Topics

Hi folks,

I have a problem with my current setup. I have a netflow collector installed within my network and want to send my netflow octets to this collector. Unfortunately my collector is only reachable via IPsec, so if I set the netflow configuration up to send the packets to this collector I don't see the packages on the other side of the tunnel. My opnsense host is also the connections endpoint of the IPsec tunnel.
Does someone know how to solve this issue?

Thanks Loden_Richard

Hi there,

I was wondering if it is possible to integrate openvas (http://openvas.org/) within opnsense. My problem is, it is not within the pkg source and I can't install the required packages for compiling openvas. Is there an option to enable the sources for it without breaking my opnsense installation?

with best regards

richard

Hi guys,

I updated my box and at first I was a little bit surprised, that my box wasn't going to reboot itself. The web front end was gone, but I could connect via SSH. So I checked and doesn't saw any update process running (after ca. 8h time for the update). So I rebooted and viola I have a freebsd running, but no service came up from opnsense. So I tried to update opnsense via opnsense-update and then I got a nice pkg tool loop with "A new version of pkg was detected [...]". So I tried "pkg upgrade -f pkg" but then pkg was installed several time without being installed really i guess.
Ok, where ended I up? Now I can't use pkg, because my system tells me "The package management tool is not yet installed on your system. Do you want to fetch and install it now?", if I want to install it I get the following output "pkg: Error loading trusted certificates"

Does anyone has advice for me?

regards richard

Hi,

I started configuring my OPT1 interface and so far no errors. Setup with hostap and wpa2 etc. done. DHCP also done. Now my clients get IP-addresses but can't reach the WAN interface. Am I forgeting something?

The IP-address of OPT1 is 192.168.2.1 with a range for dhcp of 192.168.2.0/24

my outbound NAT rules are as follows:

WAN      127.0.0.0/8 192.168.1.0/24 192.168.2.0/24    *    *    500    WAN address    *    YES    Auto created rule for ISAKMP     
WAN      127.0.0.0/8 192.168.1.0/24 192.168.2.0/24    *    *    *    WAN address    *    NO    Auto created rule 

I stuck somewhere and it would nice to know where.

Thanks for advice.