Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Topics - michaelgo

#1
General Discussion / opnsense AWS problem
March 04, 2023, 06:44:16 AM
Hi,
please, help
we try to import a working opnsense image (tried from vmware export, from virtualbox ova and bootstrap freebsd) however it all ends at the boot screen right after interfaces setup.
thank you
#2
Hi,
is it possible to limit VPN when it exceeds certain limit in bytes?
thanks
#3
General Discussion / openvpn statusrefresh
February 04, 2023, 03:23:25 PM
Hi,
need help to update openvpn statusrefresh from default 60s to every 10 sec so that it'll write status file more often.
Please, help
#4
General Discussion / VPN traffic limits
January 13, 2023, 08:14:26 AM
Hi,
i need to control VPN traffic per user, so that when it reaches certain limit, the connection would drop.
Is it possible?
thanks
#5
General Discussion / Nginx User Agents block
October 14, 2022, 09:30:16 AM
Hi,
what does this block reference to?

if ($http_user_agent ~ ^Mozilla/[\d\.]+$)
    {
      return 418;
    }
thanks
#6
General Discussion / nginx and modsecurity
September 29, 2022, 02:19:19 PM
Hi,
is non os 'pkg install nginx' different from ports/nginx version? i understand from google searches that 'ports modsecurity' requires ports version of nginx
thanks
#7
General Discussion / NATed traffic without payload
December 27, 2021, 05:50:42 AM
VM subnet A => opnsense NAT rules to webapp port 80 or 443 => VM subnet B
I can see the rules work (rdr and pass) but tcpdump on VM B shows no payload (length 0)
What can possibly cause this behavior?
both hosts are reachable from opnsense, tcpdump on opnsense interface A also shows length 0
(the web app on VM B works when opening directly from the subnet B)
web gui http redirect is off
bogon and private for interface A and B are off
this is a Virtualbox setup
#8
General Discussion / hardware health audit
December 23, 2021, 06:56:18 AM
Hi,
i have a question - what are the checks that are being performed when running the health audit?
from the output it's kernel, kernel files, base, base files, dependencies and packages.
is "base check" is the base kernel and kernel checks are for kld?
also is it possible to run/generate hw-probe plugin output locally without uploading to https://bsd-hardware.info/ and generate a hw health report? Or maybe there's some other tool for hardware health check?
thanks
#9
Hi,
Is it possible to manually import GeoIPs list? or is there a way to batch import rules directly into FW?
thanks
#10
General Discussion / FW rules behavior
November 26, 2021, 03:22:05 PM
Hi,
WAN to LAN icmp rules test shows strange behavior -
when it's off (no ping allowed) the FW blocks, seen in the live view, then i enable the rule and when applied, the ping starts immediately.
However, if i start ping WAN to LAN and disable the rule (and apply) the ping continues, and only if i stop and start ping it's blocked.
did i miss something in the settings?
The rules are applied per interface.

floating rule icmp in/out behaves the same way.

Is this by design?
thanks
#11
Hi,
which versions of freebsd are opnsense-bootstrap compatible?
thanks
#12
Hi,
How can i update installer iso - update to latest version, add plugins and then use it for installation?
thanks
#13
General Discussion / Customize system information widget
November 10, 2021, 11:38:28 AM
Hi,
is it possible to customize system information widget?
thanks
#14
Hi,
i need to migrate older version of opnsense (VM) to and offline/internal network HW. would it be the possible to bring all the updates at once to installer + os-nginx package (release dl version is 21.7.1 right now, but the updates are 27.1.3.3) and then restore config from VM? Backup => restore for config, but what to do with os-nginx current version (not possible to install on older than 27.1.3.3 opnsense)?

is it possible to update the installer to the last updates + add nginx and then install?

it's a working VM opnsense, so updating and exporting VM will not convert to hardware installation, and installing to hardware + restore backup without updates doesnt let add os-nginx latest package.
thanks
#15
General Discussion / disable nginx error page
October 12, 2021, 02:11:28 PM
How to disable nginx server error "OPNsense" page?
is it default error page just for nginx or also other services?
thanks
#16
General Discussion / Disable error reporter
October 12, 2021, 02:03:34 PM
How to disable error reporter?
thanks
#17
General Discussion / permanent logs
October 12, 2021, 12:45:54 PM
Is it possible to configure logs to store data for certain period?
thanks
#18
General Discussion / authorize opnsense on a web-proxy
October 11, 2021, 11:15:00 AM
Is there a setting to authorize opnsense on another web-proxy?
thanks
#19
General Discussion / install updates manually
October 11, 2021, 11:12:18 AM
Hi,
how can i install latest updates manually on a "air-gapped" opnsense?
thanks
#20
General Discussion / customize GUI
October 08, 2021, 11:27:53 AM
Is it possible to customize GUI without breaking functionality?
what would be the best way to do it?
thanks