Topics

1

Announcements / OPNsense is hiring - English

« on: May 28, 2018, 03:02:38 pm »

Developer Open Source Security

Do you want to be part of one of the fastest growing open source security projects and influence the development of a product that secures thousands of networks worldwide?
Become a developer at Deciso and use your knowledge and experience to make the world an even safer place by working on our product.

OPNsense is a security platform aimed at offering commonly used network protocols and security measures to end users or automated processes. To make this possible, all kinds of challenging techniques are used in the field of both backend and frontend development.

Together with developers from our organization and the community around the project, you will work on improving and expanding OPNsense.

What do we expect from an OPNsense developer?
•   A completed hbo study;
•   Affinity with networks and security;
•   Analytical thinking;
•   Good control of the Dutch and English languages.
•   Knowledge and experience in Python, PHP and JavaScript;

What we can offer you
Besides a challenging job at a competitive salary and fringe benefits, we offer a nice team with many opportunities to work on your personal development.
Our place of employment is Middelharnis, working from home is possible in consultation.

About Deciso
Deciso is a technology company that manufactures and sells network appliances and network security software.
Deciso was founded in 2000 and has a strong focus on open source technology.

Our security solutions provide protection against network threats in the broadest sense of the word and form the first line of defense against malware, trojans, DDOS attacks and various forms of fraud.

Part of the strategy, and the breeding ground for many technical innovations, is the fast-growing OPNsense open source firewall project. From this project, techniques relating to high-availability, VPN (secure access for branch offices and itinerant employees), intrusion detection/prevention have been (re)developed and made applicable to a broad public. The security software is made available, among other things, on a hardware platform developed and produced in the Netherlands.

Want to know more?
Then contact Robert van Papeveld, +31 (0)187-744 020.

Application
We would like to receive your application at career@deciso.com

2

Announcements / OPNsense is hiring - Nederlands

« on: May 28, 2018, 03:01:11 pm »

Developer Open Source Security

Wil je onderdeel zijn van één van de snelst groeiende open source security projecten en invloed hebben op de ontwikkeling van een product dat duizenden netwerken wereldwijd beveiligd?
Wordt dan ontwikkelaar bij Deciso en gebruik jouw kennis en ervaring om de wereld nog veiliger te maken door mee te werken aan ons product.

OPNsense is een beveiligingsplatform gericht op het aanbieden van veel gebruikte netwerkprotocollen en beveiligingsmaatregelen aan eindgebruikers of geautomatiseerde processen. Om dit mogelijk te maken worden allerlei uitdagende technieken gebruikt op het gebied van zowel backend als frontend ontwikkeling.

Samen met ontwikkelaars vanuit onze organisatie en de community om het project heen werk je aan het verbeteren en uitbreiden van OPNsense.

Wat vragen wij van een OPNsense developer
•   Een afgeronde Hbo-opleiding;
•   Affiniteit met netwerken en beveiliging
•   Analytisch denkvermogen
•   Goede beheersing van de Nederlandse en Engelse taal
•   Kennis en ervaring in Python, PHP en JavaScript;

Wat kunnen wij je bieden
Naast een uitdagende functie tegen een marktconform salaris en secundaire arbeidsvoorwaarden bieden wij een leuk team met veel mogelijkheden om te werken aan je persoonlijke ontwikkeling.
Onze standplaats is Middelharnis, werken vanuit huis behoort in overleg tot de mogelijkheden.

Over Deciso
Deciso is een technologiebedrijf dat netwerk appliances en netwerk security software maakt en verkoopt.
Deciso is opgericht in 2000 en heeft een sterke focus op open source technologie.

Onze security oplossingen bieden bescherming tegen netwerkbedreigingen in de breedste zin van het woord en vormen de eerste lijn van verdediging tegen malware, trojans, DDOS aanvallen en diverse vormen van fraude.

Onderdeel van de strategie, en broedplaats voor vele technische innovaties, is het snelgroeiende OPNsense open source firewall project. Vanuit dit project zijn technieken rondom high-availability, VPN (beveiligde toegang voor branche offices en ambulante medewerkers), intrusion detection/prevention (door)ontwikkeld en toepasbaar gemaakt voor een breed publiek. De security software wordt onder meer beschikbaar gesteld op een eigen in Nederland ontwikkeld en geproduceerd hardware platform.

Meer weten?
Neem dan contact op met Robert van Papeveld, 0187-744 020

Sollicitatie
We ontvangen je sollicitatie graag op career@deciso.com

3

Announcements / Happy New Year

« on: December 22, 2017, 11:26:51 am »

While the new year is almost upon us we want to take this oppertunity to thank you all for your support!

