Topics

1

General Discussion / Problem with pppoe

« on: November 22, 2018, 02:45:38 pm »

Hello
anyone can help me with this topic?

https://github.com/opnsense/plugins/issues/1007

i have this problem too.
please.

2

General Discussion / see blocked ip by ids

« on: March 22, 2018, 02:44:48 pm »

hello
i want to see which ip's blocked by ips? and flush or clear them
where can i see this in opnsese?

3

General Discussion / use remote radius server

« on: March 05, 2018, 06:28:03 am »

Hello
i want to use remote radius server for pptp and all vpn servers on opnsense
i should pass 2 these flags in accounting request to radius server :

this is a opnsense packet :

Code: [Select]

opensense packets: 
  Packet-Type = Access-Request
  NAS-Identifier = "OPNsense.localdomain"
  Acct-Session-Id = "9724037-L-1"
  NAS-Port = 1
  NAS-Port-Type = Virtual
  Service-Type = Framed-User
  Framed-Protocol = PPP
  Attr-26.12341.12 = 0x4c2d31
  Attr-26.12341.19 = 0x4d5352415356352e3230204d535241532d302d4b4149504f442004b6561c95d06441a7807f6d05042e31
  Tunnel-Type:0 = PPTP
  Tunnel-Medium-Type:0 = IPv4
  Tunnel-Server-Endpoint:0 = "192.168.30.5"
  Tunnel-Client-Endpoint:0 = "192.168.50.92"
  Tunnel-Server-Auth-Id:0 = "OPNsense.localdomain"
  User-Name = "m"
  MS-CHAP-Challenge = 0xbb1e68137474a650c11db9b16393f933
  MS-CHAP2-Response = 0x01009fed02e9a440f37de8e743a68576a3f60000000000000000352f6b2976a6cb2c95df51b0fdf2f76184d83172d78fd571
  Event-Timestamp = "Feb 27 2018 13:04:33 +0330"
  NAS-IP-Address = 85.xx.xx.xx
  Timestamp = 1519724073
but i should use this packet format :

Code: [Select]

normal packets:
  Packet-Type = Access-Request
  NAS-Port-Type = Wireless-802.11
  Calling-Station-Id = "30:85:A9:EC:C7:FE"
  Called-Station-Id = "hotspot1"
  NAS-Port-Id = "ether2-Local Lan"
  User-Name = "m.tabatabaenasab"
  NAS-Port = 2160067826
  Acct-Session-Id = "80c004f2"
  Framed-IP-Address = 192.168.26.68
  Mikrotik-Host-IP = 192.168.26.68
  CHAP-Challenge = 0xa86f1fa69d1e9f28534dcd19f06ed86a
  CHAP-Password = 0xd5c8d303b94c8054a8e5b15db5eec036b4
  Service-Type = Login-User
  WISPr-Logoff-URL = "http://192.168.26.1/logout"
  NAS-Identifier = "201710301048561303YWr2"
  NAS-IP-Address = 192.168.2.1
  Event-Timestamp = "Jan 27 2018 14:17:39 +0330"
  Timestamp = 1517050059
in fact i need two this flag in request packet:

Calling-Station-Id =
CHAP-Password =

how can i configure opnsense to use this format of request ?

4

General Discussion / Accounting Features

« on: January 18, 2018, 03:47:23 pm »

hello
in order i should give thanks to the developer team for adding Freeradius Limitation in bandwidth.
i have a request for completing this nice work.
can we limit traffic?
and can we set this restriction on a group?
thanks

5

Intrusion Detection and Prevention / suricata failed to run

« on: December 15, 2017, 06:30:34 am »

hello
i have a problem with suricata, it goes dead after some days and everytime i should remove the pid from /var/run
how can i fix this problem?

Starting suricata.
15/12/2017 -- 08:57:19 - <Info> - Including configuration file installed_rules.yaml.
/usr/local/etc/rc.d/suricata: WARNING: failed to start suricata

part of log file:

Code: [Select]

15/12/2017 -- 08:56:35 - <Notice> - This is Suricata version 4.0.1 RELEASE
15/12/2017 -- 08:56:35 - <Error> - [ERRCODE: SC_ERR_INITIALIZATION(45)] - pid file '/var/run/suricata.pid' exists but appears stale. Make sure Suricata is not running and then remove /var/run/suricata.pid. Aborting!
15/12/2017 -- 08:57:19 - <Notice> - This is Suricata version 4.0.1 RELEASE
15/12/2017 -- 08:57:19 - <Error> - [ERRCODE: SC_ERR_INITIALIZATION(45)] - pid file '/var/run/suricata.pid' exists but appears stale. Make sure Suricata is not running and then remove /var/run/suricata.pid. Aborting!


6

General Discussion / [SOLVED] snort rules

« on: October 29, 2017, 08:17:09 pm »

hello
i updated opnsense and saw the snort compatible rules appear, i setup the plugin but i cannot install the rules which is appear in Downloads tab in intrusion system.
what can i do?
i saw a path this file:
snortrules-snapshot-2990.tar.gz
what is it?

7

General Discussion / question about opnsense ports

« on: August 18, 2017, 10:14:48 am »

hello
is there any help or guide lines about installing opensense ports on githubs on opensene?
for example this:
https://github.com/opnsense/ports/blob/master/mail/assp/pkg-descr
i wanna to use SMTP protection on opensense, how can i ?
i tried but :

env: /usr/local/bin/perl5.24.2: No such file or directory
*** Error code 127

Stop.
make[2]: stopped in /usr/ports/security/p5-Digest-HMAC
*** Error code 1

Stop.
make[1]: stopped in /usr/ports/dns/p5-Net-DNS
*** Error code 1

Stop.
make: stopped in /usr/ports/mail/assp

8

General Discussion / suricata not detect!

« on: July 09, 2017, 07:08:47 pm »

hi
i configure IPS mode and select my WAN interface for detection.
but when i start for example nmap -sA it not detect anything!!!
what is the problem?

9

General Discussion / netflow log

« on: June 26, 2017, 05:38:57 pm »

Hi
I have a bit problem with netflow
it get problem after a lot of traffic and logs received. i should reset the netflow data and configure it again to work.
how can i use it permanently? without any reset!
thanks

10

General Discussion / opnsense make iso

« on: June 22, 2017, 08:15:59 pm »

hello
i want to make iso of a installed version of opnsense
how can i do that?
thanks

11

General Discussion / some questions and problems with opnsense

« on: June 04, 2017, 09:49:07 am »

Hello everybody

i want to add persian language in opnsense and i can't know how can i do this? i see just some files on github.
can i translate a file and send to the core developers to add it in language?

i want to install clamav on opnsense and use it in local, how can i do that? if i buy the commercial support they can help me?

i want to see some graphs for linke kibana. can i get a help to do this?

thanks

12

17.7 Legacy Series / IDS ruleset crash

« on: June 02, 2017, 10:26:48 am »

Hi
after download most of the ruleset of suricata, at the rule tab it stay on loading.... and not happend...
please tell me how can i fix this?
thanks

13

17.7 Legacy Series / opnsese traffic visualization

« on: June 01, 2017, 07:00:05 pm »

Hi experts
thanks for your nice appliance
i want to add kibana + elasticsearch + logstash on opnsense
is there any help or experience on this?

14

17.7 Legacy Series / Problem with gateway

« on: May 24, 2017, 10:59:42 pm »

Hi. I installed opnsene on esxi and set an valid ip on lan interface.
After 1 or 2 hour, gateway automaticaly i think disabled and ping to 8.8.8.8 on it's shell dropped.
How can i fix ?