Topics

1

General Discussion / Fetchmail setup fingerprint error

« on: November 30, 2021, 06:38:22 am »

HI

    I want to use the plugin "Fetchmail", when I setup mailbox in fingerprint, it always show＂text validation error＂　and could't save. what's wrong? 

    I get the ssl fingerprint use below command, Is it any problem?

openssl s_client -connect $SERVER:$PORT -showcerts | openssl x509 -fingerprint -noout -md5

MD5 Fingerprint=35:20:B2:05:B8:AF:B4:7A:FB:77:A0:4D:D1:86:75:61

2

21.1 Legacy Series / Firewall:Aliases can't add new one

« on: February 02, 2021, 02:40:13 am »

When I upgrade opensense to 21.1 , The Aliases has a problem. old rules still display, but I can't edit it and can't add new rule.(click + , no respond)

3

Virtual private networks / IPSEC / VTI / one site public IP & one site PPPOE WAN?

« on: January 29, 2021, 08:55:16 am »

HI Sirs,

     Is any possible to use IPSEC Vti mode (route based) by one site public IP and the other site PPPoe WAN IP(or dymanic IP)? 
     I tried the setup for the two site both public IP is OK, but when I change the one site public IP and the other site PPPoe WAN IP is failed. The IPSEC status was green, but the two site network could't be connected

4

Virtual private networks / openvpn client login control issue about AD accounts

« on: January 26, 2021, 08:07:20 am »

Dear Sirs,

     The opnsense users can import from AD server, and I use these accounts for openvpn client, they can login openvpn service OK, but when they were disabled, they can still login openvpn service successfully, so is it normally?  (th local accounts is OK)

5

Virtual private networks / openvpn client service auto restart method? (for site to site)

« on: January 15, 2021, 07:40:41 am »

Hi sir,

    Our company use openvpn server with three WAN lines(different ISP provide[china telecom,china mobile,unicom]) to provide VPN service for each branch offices.
    The branch office use openvpn client service to connect to server with two WAN lines(Unicom,China telecom).
    But sometimes the network quility is not good, and the client will connect to wrong WAN line then the openvpn connection will lose packages(different ISP's connection is not always good in china).
    If the opnsense can build a funtion to detect the line survival to reconnect to better ISP in openvpn , or can provide a cron rule to restart openvpn client service automatically for user define, thanks.

For example,

     headquarter have three WAN Lines to provide openvpn service:

     1. china telecom ==> 192.168.1.1
     2. unicom telecom ==> 192.168.2.1
     3  china mobile ==> 192.168.3.1

     
     branch office have two WAN lines to connect to headquarter:

     1. china telecom ==>  192.168.1.2
     2. unicom telecom ==> 192.168.2.2

     branch office defaule setup  is use 192.168.2.2 to connect to 192.168.2.1 (the same ISP network, the quality is the best)
     but when unicom telecom network quality is abnormal, it will change to use 192.168.1.2 to connect to 192.168.2.1 (different ISP network), and the connection quality will not good.