Messages

1

19.1 Legacy Series / VPN Setup

« on: March 09, 2019, 03:12:44 am »

Hi All,

I've followed the instructions here, as they seem to offer compatibility with macOS, iOS, Windows, and Android.

https://docs.opnsense.org/manual/how-tos/ipsec-rw-srv-rsamschapv2.html

I've done everything per those instructions and the test user.  ...and... now what?  How do I configure the clients?  That seems to be missing.

I initially followed this guide, which at least had instructions for the clients, which seems to have additional steps for the firewall (which makes sense and the first link doesn't have) but it didn't work:

https://docs.opnsense.org/manual/how-tos/ipsec-road.html

I'm not a VPN/IPsec expert at all, but there seems to be a lot of work done in this area with a lot of changes, and as someone who doesn't work at lot with VPN and isn't familiar with setting it up, I'm finding the documentation either a bit out of date and/or confusing.

Does anyone have a guide, external blog, anything with clear and simple to follow directions to get this working?

Thanks!

2

17.1 Legacy Series / Re: Port 80 and 443 to more than one computer.

« on: March 12, 2017, 06:23:16 pm »

Has anyone made any progress with this... man, haproxy is just a beast.

I can't figure out if BOTH frontends and backends are necessary for my purpose and, I assume, the purpose of the original poster.  I have two domains on two different servers behind NAT.  I'd like:

www.example.com to point to 10.0.1.200 on both port 80 and 443

and

www.example.net to point to 10.0.1.201 on both port 80 and 443

I assume the "frontend" will need to watch for the particular fqdn on those ports and direct to the appropriate system, I again assume defined in "servers"?

Not sure where the backend fits into it all...

3

17.1 Legacy Series / Re: Port 80 and 443 to more than one computer.

« on: March 08, 2017, 10:06:06 pm »

I didn't realize haproxy was a plugin... definitely interested in any configuration tips one finds.  I'm in the same situation with Lets Encrypt.

4

17.1 Legacy Series / Re: Install Freezes at Guided Installation

« on: February 25, 2017, 08:06:15 pm »

I guess note this somewhere. What I ended up doing was installing 16.7 which worked perfectly, then upgraded to 17.1 which went well, but I had to follow the directions in this post (including making the change with the GUI) in order to get it to boot every time.

https://forum.opnsense.org/index.php?topic=4470.msg17092#msg17092

I guess I'll keep that 16.7 DVD I made handy!

5

17.1 Legacy Series / Install Freezes at Guided Installation

« on: February 25, 2017, 06:13:15 pm »

I'm trying to do a fresh install on a 2nd machine to use as a backup incase the main router goes down.  I never had problems installing v15 or v16, but man, the FreeBSD underpinnings of v17 seem to be making what was once simple, frustrating.

First it wouldn't boot until I did the steps here:
https://forum.opnsense.org/index.php?topic=4389.msg17200#msg17200

Now, I make it all the way to "Guided Installation" but on that screen I can't select anything. It's just frozen. No keyboard input. Nothin'. I have to force reset the PC.

6

General Discussion / Re: USB Flash Drive Format to store backup Configuration

« on: February 21, 2017, 12:11:25 am »

Actually, I'm positive you can. I've done it.

When I had a crash with 16.1 due to a failing hard drive, I had the fresh drive in while the old drive was still connected.  During install I was able to select the old drive where it found my configuration and built it into the new install perfectly.

This is just putting the configuration on a flash drive so if that happens again it can recover the configuration for it.

Thank you for your replies, but I'd prefer we not debate over what can and cannot be done, I'd prefer any help to my actual question: help with formatting the flash drive properly.  If you have any guidance in that direction, please share!

Thanks!

7

General Discussion / Re: USB Flash Drive Format to store backup Configuration

« on: February 20, 2017, 07:26:31 pm »

Yes, I understand this, and that is how I get my current configuration.

The goal, as I described, is to have the configuration on-hand and on the USB drive for reloading during install onto a new machine or a reload on the existing machine.

Thanks!

8

General Discussion / USB Flash Drive Format to store backup Configuration

« on: February 20, 2017, 06:54:08 pm »

I've been banging my head against the wall for the past hour on, what I thought based on my Ubuntu experiences, would be a fairly simple thing to do.

