Messages

1

Zenarmor (Sensei) / Re: Blocked message from zenarmor should also be seen in opnsense firewall live log

« on: Today at 10:59:12 am »

Perfect. Thx for your great Support

2

Zenarmor (Sensei) / Re: custom Message instead of "PR_END_OF_FILE_ERROR"

« on: Today at 03:21:16 am »

Wow. Great work.

3

Zenarmor (Sensei) / Re: custom Message instead of "PR_END_OF_FILE_ERROR"

« on: Today at 03:11:20 am »

Maybe there is a way that everyone can make his own custom Text perhaps with his own Logo or graphic in it.

4

Zenarmor (Sensei) / Re: Blocked message from zenarmor should also be seen in opnsense firewall live log

« on: Today at 02:41:20 am »

it would give the firewall live log more clarity and a much better overview and easier handling for everyone.

5

Zenarmor (Sensei) / Re: custom Message instead of "PR_END_OF_FILE_ERROR"

« on: Today at 02:37:03 am »

Hi @opnsenseuser,

Yes, this is already possible with HTTP (clear-text).

For TLS-encrypted connections: we're currently working on this. (See attachment).

It'll ship with 1.12 if all goes well.

Great News. Thx

6

22.7 Production Series / Re: Anti DDOS - Firewall Advanced Settings

« on: August 07, 2022, 08:53:48 pm »

Thank you both for the information.
I don't think I use it. Seems to be more of a problem, at least in terms of compatibility and performance and purpose, than useful.

7

22.7 Production Series / Anti DDOS - Firewall Advanced Settings

« on: August 07, 2022, 06:41:57 pm »

1. What is the difference between the 3 setting options of Anti DDOS?
2. Can someone explain when it makes sense to activate Anti DDOS or what should be considered when activating it?
3. Is there a documentary about it?
4. Is there a log?

thx

8

22.1 Legacy Series / Re: os-ddclient

« on: August 07, 2022, 10:54:19 am »

Thanks for keeping dyndns in play for a little longer.

I just tried to switch to os-ddclient for Cloudflare using API token unsuccessfully
Tried adding this https://github.com/opnsense/plugins/issues/2842

Still couldn't get it to work.
Also the GUI config is pretty hard (impossible) to work out what you should put where.

Looking forward to os-ddclient catching up.

use the Global api key >> this works

these are the setting you have to make:

##
## CloudFlare (www.cloudflare.com)
##
#protocol=cloudflare,        \
#zone=domain.tld,            \
#ttl=1,                      \
#login=your-login-email,     \ # Only needed if you are using your global API key.
#password=APIKey             \ # This is either your global API key, or an API token. If you are using an API token, it must have the permissions "Zone - DNS - Edit" and "Zone - Zone - Read". The Zone resources must be "Include - All zones".
#domain.tld,my.domain.tld

9

22.1 Legacy Series / Re: os-ddclient

« on: August 07, 2022, 10:53:04 am »

Late to the party, sorry.

Could not find a way to properly set the IONOS API update URL. It just needs to call that custom URL, nothing else. ( https://www.ionos.de/hilfe/domains/ip-adresse-konfigurieren/dynamisches-dns-ddns-einrichten-bei-company-name/ )

Also, even if it worked, no way to update it to a GW group anymore?

I am also using IONOS API.  Since it is as simple as calling a custom URL, I just created a custom cron job to do it. Need not bother about the os-ddclient.

Using All-Inkl, however IONOS is straight forward with os-ddclient. Set to custom, set to DynDns2, post URL as mentioned for FritzBox, leave everything empty. Done.

https://www.ionos.de/hilfe/domains/ip-adresse-konfigurieren/dynamisches-dns-ddns-einrichten-bei-company-name/

use the Global API Key >> this works

10

Zenarmor (Sensei) / Blocked message from zenarmor should also be seen in opnsense firewall live log

« on: August 07, 2022, 09:42:13 am »

would be great if blocked messages are also shown in the opnsense firewall live log labeled with "zenarmor" or something like that.

11

Zenarmor (Sensei) / custom Message instead of "PR_END_OF_FILE_ERROR"

« on: August 07, 2022, 09:12:43 am »

is it possible to make a user-defined output message instead of the "PR_END_OF_FILE_ERROR", as shown for example. "This page has been blocked by the admin" ??