Together we will make OPNsense the most widely used open source firewall platform.

2017 was fantastic, lets make 2018 even better!

Stay Safe,

Your OPNsense Team

4

Announcements / [EXPOSED] Netgate / pfSense acts in bad faith

« on: November 24, 2017, 02:23:34 pm »

Netgate / pfSense acts in bad faith

Some of you may have come across OPNsense.com a domain that until  September 21, 2017 was home to a controversial website with content targeted to harm our open source project.

On the fore mentioned date we filed a complaint with WIPO, the World Intellectual Property Organization to try and stop this website from being operated.

Until our legal action we were unable to determine the owner of the domains as it was registered using Domains By Proxy, LLC, however we believed the site was created by a pfSense enthusiast who had gone a step too far.

Much to our surprise we received an email on September 26, 2017 stating that the owner of this domain was in fact Jamie Thompson, Rubicon Communications dba Netgate also known for the competing pfSense project.

Maybe this should not have come as a surprise as ever since we created OPNsense they have tried to harm our project and aided in spreading false information, mostly done using anonymous accounts. Their aim has been to scare off new users and keep our project from Wikipedia, this way depriving others from making their own choice.

Their actions have been bad for the open source community as they undermine the very basic principles of open source:

Today we have been able to stop Netgate and although we are glad this chapter can be closed, it does not feel like a victory at all  as the time, effort and money could have been spend much better.

The full text of the WIPO panel's decision on OPNsense.com can be found here: http://www.wipo.int/amc/en/domains/search/text.jsp?case=D2017-1828

The content of OPNsense.com prior to our action can still be seen on the WayBackMachine, the internet archive (beware it contains shocking material):  http://web.archive.org/web/20160314132836/http://www.opnsense.com/

The video that was not cached contains scenes taken from the film "Downfall", the historical war drama film depicting the final ten days of Adolf Hitler's rule over Nazi Germany, along with a comment reading "From deep within the OPNsense development bunker".

As Deciso, the company behind OPNsense we have not yet decided upon further action, but ask all who read this to push back to those who try to harm our community and open source in general.

As a final note, we wish to thank everyone for their overwhelming supporting and are proud to have witnessed the positive development of the project as a whole, a rapidly growing community and the next major release 18.1 almost at our doorstep.

Stay Safe
Your OPNsense Team

5

Announcements / Introducing the Supported Edition

« on: July 25, 2016, 06:56:55 pm »

Hi everyone,

As 16.7 is almost upon us i'd like to introduce the upcoming supported version to you all; OPNsense Supported Edition.

Support Version Introduction

We as the OPNsense team are proud of the project's rapid development, but realize that our business users do not always appreciate fast-paced release cycles and growing complexity of stable updates. To better support them, we will introduce an additional version somewhere within the next few months, which will use a more conservative approach: This version will use the same technology and code as our normal version, but will incorporate fewer changes and therefore focus more on bug fixes and security patches.

The supported edition is indented for companies who want to have more assurance that new features have been tested in the field for a longer period of time. As the name states it comes with support and includes optional services such as managed updates.

In essence it is an extension of our existing support services and in the future will allow us to supply our customers with commercial plugins that are otherwise impossible to provide without proper funding, such as a central management solution.


Jos Schellevis
OPNsense core team

6

Hardware and Performance / Recommended Hardware Vendors

« on: February 15, 2016, 03:41:56 pm »

Dear OPNsense users and enthusiasts,

Get official appliances from the OPNsense® team directly, see OPNsense shop

Did not find what you are looking for at our shop?
Then consider buying from one of our partners who help and contribute to the project.

All our partners make significant contributions and some of them offer great hardware / turn-key appliances with OPNsense. Here is a list of current hardware partners:

Official OPNsense® Shop
Hardware, Software, Services from the makers. Offering OPNsense® Certified™ Hardware.
retail shop: https://shop.opnsense.com

Worldwide
Deciso B.V.
Founder and active contributor to the OPNsense project. Manufacturer of the Netboard A8, A10 and A20 based appliances.
website: https://www.deciso.com
Official OPNsense® Shop
retail shop: https://shop.opnsense.com

Germany

Landitec Distribution GmbH
Value added distributor for high quality network equipment.Offering OPNsense® Certified™ Hardware
website: www.scope7.de/
Scope7 products: www.scope7.de/

Thomas-Krenn AG
Thomas-Krenn.AG provides individual server- and storage-systems and data center solutions.
website: https://www.thomas-krenn.com/


The Netherlands

Official OPNsense® Shop
Hardware, Software, Services from the makers
retail shop: https://shop.opnsense.com


Thank you for using OPNsense,

Together we'll make OPNsense the most widely used open source security & firewall platform !

