Messages

1921

16.7 Legacy Series / Re: stuck! Always reboot system after installation finish, please help me

« on: October 27, 2016, 10:15:27 am »

Hi Littleboy,

Some more info would help. What hardware have you tried? Did you try a USB install?

The forum is only for peer support. If you are on a commercial deadline, you can contact Deciso for paid support.

Bart...

1922

16.7 Legacy Series / Re: VPN connection

« on: October 25, 2016, 10:09:01 pm »

Hi Philipp,

PPTP has security issues, as I'm sure you know.

System, firmware, updates, plugins - install PPTP and/or L2TP plugins and configure through the VPN tab.

Bart...

1923

General Discussion / Re: OPNSENSE ROADWARRIOR

« on: October 20, 2016, 12:10:20 am »

I have not enabled the one-time password, since there are already two factors - the user credentials plus the client certificate.

Bart...

1924

General Discussion / Re: OPNSENSE ROADWARRIOR

« on: October 18, 2016, 11:50:31 am »

Try the recipe without 2FA to see that the basics work https://www.kirkg.us/posts/building-an-openvpn-server-with-opnsense/

Bart...

1925

General Discussion / Re: Simple Easy content filter, is it possible?

« on: October 16, 2016, 11:03:37 pm »

Hi Paulo,

If you have a list of sites you want to block, you can put them into an alias and make that the subject of a firewall rule. https://docs.opnsense.org/manual/aliases.html

Bart...

1926

General Discussion / Re: High load

« on: October 16, 2016, 07:34:06 pm »

I'm seeing a similar result on a single core Celeron D 3GHz with load between 0.7 and 1.2.

You could try disabling netflow if you are seeing dropped packets or high latency on the web interface.

Bart...

1927

General Discussion / Re: High load

« on: October 16, 2016, 02:09:59 pm »

Hard to say if it is hardware without details ;-)

Open a shell and run top -a when CPU shoots up again

Bart...

1928

General Discussion / Re: No ping on WAN side

« on: October 06, 2016, 08:53:25 pm »

Can you ping from OPNsense to 192.168.1.185?

1929

General Discussion / Re: No ping on WAN side

« on: October 06, 2016, 07:25:14 pm »

Are you allowing private networks on the WAN interface?

Bart...

1930

General Discussion / Re: IPsec: Mobile Clients

« on: October 02, 2016, 04:24:48 pm »

Did you read the documentation? https://docs.opnsense.org/manual/how-tos/ipsec-road.html

Bart...

1931

16.7 Legacy Series / Re: Domain names behind OPNsense

« on: October 02, 2016, 10:14:36 am »

Can you post a (redacted) screenshot of your Host Overrides from Services > DNS Forwarder please?

Bart...

1932

General Discussion / Re: OPNSENSE ROADWARRIOR

« on: September 30, 2016, 08:21:33 am »

Which platform/software are you using on the clients?

Bart...

1933

16.7 Legacy Series / Re: Port forwarding and WAN IP problem

« on: September 26, 2016, 08:27:49 am »

You are the victim of CGN (https://en.wikipedia.org/wiki/Carrier-grade_NAT)

Complain vocally to your ISP

Bart...

1934

16.7 Legacy Series / Re: Problems getting out to the internet

« on: September 25, 2016, 02:39:43 pm »

Do you allow private networks on your OPNsense WAN interface?

Does the VMB router have a static route for the internal LAN, or are you using outbound NAT?

Bart...

1935

16.7 Legacy Series / Re: Hostname based port forwarding?

« on: September 24, 2016, 10:42:45 am »

If you are going to use a reverse proxy, you may want to consider encryption for something called 'remote desktop'

SNI is your friend: https://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

Bart...