Topics

Hello everyone and Happy New Year!
I know this belongs to "Zenarmor", but it's been a few days since I asked there with no response. Can anyone please answer my question:
"Is Mongo Database vulnerable to CVE-2025-14847?"

best regards,
Hugo

hi!
Is Mongo Database vulnerable to CVE-2025-14847?

best regards,
Hugo C.V.

My OPNSense crashed so I reinstalled the same ver. I had, 25.7.2. Installed the plugins I had (Crowsec and Zenarmor)
Did a restore from the backup file (ver. 25.7.2). Rebooted and then I got the following:
Configuring login behavior......
Fatal error: Uncaught TypeError: Cannot access offset of type string on string in /usr/local/etc/inc/auth.inc:260
Stack trace:
#0 /usr/local/etc/inc/system.inc(1214): local_sync_accounts( )
#1 /usr/local/etc/rc.bootup(66): system_login_configure(true)
#2 (main)
thrown in /usr/local/etc/inc/auth.inc on line 260
Enter full pathname of shell or RETURN for /bin/sh:

Can someone please help me?

best regards,
HCV

Hi everyone.
Thanks for your work with all the updates.
After updating to ver. 25.1 Crowdsec shows no logs. I have the same error on all OPNSens that I take care of.
Is this something you already know?
Have a nice weekend!

Best regards!
Hugo

Hi
Using OPNSense 24.1.10_8

1.-What is the best way to configure OPNSense when using it as a Router/Firewall and DHCP/DNS managed by a Windows 2019 Server? How to configure OPNSense DNS settings?

2.-In the same network has a Mail Server. And the users with laptops and mobiles should be able to access the Mail Server at work, with the External DNS Name (the same DNS name they use when they are outside the company). So I first configured in OPNServer>Service>Outbound DNS>Overrides>Host Overrides and added there the Host and domain name that you use externally to access the Mail Server in the Office which pointed to the Mail Server IP address). But it didn't work, so finally I added those DNS in Windows DNS Server and it worked.
Is this the right way?

Thank you if I can get some clarity on it all.

Best regards,
HCV

hi,
We have a new ISP and got a new Public IP Address (WAN IP). Using OPENVPN.
My question is how do I change the WAN IP shown under VPN>OpenVPN>Client Export>Hostname. Because there the old WAN IP is displayed and I want to change to the new one we got from the new ISP.

Many if not all recommend using ZFS when installing OPNSense.
But what about wearing out the SSD, when doing the installation on a consumer SSD (When using only 1 drive). Or should you use ext4 in order not to wear out the SSD?

Best regards!
HCV

Hi!
I would like to know why Zenarmor is blocking easeus.com with its subpages. It worked fine to add easeus.com as an exclusion, but the subpages don't work.

best regards
//HCV

For some reason that I don't know yet and need help with, a computer that has a fixed IP (192.168.1.10) stopped accessing the internet and can't access OPNSense from there. If I change to assigned IP address then everything works. So I tried changing to another fixed IP address (192.168.1.30) and everything works. Internet and can access OPNSense.
Then I tested another computer in the Network and changed to the fixed IP address that did not work (192.168.1.10) and it got the same error. No internet and could not access OPNSense.
This IP address is outside the DHCP Server Scope and has no other device with the same IP.
This error started after I upgraded my OPNSense to 23.7.
Is there a way to look at any logs on OPNSense to see if 192.168.1.10 is being blocked somewhere?
Thanks for any help I can get!
Best regards,
HCV