Messages

1

Tutorials and FAQs / Re: How to configure VLANS.

« on: November 16, 2021, 09:44:03 pm »

It's better if you have a separate port in the OPNsense. Assign it, enable it, name it TRUNK and DO NOT assign an IP address to it. After this assign your VLANs to the TRUNK port as parent and connect it to the switch. The try to untag your VLANs to specific ports. Avoid to mix tagged and untagged traffic on the same port in BSD, especially if you use netmap(Sensei/Zenarmor)...

2

Hardware and Performance / Re: Dell Optiplex, nics in both PCIe slots?

« on: August 22, 2021, 08:38:53 am »

Second hand DL360p G8 or PowerEdge R620 are obvious choice here if the noise is not a big concern. DL360p often comes with 2x10G SFP+, R620 usually have only 4x1G...

3

German - Deutsch / Re: Qemu Guest Agent

« on: August 08, 2021, 08:32:18 am »

Thanks for the great work Frank! Now I can use OPNsense in Proxmox with proper memory management. (ballooning)

4

General Discussion / Re: Mon0wall 18.1 to OPNSense 27.1

« on: August 06, 2021, 09:48:04 pm »

This doesn't have to be boring


Cheers,
Franco

May be it's best time for optimization. Aliases will help a lot. You can also consider migrate some services from be accessible via port forwarding to VPN only these days. Also check the Sensei addon. It turns OPNsense to the best NGFW for the money, that Internet knows IMHO.

5

General Discussion / LAN with client isolation

« on: June 15, 2021, 01:50:26 pm »

I need to set a VLAN on that clients can't see each other. Something like with 255.255.255.255 subnet mask from PPPoE ISP. Is there a way to manage it via DHCP server?

6

Zenarmor (Sensei) / Re: Trusting Sensei

« on: June 02, 2021, 09:11:09 pm »

I use Sensei from the beginning (September 2018) and can't say a single bad word for anyone from the Sunnyvalley team. Worked mostly with Murat and Matt. If I don't trust them, who to trust then? Cisco? Fortinet? Sophos? Zyxel?
This is the best NGFW solution for me. Worldwide. Period.

7

Zenarmor (Sensei) / Re: Whitelist problem

« on: June 02, 2021, 08:48:19 pm »

Solved by Matt via mail.
Last command was:

Code: [Select]

echo -n "alter table custom_web_category_sites add is_global INTEGER default 0"| /usr/local/bin/sqlite3 /usr/local/sensei/userdefined/config/settings.dbIf anyone is in the same situation.

8

Hardware and Performance / Re: Hardware Recommendations for 1Gbps

« on: June 02, 2021, 06:16:36 pm »

You need at least 3GHz Haswell or newer Intel Core i CPU. At least 8GB RAM depending on simultaneous device count. SSD or 10-15K rpm HDD is a must. The best bang for the buck is a brand SFF PC with 4 port pcie Intel NIC. But it's 2U high...

9

Zenarmor (Sensei) / Re: Whitelist problem

« on: June 02, 2021, 06:08:39 pm »

Full report sent.

10

Zenarmor (Sensei) / Re: Whitelist problem

« on: June 02, 2021, 06:49:06 am »

Hi sy,

There is a improvement: it not returns error, but domains are still not shown in the list:

11

Zenarmor (Sensei) / Re: Reinstall Sensei after Elasticsearch crash

« on: May 30, 2021, 06:11:26 pm »

I resolve it immediately when happen. Always checking after update. Otherwise the kids go porn and TikTok

12

Zenarmor (Sensei) / Whitelist problem

« on: May 30, 2021, 04:39:22 pm »

With this version comes tabbed White/Black lists.
When I'm trying to add domain it returns:

"1220 - SQLite3..prepare(). Unable to prepare statement. 1, table custom_web_category_sites has no column named category_type (errno=2)"

with no success to add the domain.

13

Development and Code Review / Re: What do you think of a pure black template gui for opnsense?

« on: May 30, 2021, 03:42:14 pm »

Rebellion is the best for my eyes by far. Just have glithes after update sometimes...

14

Tutorials and FAQs / Re: CONFIGURE HARWARE TO INSTALL OPNsense

« on: May 30, 2021, 01:10:26 pm »

That way you will make double NAT... There is an option to use OPNsense with Sensei as transparent L2 filter, but you will need at least 3 ports, 2 of the NICs must be bridge devices having the same kernel device (e.g. all em, igb etc.) and same number of RX/TX queues. Why you just not consider replacing ER-6P with OPNsense?

15

Zenarmor (Sensei) / Reinstall Sensei after Elasticsearch crash

« on: May 30, 2021, 12:59:19 pm »

I guess many of us have Elasticsearch stalled after update Sensei.
At least I had it on some of routers, managed by me. Reset reporting or reinstall Sensei not helping.
It is a pain in the @ss if we have to reinstall the entire OPNsense.
I found a simple solution in other place and want to share it, so we have it in the forums here:

1. Backup Sensei configuration, white and black lists first.
2. Connect to the router via SSH or local console and press 8 for Shell.
3. Run this in the console:

Code: [Select]

pkg remove elasticsearch5

cd /usr/local/etc

rm -rf elasticsearch
4. When you click on some Sensei subnemu, it will demand install, but this time will work
5. Restore you white and blacklists.
6. Buy me a beer

If there a simpler way post it here.