Topics

Hello,

OPNsense 23.1.11-amd64

Target/logging :
I want send log (opnsense) to server syslog.
If the server syslog is in LAN of Opnsense (TCP4/TCP4TLS) is OK.
If the server syslog is out of Opnsense (TCP4/TCP4TLS) is NOT OK.

My ip internet is IPV4.

Opnsense don't send log to WAN ? only LAN ?
Sorry for my english ...
Thank.

Hello,

OPNsense 22.7_4-amd64
Intel(R) Xeon(R) D-2146NT CPU @ 2.30GHz (8 cores, 16 threads)
ram: 16 gigabytes
ssd: 100 gigabytes

Problem solved :
flowd_aggregate: off, I erased all files... now it's ok.

I have to keep my log data (ip and vpn) for a year.

1)Question 1:
NetFlow: Collect NetFlow data on this firewall for use with Insight. Note that the local cache only holds the latest 100 MB of data.
My data greatly exceeds 100 MB ... how to increase this size?

2)Question 2:
SYSTEM->SETTINGS->LOGGING->Preserve logs (Days)=720
My logs will be kept for 720 days... whatever the size of the file?
Does this parameter apply to DHCP / OPENVPN / FIREWALL logs?
After 720 days what happens to the log files?
Is the download limited in maximum size?

Thanks in advance ...

Good evening,

I am a former IPCOP, then IPFIRE, then now OPNsense 20.7.4-amd64

I configured Opnsense ... a pleasure .... everything works perfectly.

Problem:
I have configured an OPENVPN server with clients .... it's ok everything is working perfectly.

My remote users can access my servers (SAMBA) and they can access the internet via Opnsense.

What I'm trying to configure is that my users access the servers via OPENVPN ... but that their internet browsing is done through their ISPs and not from Opnsense while keeping their VPN connections open.

I therefore deactivate / activate Redirect Gateway on the Openvpn server .... but their gateway is still that of Opensense.

Is there a special config to do what I want?

Thanks in advance.

PS:Sorry for my english .... i am french.

Bonsoir,

Je suis un ancien de IPCOP, puis IPFIRE, puis maintenant de OPNsense 20.7.4-amd64

J'ai configure Opnsense ... un plaisir .... tout fonctionne parfaitement.

Probleme :
J'ai configure un serveur OPENVPN avec des clients .... c'est ok tout fonctionne parfaitement.

Mes utilisateurs distant accedent bien a mes serveurs (SAMBA) et ils ont acces à internet via Opnsense.

Ce que j'essaye de configurer , c'est que mes utilisateurs accedent aux serveurs via OPENVPN ... mais que leurs navigations internet se fassent via leurs FAIs et non depuis Opnsense en gardant leurs connexions VPN ouverte.

J'ai donc desactive/active  Redirect Gateway sur le serveur Openvpn .... mais leur passerelle est toujours celle de Opensense.

Y a t il un config speciale pour faire ce que je souhaite ?

Merci par avance.