Topics

Hi all
So since November time I am having a lot of intermittent timeout issues when connecting to github.com or any of its domains.
DNS resolves but then connection times out and I need to try 5 to 8 times to get it to connect.
I tried to rule of Sensu by disabling it and then it works for 1 try and then breaks again so not Sensu.
I am not seeing any firewall drops and no IDS enabled.
To rule out my ISP I went back to ISP router for 24 hours and no issues. Not one timeout.
I am out of ideas. Why is Opnsense not connecting to Github?

Hello
Anyone how to fix the activity explorer interface on opnsesne zenarmor dashboard would always be blank?

Hello

So since update to version 1.23.7 my speeds keep dropping randomly.
i got 500mb connection but keep getting only 90mb after update.
before speeds never went down. this is for LAN and WIFi devices
If I turn off Zen Armor speeds stay same but if i turn it back on they return to normal.
same thing if I reboot. sometimes they return to normal and other times stay slow.

hi all

so I upgraded to 23.1.7.2 and then .3 and now my Internet speeds have dropped from 500-530 to 90 to 99. This is both on wired and wireless and I have made no changes to Opnsense or my setup since the update. I unplug opnsense and direct LAN speed test goes back to 500 to 530,

just as a test I switched off zen amor and IPS and no difference. something has caused this on new version.

can I roll back to previous version?

Hello

I have 2 LANs in my home one for Wired and one for wireless.
I want to use a client on my wifi device to send WOL packet to a device on the wired network.
Is there any relay or proxy on opnsense that will work for this?

Thanks

Hello

Does the CrowdSec plugin support the Prometheus endpoint? I cant seem to connect to port 6060 on the FW IP.

Hello
I followed this guide to have selective routing to go via Wirehuard: https://docs.opnsense.org/manual/how-tos/wireguard-selective-routing.html
However the client I have selected does not work now as it gets SSL cert mismatch error. It looks like its getting the OpnSense SSL cert on every webpage.
Anyone else have this issue?

hi all
I been using Unbound as my network DNS server and upstream to DNS Crypt Proxy.
However I constantly get DNS not resolving on browsers. This does not happen if I use Unbound to upstream to Quad9 instead.

So do most of you guys just use Unbound to upstream to DoT servers with DNSSEC or use DNSCrypt?

Hi all
Is there any guides on setting up a OpenVPN Client on OPNSense with Mullvad and routing 2 clients only through it?
I use Mullvad VPN and gave up on wireguard as it just did not work.

Thanks

hi all
will GetDNS and Stubby plugin get updated to latest version?

Hi all
So I have a web server that has a NAT to forward traffic to it from WAN.
This works fine.
I then had to add that domain and re direct it to Internal IP in Unbound to stop it breaking when Im on the Internal network.
This stopped working after the last update to OPNSense.
Now I started to get OPNSense cert error when accessing from inside as its trying to hit hit the firewall IP on 443 and getting to the firewall instead of going to web server so the unbound dns over ride has broken.
Any tips?

Hi
I changed to LibreSSL 19.1.9 and now Unbound and Stubby does not work.
No DNS.
Until I change unbound to use Cloudflare or Quad9.

Anyone know fix?

hi
will 19.7 be freeBSD 12 based?

Anyone tried this on OPNSense?
https://github.com/dgerzo/bruteforceblocker
Could be useful if it works.

hi
after installing 19.1 if you do a update package, when its removing suricata it all of a sudden breaks the UI as in a refresh you get a 403 forbidden and even ssh access is gone.
if you reboot it does not boot up correctly and box is broken as you cannot login as opnsense file is missing according to login on the console.
only fix is to start again from usb install.
is this known issue?

Hi all of a sudden I cannot connect to the web UI of OpnSense.
On both Chrome and Edge I get
"ERR_SSL_VERSION_OR_CIPHER_MISMATCH"
I made no changes  to any opnsense ssl settings.
Running 18.7.6

Hi all
Cloudflare DDNS has broken in OPNSense.
Must be a API update as in logs now I see this:

Code Select Expand

opnsense: /services_dyndns_edit.php: Dynamic DNS: ERROR - Zone ID was not found.

Hi
There is no documentation on how to filter in the live view.
Is it just "192.168.1.2" for example?

I tried that and it shows nothing.

Hi all

Just wondering what method most people are using for ad blocking via Opnsense?
I am trying the DNCrypt-Proxy 2 regex filters but they dont seem to work very well on pop up ads.
Next method I have seen is unbound blacklist.

Hi all
I have DNSCrypt proxy 2 set up and running on 127.0.0.1 port 5353.
On opnsense I can use drill to query DNS on that port and it works.
However when I got Unbound forwarder set to :

Code Select Expand

forward-zone:
    name: "."
    forward-addr: 127.0.0.1@5353

all my LAN devices cant query DNS anymore.
When I add 8.8.8.8 to the forwarder it works again.

Any suggestions?