen Stick und um ihn hinterher zu formatieren.
Viel Spaß beim ausprobieren
Oder sollte ich sagen, bitte nicht nachmachen^^

2

17.1 Legacy Series / Too much Inferfaces (200+) -> Webinferface overload

« on: January 16, 2017, 05:13:49 pm »

Hi,
for a very creepy project I try to create more than 200 Network bridges and 400 VLAN Interfaces.
In the end about 2000 bridges and 4000 VLAN Interfaces would be great
But the major problem doesn't seem to be the OS restrictions, more the general performance to handle this.
OK I didn't use a server for my first test, only a new average desktop i5 computer, with only 10% of my final configuration.
I did this last year, so I can't remember very well, but after uploading the configuration I try to access the bridge settings and use the search function in the drop down menu and the web server crashes. I wait one hour before I restart the PC and it wont boot any more.
Is there any chance that your performance optimizations in PHP may solve this problem. Then I would give OPNsense a second try before I use a normal Linux System with a self made website.

3

17.1 Legacy Series / Feature Request - Temporary Firewall rules

« on: January 16, 2017, 02:00:37 pm »

Hello together,
Initial state:
We have a network with Internet access. User should be able to get access, but it must be able to identify who uses the network at which time. (Let's call it a provider rule:) )
Idea:
A administrator creates an account for members and guest.
The user has to login with his account and is (only) able to allow his client for temporary network access.
Guest:
allow IP to access with a given port list to get access for his devices, for 1-10 hours
Member:
allow IP to access with no Port restriction or a Port list temporary or permanently (IP/MAC combination).

The username and the time of use should be logged in a permanent log file, maybe protocols or ports can be part of the log too.

Currently we use a second firewall and a web server with this functionality to reduce the complexity of the network it would be a cool feature for an upcoming release.