Messages

46

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: November 24, 2016, 02:42:13 am »

Which is easier said than done. Fetching the first time reveals categories in archives, this must be presented to the user immediately.

Easy workaround: The file could be fetched and mirrored from another server, especially somewhere fast.

You can even use OPNsense for that, download from script, move file to /usr/local/www/acls and point to https://127.0.0.1/acls/file

Hi franco even i uploaded the script on localserver still not downloading and applying on ACLS

47

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: November 23, 2016, 03:19:27 pm »

Any update regarding on this ACL problem, im having the same problem, i temporary disabled our proxy for now.thanks and looking for solution on this bug


Regards,
pr3p

48

General Discussion / Re: Gateway Monitor IP

« on: November 23, 2016, 10:54:37 am »

Gateway Monitors need static routes in order to make them use to the correct WAN link. That's why you can't use it to monitor two separate links. It's an inherent restriction in the way the monitoring was designed.


Cheers,
Franco

thanks franco for the info.

49

General Discussion / [SOLVED] Gateway Monitor IP

« on: November 23, 2016, 02:52:50 am »

Hi guys why its not possible to set on monitor ip with the same ip address like i want to use 208.67.220.220.

My setup: my wan dsl is dhcp so the gateway and public ip is dynamic.





Regards,
pr3p

50

General Discussion / Re: How to Set a Proxy Server automatic on all Clients

« on: November 22, 2016, 04:33:43 pm »

On Windows you should be able to do this via a group policy - then you would have it inside most apps (except some which bring their own trust store) and on Linux you would have to use some kind of an automation tool which will copy the certificates on the system and updates the ca store. On Linux you can set the environment variable HTTP_PROXY inside a login script so the applications will be aware of an proxy if you are not using a transparent proxy.

Thanks fabian, its working like a charm now, but some website with ssl has problem like on google drive/gmail i was not able to create folder when   SSL mode is enabled.

Anyway can you check also the ACL its not applying or downloading.

51

General Discussion / Re: Remote Access Control Lists in squid not working anymore

« on: November 22, 2016, 02:59:51 pm »

Hi,

Using OPNsense 16.7.8-amd64.

I am having a problem with the Remote access control lists not being fetched or updated. It used to work before and the last one succesfully fetched was on Oct 31 15:29 CET.

I use the list from ftp://ftp.ut-capitole.fr/pub/reseau/cache/squidguard_contrib/blacklists.tar.gz. I also added the example from the documentation (http://pgl.yoyo.org/adservers/serverlist.php?hostformat=nohtml) but this doesn't work either. After I press Download and Apply, it returns quickly (used to take a long time), and in /var/log/system.log I see:

Nov 18 17:43:49 OPNsense configd.py: [c7615826-515d-443d-8db3-66eec2936dc3] generate template OPNsense/Proxy
Nov 18 17:43:50 OPNsense configd.py: generate template container OPNsense/Proxy
Nov 18 17:43:52 OPNsense configd.py: [6056e2ce-722a-4966-9922-922434741223] download and reload proxy ACLs from remote locations
Nov 18 17:43:52 OPNsense configd.py: [6056e2ce-722a-4966-9922-922434741223] returned exit status 1

So it returns immediately without doing any work. I am able te retrieve both lists manually from the firewall using curl, so they are reachable.

Any ideas?

Thanks,
Ben

I have the same problem encountered regarding on downloading ACL's upon updating to the latest version OPNsense 16.7.8

But when i checked those and click apply even there is no category specified on the list its blocking.






https://forum.opnsense.org/index.php?topic=3967.0

52

General Discussion / Re: How to Set a Proxy Server automatic on all Clients

« on: November 22, 2016, 10:29:21 am »

Proxy Server:
The proxy server is working fine but  i got problem on downloading ACL's it seems doenst apply or download.

https://docs.opnsense.org/manual/how-tos/proxywebfilter.html


is it ok to set this way? on local cache setting. i want to maximize the server.


System Information:


Regards,
pr3p

53

General Discussion / Re: How to Set a Proxy Server automatic on all Clients

« on: November 22, 2016, 10:26:44 am »

Multi-WAN + Transparent Proxy doesn't currently work in FreeBSD.


Cheers,
Franco

thanks i setup transparent proxy and works fine, my problem is the ssl certificate it needs to install manually on client side.

54

General Discussion / How to Set a Proxy Server automatic on all Clients

« on: November 22, 2016, 07:27:37 am »

My 1st opnsense server with multiwan setup and DNS Resolver was stable and i enable proxy server,

Question: Guys it is possible to set the proxy server automatic to all clients without configuring browser to set the proxy server.



My Setup:
General Setting:



Forward Proxy:



I tried and test the proxy server with browser ( Firefox) and its working fine.


with authentication setting also works fine.



Regards,
James

55

General Discussion / Re: DNS Server not Working

« on: November 22, 2016, 03:22:21 am »

The gateway monitoring is set to disable on all dsl line / inteface.



The problem is the services for ntpd and unbound unstable


I checked the config on my other server with same config its working fine and stable onky this new setup and the other one has a problem.


Regards,
pr3p

56

General Discussion / Re: DNS Server not Working

« on: November 21, 2016, 12:58:14 pm »

Pinging any DNS Server is fine

Ping on 8.8.8.8


Ping on OpenDS 208.67.220.220



The problem was the services on ntp and Unbound DNS Resolver unstable sometimes the services stop and start (vice versa)


When i set the DNS Server on my windows pc i cant even ping google or any website its RTO but when on opnsense server tools i can ping any website and do traceroute and lookups also, one of my server is working fine same config. i tried also on fresh install problem still occur or same issue

57

General Discussion / Re: DNS Server not Working

« on: November 21, 2016, 02:42:03 am »

any help thanks 

58

General Discussion / Re: DNS Server not Working

« on: November 16, 2016, 11:23:41 am »

Hi franco i did the right config please refer on  the screenshot thanks.

Set System Setting ----> General DNS Server to opendns


-Disable DNS Forwarder


-Enabled DNS Resolver



and the config on Network time is set also



and the ntpd ( NTP clock sync) services still unstable.



i check logs on network time im getting this. the ntpd sometimes start sometimes stop.


Regards,
pr3p

59

General Discussion / DNS Server not Working

« on: November 16, 2016, 03:33:28 am »

I try to set the OPNSense as loca DNS Server but its not working or resolving, thanks and looking for your fast response.

Connection:
-All my WAN is DHCP connection

Setting on OPNsense
-system General -- > DNS Servers 208.67.222.222 and 208.67.220.220 (OpenDNS).


Services
-i disabled DNS forwarder and set DNS Resolver enable.

on DNS Resolver - general



on PC:.
Conduct test on my windows PC and set the DNS Server to




Another Problem.
When i refresh the dashboard also some services was stop/disabled and refresh again its ok then vice versa.




Note: on my other server its working fine with the same setup.

60

General Discussion / Re: P2P Blocking and Port Blocking - Torrents

« on: November 15, 2016, 01:58:45 am »

Any guide PLEASE @fabian, @franco @jschellevis thanks