Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - tillsense

#1
Patch > firewall i.o. and also for suricata rules..
#2
where should that be? everything is still there at https://3mdeb.com/open-source-firmware/pcengines/

cheers
till
#3
Der Spaß ist vorbei!! War ein Spaß. Viel Schaffenskraft! Schön zu lesen, dass es dem Projekt gut geht.

cheers
till
#4
Hi all,

would you like to test 14? i'm very interested to see how it looks here!

https://download.freebsd.org/releases/ISO-IMAGES/14.0/FreeBSD-14.0-RELEASE-amd64-disc1.iso

cheers
till

ps.: ..and with the new default CPU from pve8 > x86-64-v2-AES
#5
Quote from: doktornotor on November 11, 2023, 07:46:12 AM
So, frankly - how many of those endless exploits and 0days have been fixed in upstream and/or in FreeBSD ports? I'd say the future is not exactly bright for Squid.

Quote
The Squid Team have been helpful and supportive during the process of reporting these issues. However, they are effectively understaffed, and simply do not have the resources to fix the discovered issues.

For everyone here, instead of complaining about QA, I'd seriously reconsider your use case for Squid proxy.

Hi,
i can only agree 100%!

cheers
till
#6
Hi,

i can confirm that too. there seems to be more broken here?

cheers
till


#7
Hi franco,

base has been reinstalled and the labels are back. thanks for the quick response (and solved :) but i was away..thanks!

cheers
till
#8
Hi,
reproducible with 23.7.8.

cheers
till
#9
Hi,
the label is no longer displayed in the Firewall live view.

cheers
tillsense
#10
hi all,

that's interesting. the problem is a strict user.js (firefox). ok if here all times would be utc one could say browser/settings but so i think here clearly unbound module queries differently!?

cheers
till
#11
Hi all,

the dashboard, firewall live rules and logs all have the correct time as stored in the system as time zone. Only the Unbound reporting shows UTC in live logs and its own dashboard? And why only 24h or 1000 entries? Only one OPNsense update needs about 30 requests (entries) Why that? ( 23.7.6)

cheers
till
#12
hi all,

if you have a virtualization or a small standalone device with wireless hardware available/left over, try https://raspap.com/ (debian-based)

cheers
till
#14
hi all,

ok... was probably too far. back to productive and thus back from suricata 7 to 6 everything is back in order.

cheers
till
#15
hi all,

suricata stops unbound after some seconds. no more dns resolution is possible. in the overview there is a "drop" as action. in the log of unbound error: 

1 error: SSL_handshake syscall: Broken pipe

2 error: outgoing tcp: bind: Can't assign requested address

workaround is to stop suricata

configured DNS over TLS (test with 23.7.r_44-amd64)

do I have to reconfigure anything?

cheers
till