Messages

1

German - Deutsch / Hardware-Tausch?

« on: February 14, 2020, 04:23:58 pm »

Moin moin,

möchte gern meine Hardware austauschen ohne neu zu installieren. Server sind fast baugleich, also der selbe Chipsatz, allerdings Xeon statt i3 und mehr Schnittstellen onboard. Eigentlich könnte ich doch die SSDs (gmirror) einfach umbauen und ggf die MAC-Adressen in der Config anpassen, oder? Erfahrungen?

(Möchte nicht unbedingt neu installieren weil ich an verschiedenen Stellen Anpassungen gemacht hab)

2

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: February 08, 2020, 11:21:50 am »

@mb just one question. it would be interesting to be able to export or import report data. because if you have to uninstall sensei and erase the data (for whatever reason - hardware change or other problems), it would be great to be able to import the previously recorded data again afterwards. is just an idea. greetings rene

maybe you could try the snapshot function of elastic-dump (Github) or just curl:
CURL -XPUT 'localhost:9200/_snapshot/<backup_folder name>/<backupname>' -d '{
    "indices": "<index_name>",
    "ignore_unavailable": true,
    "include_global_state": false
}'

3

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: December 16, 2019, 07:36:25 pm »

Hi @marcri, sensei needs at least two cloud nodes. You should be able to select any other node as the second one. Can you confirm that this is the case? If not let's check it out.

Hi @mb,  selecting an other second node works.
Thanks

4

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: December 16, 2019, 07:07:19 pm »

I can't deactivate "US-East" Cloud-Node
Machine Version:    1.2.3
UI Version:    19.12.14
Database Version:    1.2.0

5

German - Deutsch / Re: OPNsense Business Edition

« on: December 02, 2019, 04:12:50 pm »

Das Dokument kenne ich natürlich, aber der Informationsgehalt ist ehr gering...

6

German - Deutsch / OPNsense Business Edition

« on: December 02, 2019, 03:01:19 pm »

Hallo Forum,

wer nutzt denn von Euch die OPNsense Business Edition? Welche Features, PlugIns etc gegenüber der freien Version sind denn dabei? Irgendwie gibt es kaum Informationen. Auch über OPNcentral finde ich nichts...


VG
Marc

7

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: November 24, 2019, 09:29:46 am »

After taking out the custom option in web controls  from our hands, youtube not loading video after added in Auto Whitelist Hosts.
May be it's not good idea to take feature after feature from the free version with every update after all...

Same problem here, can't control anything anymore and have to allow everything. that's really bad!


And SOHO with 15 devices/ip addresses means 7 dual stack "devices" is really much too low, even for a one-person household.

8

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: November 12, 2019, 11:24:18 am »

Don't use dual stack or multiple ips per device. Sensei counts every ip address and sees ~60 devices in my lan, but there are only 18 real devices

9

Development and Code Review / Re: Sensei on OPNsense - Application based filtering

« on: September 18, 2019, 07:39:00 am »

As my mail relay does not allow sender addresses with non-local/external domains it would be very nice to have the possibility to set an own sender address.

Sensei uses the SMTP username as sender, in my case it is an email address. Works as expected.

10

Intrusion Detection and Prevention / Re: [SOLVED] Proofpoint Telemetry status

« on: September 16, 2019, 11:43:23 am »

Same problem here. It seems my network ist too clean, no alerts since Aug 28 so Proofpoint Telemetrie ist disabled. I don't want to generate fake alterts, because it will generate e-mail-notifications and so on. any other ideas?

11

19.7 Legacy Series / Re: How to add a cron entry that persists system updates

« on: September 07, 2019, 12:55:00 pm »

clone a file here  /usr/local/opnsense/service/conf/actions.d with [reload]-section

12

General Discussion / Re: OPNsense Sticker

« on: September 06, 2019, 06:40:17 pm »

Here they are

13

19.7 Legacy Series / Re: Protect Postfix/IMAP

« on: September 06, 2019, 01:33:26 pm »

fail2ban is perfect for blocking clients with failed auths

14

German - Deutsch / Re: Deutsche Glasfaser kein Internetzugriff

« on: September 06, 2019, 12:25:24 pm »

Komplett ohne VLAN, Rest siehe Bild

15

German - Deutsch / Re: TCP Connection Timeout auf Hyper-V VMs

« on: September 06, 2019, 12:19:31 pm »

Probier mal die Firewall-Optimierung auf "konservativ" zu setzen, dann werden die Verbindungen nicht so schnell verworfen...