Topics

1

18.7 Legacy Series / IDS Rules "Enable Selected" works under Firefox bot not chrome?

« on: September 16, 2018, 10:07:24 pm »

18.7.1 and 18.7.2 both exhibit this behavior.  Under Services: Intrusion Detection: Administration, Rules tab, the little "enable/disable selected" buttons under the first column do nothing in Chrome 69.  In Firefox 61 they work as intended.  Is this a known bug?

2

Intrusion Detection and Prevention / VMware ESXi tuning for Suricata?

« on: September 07, 2018, 07:19:53 pm »

I've seen the guidance for disabling CRC/TSO/LSO within OPNsense when running an IDS.

What about NIC parameters at the ESXi level?  TSO can be killed globally with Net.UseHwTSO.  Should I be looking into other ESXi params as well?  I've been seeing IDS alerts similar to the ones normally blamed on TSO...

3

18.7 Legacy Series / System | Access | Users displays only the "GUI" category

« on: August 30, 2018, 12:18:27 am »

My apologies if this is a known issue with a known fix.  I searched and couldn't find anything.

Under System: Access: Users I am trying to assign VPN privs to a new user account.  On this page, only the GUI category is displayed.  Should there be other privs from additional categories in the list?

4

General Discussion / Traffic Shaping vs vmxnet3

« on: July 05, 2018, 09:16:01 pm »

I've seen some chatter on the 'net regarding traffic shaping not working well with the otherwise superior vmxnet3 interface.  Seems e1000e was/is the go-to interface for this scenario.  Where does this issue stand today?