Messages

1

General Discussion / Re: New user Not sure if it is working - asks for login and password.

« on: April 18, 2024, 08:19:54 am »

really?

this cant be real can it... troll much?

2

Zenarmor (Sensei) / just installed zenarmor and i cant see the "devices" tab

« on: February 03, 2024, 09:42:04 am »

any ideas where that or is it for premium only?

EDIT: just watched this video and saw the "devices" tab that i have never seen before
https://www.youtube.com/watch?v=khC9TQ4pJqA&t=479s
~9:40 in

edit: premium did it

3

Hardware and Performance / Re: Cheap hardware recommendation for first time OPNsense / home firewall

« on: January 10, 2024, 08:04:02 am »

that´s a arm device, go for x86

have you searched, one of the most asked questions...

anyhow, any old pc with a extra nic(intel) will work
or aliexpress..there are boxes under 200$ that will work

4

Intrusion Detection and Prevention / crowdsec - only show logs from the internal nic

« on: December 04, 2023, 11:03:31 am »

If i enable setting "Enable log for rules" i get log entrys both on wan and lan not matter if the rule even exists on the wan interface

i have a "block" on lan port for dst: crowdsec but i dont want it filled with crowdsec hits from wan.

is it possible to not have hits on wan and only on hits originating from lan?

5

23.7 Legacy Series / firewall.log vidget does not work after latest update OPNsense 23.7.8-amd64

« on: November 10, 2023, 07:46:33 am »

Atleast not for me, i get traffic logs under "live view" but noting on "home page" with vidget

6

General Discussion / Re: getting custom script working

« on: December 14, 2022, 01:59:47 pm »

I now see "custom script" is not a default option. So you are "hacking" the system. This will possible break with a opnsense update. It is an appliance.

well, read up on that will ya
"hacking"..was that the scariest word you could come up with?

7

General Discussion / Re: getting custom script working

« on: December 14, 2022, 12:39:27 pm »

if you look at the atached screenshot, should that really be that syntax

get the cron running from with crontab -e is no problem
but in order to get it persistand i was looking for this solution

/s

8

General Discussion / getting custom script working

« on: December 14, 2022, 10:54:32 am »

in
/usr/local/opnsense/service/conf/actions.d/
i added
more actions_pingtest.conf

and the script

[start]
command:/etc/pingtest.sh
parameters:
type:script
description:run custom script
message:run script


and the pingtest script

#!/bin/sh

#=====================================================================
# pingtest.sh, v1.0.1
# Created 2009 by Bennett Lee
# Released to public domain
#*/30 * * * * #
# (1) Attempts to ping several hosts to test connectivity.  After
#     first successful ping, script exits.
# (2) If all pings fail, resets interface and retries all pings.
# (3) If all pings fail again after reset, then reboots pfSense.
#
# History
# 1.0.1   Added delay to ensure interface resets (thx ktims).
# 1.0.0   Initial release.
#=====================================================================

#=====================================================================
# USER SETTINGS
#
# Set multiple ping targets separated by space.  Include numeric IPs
# (e.g., remote office, ISP gateway, etc.) for DNS issues which
# reboot will not correct.
ALLDEST="ping.sunet.se idg.se"
#ALLDEST="irc.com"
# Interface to reset, usually your WAN
BOUNCE=igb3
# Log file
LOGFILE=/tmp/pingtest.log
#=====================================================================

COUNT=1
while [ $COUNT -le 2 ]
do

        for DEST in $ALLDEST
        do
                #echo `date +%Y%m%d.%H%M%S` "Pinging $DEST" >> $LOGFILE
                ping -c1 $DEST >/dev/null 2>/dev/null
                if [ $? -eq 0 ]
                then
                        echo `date +%Y%m%d.%H%M%S` "Ping $DEST OK." >> $LOGFILE
                        exit 0
                fi
        done

        if [ $COUNT -le 1 ]
        then
                echo `date +%Y%m%d.%H%M%S` "All pings failed. Resetting interface $BOUNCE." >> $LOGFILE
                /sbin/ifconfig $BOUNCE down
                # Give interface time to reset before bringing back up
                sleep 20
                /sbin/ifconfig $BOUNCE up
                # Give WAN time to establish connection
                sleep 20
        else
                echo `date +%Y%m%d.%H%M%S` "All pings failed twice. Rebooting..." >> $LOGFILE
#                  /sbin/shutdown -r now >> $LOGFILE
                exit 1
        fi

        COUNT=`expr $COUNT + 1`
done

it runs if i do
 configctl pingtest start

any ideas why it doesent run on the 5min schedule
/s

9

General Discussion / Re: ddclient plugin issue

« on: November 08, 2022, 12:19:12 pm »

i´m really struggling with ddns client(legacy works fine)

i´m trying to get freedns to work but it just wont update
'login=' is an invalid login.
 line 4: Invalid Value for keyword 'ip' = ''
WARNING: last updated <never> but last attempt on Tue Nov 8 12:13:41 2022 failed.
 FAILED: Could not get freedns update URLs from freedns.afraid.org

any one running freedns and got this working?

10

22.1 Legacy Series / Re: os-ddclient

« on: February 28, 2022, 01:37:32 pm »

i cant choose freeDNS on the accounts page, what do i choose there?

Hm, I can choose freeDNS ... If you can't then I don't know ...

on -> dynamic dns -> settings -> service  there i dont have freedns

is that the place?

11

22.1 Legacy Series / Re: os-ddclient

« on: February 28, 2022, 10:51:21 am »

cant find how to get afraid.org (freedns) working, anyone got it running and if so how
Not intrested in running as a cron job.

Configure freeDNS, WAN interface, your hostname and your V2 password and it should work. It's important to activate freeDNS version 2 on the freeDNS web page.

i cant choose freeDNS on the accounts page, what do i choose there?

12

22.1 Legacy Series / Re: os-ddclient

« on: February 28, 2022, 08:20:45 am »

cant find how to get afraid.org (freedns) working, anyone got it running and if so how
Not intrested in running as a cron job.

13

21.7 Legacy Series / Re: Unbound DoT uncertainty

« on: December 25, 2021, 10:55:46 am »

i´m having simlar problem, it have been working but it is not anymore i found out when i randomly checked the 1.1.1.1/help page

021-12-25T10:55:06   unbound[60183]   [60183:0] info: Verified that unsigned response is INSECURE   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: NSEC3s for the referral proved no DS.   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: resolving amazonaws.com. DS IN   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: Verified that unsigned response is INSECURE   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: NSEC3s for the referral proved no DS.   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: resolving netflix.com. DS IN   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: query response was ANSWER   
2021-12-25T10:55:06   unbound[60183]   [60183:0] info: reply from <.> 9.9.9.10#853

ideas?

14

General Discussion / Re: unbound just died during the night, how to use monit

« on: September 20, 2021, 01:46:03 pm »

Unbound is stable. If I may say, of course monitoring his important you'd be better off solving the problem with Unbund rather than knowing when it has failed.

oh sorry, i guess it did´t happen then

15

General Discussion / unbound just died during the night, how to use monit

« on: September 19, 2021, 10:02:23 am »

howdy

the unbound service died during the night, saw somewhere it could be "Register DHCP static mappings" so i disabled that now

anyhow is there a detailed guid on setting up monit and unbound, i really dont have a clue what to put in all those fields..and yes i saw the general howto but that doesent tell me how to get unbound/monit running