Messages

If you have a WiFi card installed in your Opnsense box please let us know what brand and model it is and its limitations you have encountered. Thanks!

Can you describe how to set that up? Not as simple as installing a package  :-\

[SURICATA Applayer Detect protocol only one direction]

I get a lot of these alerts:
SURICATA Applayer Detect protocol only one direction

Looking HERE it explains this:
Protocol detection only succeeded in one direction. For FTP and SMTP this is expected.
So if you have been using these protocols from your network then you will see these alerts.

What is some of the best ways to view the Firewall & Suricata logs?
Any good plugins for this? Which one do you use? What are the benefits of your choice?

Thanks.

[Step 4]

I am trying to create a transparent filtering bridge.
My setup is: Internet-->Opnsense Filtering Bridge-->Router-->Lan
I followed these instructions: https://docs.opnsense.org/manual/how-tos/transparent_bridge.html?

Step 4. "Now Add an IP address to the interface that you would like to use to manage the bridge. Go to Interfaces -> OPT1 enable the interface and fill-in the ip/netmask." I think these instructions are outdated here. There is nowhere to enter the IP. I assume I can do this by going to Interfaces -> LAN & Interfaces -> OPT1, change the IPV4 configuration type to static and then set the IP address which I did to 192.168.1.3.

My Bridge OPT1 is 192.168.1.3
My Router is 192.168.1.1

I cannot access the Opnsense firewall any longer, but the bridge works.
Any ideas?

[Services]

If you go to:
Services--> Intrusion Detection--> Schedule

It immediately defaults to a Edit Job option. I am unable to view the rest of the crons
or go to another cron to edit. The only way to edit or create another one would be to quickly
click on the edit icon or the + icon to add another cron before the screen goes back to the
Intrusion Detection settings page.

Under: Firewall-->Rules-->LAN tab:

Rule 1 for DNS
http://imgur.com/a/t5uiZ

Rule 2 Block outbound LAN DNS queries
http://imgur.com/a/4pCKQ

[For anyone looking for the answer to this, I found it:]

For anyone looking for the answer to this, I found it:
https://www.kirkg.us/posts/using-opendns-with-opnsense/
::)

Particularly:
Rule#3 (Restricting other DNS on the Lan and redirecting it use OPNsense configured DNS)
If someone is trying to get around your OpenDNS filtering, and has changed their computer's DNS settings to use a public DNS server they will get denied.

[Redirecting all DNS Requests to PFsense]

Redirecting all DNS Requests to PFsense is the name of the subject of the post in the url. It is pretty clear  to me it is about restricting all devices behind PFsense from using anything other than the prescribed DNS entries on the PFsense box. So in other words, Redirecting all DNS requests to PFsense. I just would like to see how it is done on OPNsense...

To restrict client DNS to only the specific servers configured on a firewall, a port forward may be used to capture all DNS requests sent to other servers.

I know there are instructions on how to do this on PFsense:
https://doc.pfsense.org/index.php/Redirecting_all_DNS_Requests_to_pfSense

But if someone has already done this on their Opnsense box, please post a screen capture of it or the exact configuration of yours as it is laid out in Opnsense.

Thanks!

[Bridge the interfaces to act like a switch]

Correct. I want to Bridge the interfaces to act like a switch.

My setup looks like this:

0 WAN, 1 LAN, 2 NIC, 3 NIC - I want to get NICs 2 & 3 on the same network as the LAN and lease out IPs on the same network: 192.168.1.2-192.168.1.255.

I have been using AbyssGuard for clients websites. It works really well for stopping spam among other threats. It requires some setup, not a simple plugin.

Donated 10€. More to come soon.  :-*

Looking for a little help here.

Thanks!

I have been looking for some good instructions on how to set up a bridge to have multiple NICs to act like a router (Bridge the interfaces to act like a switch, like on a SOHO router). The OPNsense guide doesn't really have much on setting one up, only a transparent filtering bridge.

I tried using these instructions for creating a bridge which is for PFSense. The process is nearly identical if not the same as OPNsense on how to Bridge Multiple Lan ports/NICs to act like a router.

My setup looks like this:
0 WAN, 1 LAN, 2 NIC, 3 NIC - I want to get NICs 2 & 3 on the same network as the LAN and lease out IPs on the same network: 192.168.1.2-192.168.1.255.

It seems I cannot get the bridge/NICs to function properly. I can get DHCP to work where other PCs are issued IP addresses but no WAN.

Are there any instructions for this specifically for OPNsense?