Topics

1

General Discussion / IDS Alerts not Working (APU)

« on: October 14, 2016, 01:42:51 pm »

Are there any known problems with IDS reporting (Alerts) with 16.7.6 firmware on APU boards over PPPoE interface?
I had this working on earlier firmware versions, but with the last couple firmware updates, IDS alert logs are now completely null (no results found).

After some testing, it looks like 'User defined GeoIP blocking' IPS is also not working.

My other Opnsense installations on x86 hardware works just fine.
Would this be affecting APU hardware only? -or perhaps something to do with PPPoE interfaces?

------------------------------------------------
Hardware specs:
PC Engines - APU1D4 (AMD G-T40E)
Firmware: 16.7.6-amd64 (LibreSSL)
WAN Interface -> PPPoE (DHCP)

IPS mode: Enabled
Promiscuous mode: Disabled
------------------------------------------------

Thanks for your help!

2

General Discussion / IPv6 multicasts flooding logs

« on: July 30, 2015, 02:40:56 pm »

I have IPv6 disabled in the General settings, however I see a lot of blocked IPv6 (ICMP) traffic originating from the LAN and lo0 interfaces being logged.
------------------------------------------------------------------------
IF           Source                         Destination        Proto
LAN       [fe80::20d:b9ff:....]     [ff02::1]         ICMPv6
lo0        [fe80::20d:b9ff:....]     [ff02::1]         ICMPv6
------------------------------------------------------------------------

I tried to create a non-logging block rule for this traffic, however it continues to log the traffic anyway.

Does anyone know how to suppress IPv6 logging?
Thanks!

3

15.1 Legacy Series / [SOLVED] Open-VM-Tools

« on: March 05, 2015, 11:08:28 pm »

Vmxnet3 driver working well in ESXi-5.5 for me, but would like to see complete open-vmtools pkg included in next build.
Any plans for this?

4

15.1 Legacy Series / [SOLVED] DynamicDNS Trigger on WAN IP Change

« on: March 05, 2015, 11:00:52 pm »

It seems that DDNS update triggers on WAN DNS change.
Would like DDNS to auto update when WAN IP changes, leaving "Allow DNS server list to be overridden by DHCP/PPP on WAN " option disabled.
Is this possible?