12

German - Deutsch / Re: Firewall live Ansicht mit GEOIP Verknüpfung?

« on: August 06, 2022, 09:13:13 am »

Im Endeffekt wäre es das. Ein wenig modifiziert und man hätte gleich in der Detailansicht der Block Regel das Land und diverse andere Informationen.

Code: [Select]

<?php

function ip_info($ip = NULL, $purpose = "location", $deep_detect = TRUE) {
    $output = NULL;
    if (filter_var($ip, FILTER_VALIDATE_IP) === FALSE) {
        $ip = $_SERVER["REMOTE_ADDR"];
        if ($deep_detect) {
            if (filter_var(@$_SERVER[&#39;HTTP_X_FORWARDED_FOR&#39;], FILTER_VALIDATE_IP))
                $ip = $_SERVER[&#39;HTTP_X_FORWARDED_FOR&#39;];
            if (filter_var(@$_SERVER[&#39;HTTP_CLIENT_IP&#39;], FILTER_VALIDATE_IP))
                $ip = $_SERVER[&#39;HTTP_CLIENT_IP&#39;];
        }
    }
    $purpose    = str_replace(array("name", "\n", "\t", " ", "-", "_"), NULL, strtolower(trim($purpose)));
    $support    = array("country", "countrycode", "state", "region", "city", "location", "address");
    $continents = array(
        "AF" => "Africa",
        "AN" => "Antarctica",
        "AS" => "Asia",
        "EU" => "Europe",
        "OC" => "Australia (Oceania)",
        "NA" => "North America",
        "SA" => "South America"
    );
    if (filter_var($ip, FILTER_VALIDATE_IP) && in_array($purpose, $support)) {
        $ipdat = @json_decode(file_get_contents("http://www.geoplugin.net/json.gp?ip=" . $ip));
        if (@strlen(trim($ipdat->geoplugin_countryCode)) == 2) {
            switch ($purpose) {
                case "location":
                    $output = array(
                        "city"           => @$ipdat->geoplugin_city,
                        "state"          => @$ipdat->geoplugin_regionName,
                        "country"        => @$ipdat->geoplugin_countryName,
                        "country_code"   => @$ipdat->geoplugin_countryCode,
                        "continent"      => @$continents[strtoupper($ipdat->geoplugin_continentCode)],
                        "continent_code" => @$ipdat->geoplugin_continentCode
                    );
                    break;
                case "address":
                    $address = array($ipdat->geoplugin_countryName);
                    if (@strlen($ipdat->geoplugin_regionName) >= 1)
                        $address[] = $ipdat->geoplugin_regionName;
                    if (@strlen($ipdat->geoplugin_city) >= 1)
                        $address[] = $ipdat->geoplugin_city;
                    $output = implode(", ", array_reverse($address));
                    break;
                case "city":
                    $output = @$ipdat->geoplugin_city;
                    break;
                case "state":
                    $output = @$ipdat->geoplugin_regionName;
                    break;
                case "region":
                    $output = @$ipdat->geoplugin_regionName;
                    break;
                case "country":
                    $output = @$ipdat->geoplugin_countryName;
                    break;
                case "countrycode":
                    $output = @$ipdat->geoplugin_countryCode;
                    break;
            }
        }
    }
    return $output;
}

?>

13

German - Deutsch / Firewall live Ansicht mit GEOIP Verknüpfung?

« on: February 23, 2022, 04:10:04 pm »

Von Vorteil wäre, wenn das Firewall-Livelog (Detailansicht) die IP mit einem GEOIP-Host verknüpfen könnte.
Was denken ihr?

Ich habe eine einfache Lösung per PHP gefunden.
https://www.a-coding-project.de/ratgeber/php/geolocation

Vielleicht gibts ja auch was besseres oder es ist sowieso nicht gewünscht bzw erwünscht, dann vergesst es.
Ist nur ein Verbesserungsvorschlag von mir bzw eine Idee.

Danke

14

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 08:22:31 pm »

Any solution for Cloudflare users? I thought I read something about custom settings but I don't see anywhere to do that.

There will be Cloudflare support!

15

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 02:00:13 pm »

ddclient already has a home. I'm happy to take OS-DDNS under our umbrella as it's php.

great 

There already is a custom field, however it will not work for some providers as they do not follow the standard format.

perfect