Topics

1

24.7 Production Series / OPNsense 24.7 dhcpd errors in log

« on: August 10, 2024, 07:28:57 pm »

Good evening,

I did not notice exactly when this started but at least from version 24.7 I started to see errors in ISC DHCPv4.
I have a couple of static mappings and they are shown as static on the leases page.

Still OPNsense errors and see them both as static and as dynamic if I read the log correctly.
See attachements.

Nothing changed in that regard since 24.1 but is it something I have to adjust?
Any help appreciated!

@franco, any idea?

2

24.1 Legacy Series / Unbound DNSBL

« on: February 14, 2024, 10:57:12 am »

Hi,

I have a question to @franco:

Is there a reasoning behind the choices of the type of DNSBL in Unbound?
Lately the OISD blocklists are added to the lists.

I, and maybe more users, would welcome the lists of Hagezi (https://github.com/hagezi/dns-blocklists).
He has all kind of lists, from adblock to wildcard lists, from mild filtering to aggressive.

Just food for thought, maybe now would be a good moment for inclusion of these lists.

3

23.7 Legacy Series / Unbound DNS

« on: October 26, 2023, 11:20:49 pm »

Hi!
Is it possible to reload Unbound DNS without resetting statistics and without losing the cache?
If so, what is the correct command through ssh?

If not, is it impossible to achieve or something else?

4

23.7 Legacy Series / Unbound DNS firewall

« on: October 05, 2023, 04:33:18 pm »

Hi!
Just curious if someone happens to know if blocking with Unbound with the methods below has any advantage over the other (faster or more efficient or anything else):

- RPZ, flexible rules to block and/or passthrough or redirect, but often times two rules, one for hostname, one for domain to hostname (ymo.co.za CNAME . and *.ymo.co.za CNAME . for instance)

- conf file, rules like, local-zone: "000.pe." always_nxdomain

I am just looking for advantages of one or the other.