Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - Arno

#1
Hi,

Sometimes a computer on my LAN uses all the available bandwidth.
How do I setup Shaper?
Goal: Max bandwidth as default accept for some computers.

Now I have: Four Pipes: Down/Up for Max and Limited.
No queues.
Four rules: Down/Up for Computer to limit first (Limited pipes) followed by rules for LAN (Max pipes)

At the Status page there are stats for the max pipes but none for the limited pipes.
#2
Hi,

For one box I want internet access bypassing my VPN client to a VPN provider.
So I added the IP address to a 'NoVPN' alias.

On the LAN interface the is a pass rule:
Source: IPv4 NoVPN alias
Destination: *
(and another rule below for the same subnet to use VPN gateway)

When I search the logs using remote logging there are packets on the LAN interface that are blocked from this one box (from tcp high ports to tcp high ports).
So before going out on the internet some packets are blocked.

How is this possible?
#3
Hi everyone,

For my internet access I use a well known OpenVPN provider. Muliple legacy clients (for multiple countries) are configured. Works fine. How do I go from legacy clients to client instances?
#4
Hi everyone,

Using a public wifi I'm trying to connect to my home LAN.

In the logs of OPNsense (via Graylog) I see some incoming packets on WAN port 51820 (pass).

There are no firewall rules on the wireguard interface.
There is one rule on Wireguard (Group): Any IPv4 to one private subnet (/24).

Why is there no handshake when I connect from my Linux Mint laptop?
The public wifi isn't the problem I think. There are incoming packets on OPNsense.
#5
Hi,

Today I tried to use a Huawei E3372H. No luck
Read online that model has to be flashed (to S version)

Does anyone has a recommendation for a similar dongle that is supported by OPNsense?
It is a failover for DSL. My DSL is down for now.
Posting from a public hotspot.

The Acer D5 Connect Predator does not work because there is not enough power on the USB port.
#6
Hello,

For my internet connection I use a VPN provider.
In the client configuration I have the option 'Select remote server at random' checked.

Assumming that selecting the server is at service start, can it be done over time?
Every x hour connect to a different VPN server.
Via WebGUI or cronjob.



#7
Hi,

Trying to configure IPTV.
I think (not fully 100% sure) fw is not blocking traffic and routing correct.

Not installed/upgraded any igmp proxy packages/plugins myself. It came with the installation  :)
Configured igmpproxy with upstream/downstream.
These settings are correct. Working on other fw software.

Dashboard shows igmpproxy started but it isn't. (ps -ef|grep igmp)
Also see the log message.

How can igmpproxy be started?
#8
Hello to you all,

Using a VPN provider the client connection fails.
How to configure an OpenVPN client with NordVPN?

I checked the client configuration more than once.
The NordVPN helpdesk can't help me (until now).
Their guide is for 19.1. Options in version 21.1.5 are (a little) different.
My ISP gives me an IP address and I'm online.

An alternative configuration of pfSense 2.5.1 works.
Attached is the OpenVPN logfile.

Kind regards,
Arno
#9
General Discussion / Install on old hardware (PC amd64)
January 14, 2021, 03:40:30 PM
Hi everyone,

For testing I want to install on an old PC (Athon II 160u).
The usb install crashes, I think, when trying to mount the HDD.
The text on the screen is ureadable too. Only the top (or bottom) half is visible.

It's a SATA disk but in the BIOS the option is grey and is 'Native IDE'.

pfSense 2.5-dev does install but there I'm having issues with imgp proxy.
Regardless of this issue I want to try OPNsense.

Is there a way to install OPNsense for me? Maybe a disk image (vga) similar to nano (console) or a setting I can do so the disk can be mounted and the install can continue.