Topics

1

19.7 Production Series / dnscrypt-proxy behind unbound

« on: September 06, 2019, 02:34:35 pm »

Hi,
I tried setting up dnscrypt-proxy behind unbound. Sadly I cant get it to work.

1. I installed the dnscrypt-proxy package.
2. I disabled the OpenDNS service.
3. I started dnscrypt-proxy without any special configuration.
4. I added the following lines to the "Custom Options" field (often referred to as "Advanced Options", but "Advanced" doesnt have a "Options" field):

Code: [Select]

do-not-query-localhost: no
forward-zone:
name: "."
forward-addr: 127.0.0.1@5353
First Unbound said "duplcate forward-zone", so I switched of "Enable Forwarding Mode" which seems to be a conflict.

So basically I had dnscrypt-proxy running on port 5353, unbound on 53. Sadly it seemed unbound didnt forward the requests to dnscrypt-proxy. In the log of dnscrypt I only saw that the server list was downloaded successfully.

Any idea what I could do different or what I should check?
With my setup above it didnt resolve any names. I did also not succeed in providing a port number in the general settings for the DNS servers.

Would be great if you had a hint what I could do/check.

Thanks.

2

18.7 Legacy Series / Alias Overrides in Unbound stopped working

« on: October 03, 2018, 06:31:06 am »

Hi,
I updated to the latest OPNsense version, since then the DNS overrides in Unbound seem not to work anymore.

Before I could use "https://nas" in my browser and it pointed to the internal IP. Now Chrome says the hostname was not found.

I flushed the cache on my mac, restarted OPNsense etc but no use. The DNS on the client is the IP of my OPNsense.

Anybody else facing the same problem?

Thanks.

3

Tutorials and FAQs / FAQ How to use the opnsense-importer?

« on: August 16, 2018, 07:40:58 am »

Hi,

I am about to migrate from *sense to OPNsense and prepared a configuration in a VM to have as little downtime as possible. Afterwards I exported the configuration and wanted to import it with the opnsense-importer during startup of a live environment to test it.

First I put it on the OPNsense partition on the USB drive but I couldn't provide a path, only a drive name.
Secondly I put it with the original name on a second USB drive but it always said "No previous config found".
Thirdly I put it as "config.xml" on the second USB drive but it still said "No previous config found".

As I couldn't find anything in the documentation (man-page also not mentioning how to do it), I had a look at the code...
The configuration-file needs to be put in

conf/config.xml

of the USB drive.

I would suggest to add

• the option to provide a local path
• the option to download from a remote path (e.g. website)

4

German - Deutsch / Web Proxy-Blacklist nur für bestimmte IPs

« on: August 12, 2018, 06:59:44 pm »

Hallo,
Ich würde gerne beim Web Proxy eine Blacklist konfigurieren. Diese soll aber nur für bestimmte Aliase/IPs im Netzwerk gültig sein.

Bei pfSense ging das über das SquidGuard-Package.

Gibt es bei OPNsense auch einen Weg das zu realisieren?

Danke!

5

German - Deutsch / Äquivalent zu "Firewall/Traffic Shaper/By Interface"

« on: August 10, 2018, 08:39:39 pm »

Hi,

Ich bin mit der Migration von pfSense beschäftigt und frage mich wo ich die Einstellungen für den Traffic Shaper abhängig vom Interface finde.

Bei pfSense ist das unter "Firewall/Traffic Shaper/By Interface" angesiedelt. Das finde ich bei OPNsense nicht.

Kann mir jemand weiterhelfen?

Danke im Voraus!

6

Documentation and Translation / Confusing Documentation for Newbies

« on: August 10, 2018, 01:21:53 pm »

Hi,
I'm running pfSense for years and am quite familiar with it. Now I want to check if I should switch to OPNsense, therefor I need to read the documentation a little.

My problem is that the Wiki feels very confusing. Am I the only one having problems with it?

What I feel makes it difficult to read:

- I can't see if there are subpages to a chapter. When I click on it I can see the small "tree structure" icon. I would prefer to see directly if there is more behind this point.
- The structure feels not straightforward. After initial installation I want to set up rules. I can't find a chapter "Firewalling". Either it's hidden in a sub-chapter but as I am new to OPNsense, I feel "lost".
- What role does "HowTos" play? Is it part of the documentation or are these specific scenarios which are described in more detail?

I know, you can use the search function, but if you are new and want to get a first overview and the principles behind, I feel very difficult.

So my question to you: Am I using it wrong? Is there a better place to start?

Thanks for your feedback and help