Topics

1

Web Proxy Filtering and Caching / Allow Wildcard Firewall Rules - Windows Updates + Anydesk

« on: October 21, 2019, 08:55:46 pm »

Hey guys,

I'm currently using Sophos UTM and I want to migrate my firewalls to OPNsense. Since OPNsense is advertising

HIGH-END SECURITY MADE EASY

I'd have never thought that easy peasy tasks on Sophos UTM need expert knowledge on OPNsense.

I've read a few threads where people struggeld with allowing wildcard domains in OPNsense. And I can confirm it's definitely a pain in the ass. I'm already trying it since a few days to make Windows Updates and AnyDesk work.

Todo -> allow these Domains::

• *.net.anydesk.com [TCP] 80,443,6568
• *.update.microsoft.com [TCP] 80,443
• *.update.microsoft.com [TCP] 80,443
• download.windowsupdate.com [TCP] 80,443

With Sophos UTM this is an easy job since Windows Updates are proconfigured as a service.

All other * wildcards can be handled with a regex like this:

Code: [Select]

^https?://([A-Za-z0-9.-]*\.)?windowsupdate\.com/
Has somebody  ever made Windows Updates and Anydesk work with OPNsense?



sources:

• https://support.anydesk.com/Firewall
• https://answers.microsoft.com/en-us/windows/forum/all/how-to-add-outbound-rule-in-windows-firewall-to/7f9c04c1-5216-47d9-9de3-64cc19eb796d