I'm trying to get my OPNsense configuration onto an old USB Flash drive of low capacity (hey, not much good for anything else nowadays!) so that when/if I have a melt down or replace hardware, I can insert the USB stick during install and choose "Restore Configuration" and be on my way.

In doing a dry run with this, the OPNsense installer (or rather FreeBSD) refuses to see the format on the flash drive complaining that it isn't formatted or an unknown partition type.

I figured that most distros on the planet would understand at least FAT16 or 32 by now, I guess not. I tried formatting in UFS2, but I either failed horribly or it doesn't like that either.

Could anyone tell me exactly what it might be looking for in terms of formatting and exactly how to do this so it works?

Personally frustrated, but appreciative of any help or suggestion!

Thanks all!

9

16.1 Legacy Series / Re: IDS Rule Descriptions

« on: March 11, 2016, 11:31:22 pm »

I run a mail server, so SMTP is a no-brainer for me, and I'm seeing lots of blocks there. In concert with my server-side block lists and filters, it has cut the spam down.

I really thought I'd see some other blocks, but only a couple potential DOS on NTP and that's about it.

10

16.1 Legacy Series / IDS Rule Descriptions

« on: March 10, 2016, 02:44:08 am »

Hi all,

Is there a better description of the IDS rules? All the info buttons go to here: http://doc.emergingthreats.net/bin/view/Main/EmergingFAQ

...and that's fine, great descriptions of the obvious ones, but there are many more rules available than the generic descriptions listed there.

Some are self-explanatory or subsets of the lists on that page, which is again, easy.  Others I just don't have a clue about.

11

16.1 Legacy Series / Re: How to use a wireless router behind OPNsense?

« on: March 04, 2016, 02:19:06 am »

I use DD-WRT, I think I can help you.  I assume you want wireless devices to behave like the wired devices in terms of network, if so this is call infrastructure mode on your wi-fi.

Firstly, you should let OPNsense handle all the DHCP and DNS. You're not going to use those functions on your wi-fi router.

In DD-WRT, under Basic Setup, you're going to set connection to Disable - you're not going to use the WAN port.

In network setup, you're going to give it a static IP outside your OPNsense DHCP range.  If you need help here, just let me know if you're using 192.168.1.x (default for OPNsense), 10.0.1.x or something else. In theory, you could give it DHCP, but a static IP makes it easy to get into the interface and remember.  For me OPNsense is 10.0.1.1 and my wifi is 10.0.1.2 - easy to remember.

In Wifi make sure the wireless mode is AP - Access Point aka that Infrastructure mode we're looking for.

You'll plug the wifi router into your switch with one of it's LAN ports and that ought to do it in a nutshell.

12

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: March 03, 2016, 01:48:16 am »

Here's my requested logs, but I'm still convinced I may have something going on with hardware - possibly my drive given the fsck errors I've had.

This weekend will probably be a config back up and reinstall with a replacement drive.

13

16.1 Legacy Series / Re: fsck and OpnSense

« on: March 02, 2016, 01:13:17 am »

That's interesting, I'll try that if it happens again. I know in this particular case, only going in single user mode was going to fix it. We had an extended power outage that the UPS didn't make it through.

14

16.1 Legacy Series / fsck and OpnSense

« on: March 01, 2016, 12:47:11 am »

I recently discovered that my filesystem didn't come up cleanly after a power outage and may be related to some issues I had.

I did the old school boot into single user mode and ran fsck - actually twice before everything got cleaned up.

Is there a built in with with OpnSense to do this?  I found this with pfSense:

touch /root/force_fsck would force a check/repair on reboot.  Didn't seem to affect OpnSense.  This might be something handy to have as a GUI option down the road?

15

16.1 Legacy Series / Re: 16.1.3: Warning when check updates

« on: March 01, 2016, 12:40:49 am »

I may bow out of troubleshoot this for a bit, I found after a recent power outage my system didn't come up cleanly and my recent "me too" might be related to that.  However, my first post predated that outage so I was seeing something. I have a question about what I found, but will post a new thread so as not to hijack this one.