7

Announcements / OPNsense: Beyond the fork

« on: August 27, 2015, 09:17:21 am »

Here we are, ~40 releases and time to give an update.

We set out to create a thriving community and today we have thousands of people enjoying OPNsense.

The high degree of participation from the ever-growing community has surprised even us.

We are excited to see users helping each other on the forum and sharing ideas.

A special thanks goes to all of you who helped out with testing, fixing issues and realizing new features such as the transparent proxy, the hardenedBSD improvements and the tremendous help we get with the language packs.

With over 5000 commits and several million lines of code the project now has it own identity and makes different choices than its parent project. To name a few we have adopted the Phalcon MVC framework for all new features, have a pkgng based firmware upgrade system – that has proven to work very well – and modernized the user interface.

With the release of 15.7 we have a production ready stable version that has proven itself in lots of different scenario’s from protecting office networks to a datacenter solution proving virtual private networking for its customers.

And the great thing is that our parent project, pfSense® has taken over some of our best practices and listened to all of you by bringing back the source repository as of 21st of August, 2015.

Their users benefit from us too, and that is how it should be with open source, where we share whatever we can.

That they do not have a true open source license yet and stick to their ESF 6 clause license makes the sharing one way at this point. Hopefully the success of our project encourages them to follow us and open up their license as well.

However you look at it, a new area has begun for open source security and together we will achieve our goal “to make OPNsense the most widely used open source security platform” – faster than anyone imagined.

Jos Schellevis
OPNsense core team

8

General Discussion / [SOLVED] Proxy Squid depends on IPv6

« on: July 06, 2015, 11:53:57 am »

Just to help others who have issues running Squid:

If you see this in your log:

Code: [Select]

2015/07/06 11:28:43 kid1| sendto FD 12: (1) Operation not permitted
2015/07/06 11:28:43 kid1| ipcCreate: CHILD: hello write test failed
Then the solution is to allow IPv6 in System-> Settings-> Networking

9

15.7 Legacy Series / Upgrading from 15.1.x in 10 minutes or less

« on: July 03, 2015, 10:49:15 am »

Upgrading made easy!
We have been telling everybody how easy upgrading is in OPNsense, with 15.7 the "Brave Badger" it is time to show you how an upgrade from 15.1.12 to 15.7 is done in under 10 minutes

I upgraded our production system and made some screenshots, the process takes 5 minutes with ~2 minutes of total downtime due to base system upgrade (kernel & packages).

( 1 ) Check version
We are on 15.1.12-amd64

( 2 ) Go to Firmware page
We have a nice clean firmware upgrade page

( 3 ) Click to check now
Click on the button and watch it fetch the update list



( 4 ) 25 updates!
The whole system uses packages! (see package: opnsense 15.7)

( 5 ) If we need a reboot
Since this upgrade requires a reboot for kernel and package upgrades, you will see a warning. In many cases you won't need a reboot.

( 6 ) 08:29:27 - Pressed Ok



( 7 ) Upgrade in progress..
You can watch the upgrade in progress and see the system fetching the upgrades one by one and aplying them

( 8 ) Warning you the reboot is taking place..
Usually OPNsense will be booted in 5 minutes... or less

( 9 ) 08:50:38 -  Done upgrading now rebooting  (up until now the system was still available for our users)
... waiting ...



( 10 ) DONE!
We had 2 minutes of total downtime due to the required reboot as you can see.
Everything is up and running.. now isn't this easy?

10

Dutch - Nederlands / Welkom in het Nederlandstalige topic

« on: April 23, 2015, 10:19:30 am »

Om de stilte te doorbreken hier de eerste post.
Er zijn voldoende forum leden die Nederlands verstaan, dus vragen/opmerkingen zijn hier ook welkom 

------------------------------
Just a first post for people who would like to discuss in Dutch.
Welcome everyone!

11

Announcements / OPNsense 15.1.1 released

« on: January 12, 2015, 05:42:43 pm »

Thanks to all the people who have helped testing, coding and made others aware of this great new project.

Your testing has enabled us to release an updated version just over a week after our original release!
See our blog for more details: http://opnsense.org/opnsense-version-15-1-1-released/