Messages

106

24.1 Legacy Series / Re: Hoping to move over to OPNSense from Untangle / Arista NGFW

« on: March 20, 2024, 07:24:08 am »

I've been running through the free version of Zenarmor for the last few days, and it will do some of what you need, but you will almost definitely need to pay to get everything. That said, there might be other ways to do what you want and hopefully other people will answer.

One thing I know it will not block in the free version is streaming media sources like Youtube. Ad blocking is in free and works OK, still lets some through. Porn and some drugs categories can be blocked, and a few other of the "severe" levels of sites Mid level is where the pay starts to come in.

In theory, you can install e2guardian to get a lot of the same blocking features too, I ran this on my pfsense firewall until I broke it. Decided that since I broke things, I might as well give a different firewall a try and see what I can learn.

Did you ever had a running setup of e2g on OPN? Config is so weird

107

General Discussion / Re: Policy Hierarchy in OPNsense?

« on: March 20, 2024, 07:22:12 am »

If you create aliases for IPs or MAC addresses you can achieve this, yes. It only "costs" a couple of more clicks compared to commercial solutions

108

German - Deutsch / Re: Nach Update auf 24.1.3_1 funktioniert SIP nicht mehr

« on: March 19, 2024, 12:06:53 pm »

Hast du Lust IPS noch mal zu aktivieren und dann das Log und die Alerts seit dem Start und Anrufsversuch posten?  Es gibt unterschiedliche Meldungen, teilweise hat man hier auch schon gelesen dass es mit 24.1.3_1 gefixt ist, irgendwie stochern wir da alle noch im Dunkeln, was genau mit Suri 7 da Probleme macht.

109

23.7 Legacy Series / Re: Automatically generated rules - is the reason I stopped migrating to OPNSense

« on: March 18, 2024, 08:59:54 pm »

Hi Team,

Adding my problems to here, that every opnsense action such as route , interface or rules edits gives gui/ping loss and suspecting that automatically rules are plays to deny the traffic. Therefore post pfctl -d cmd execute that allow to another changes.

Is any one help here that why every action on opnsense trigger pf enables and loss the gui/pings drops. Is there way to delete the automatically rules from opnsense.

I'm using opnsense as vm on kvm.

Thanks,
Athisesan

Sounds you are connected via WAN and everytime you change rules you get kicked out cause of missing accept rule and need to pfctl again.

100% your setup, not a general issue

110

Hardware and Performance / Re: Wireguard performance 100% faster on pfSense than OPNsense

« on: March 18, 2024, 08:02:25 pm »

I did not follow the whole thread, but did you compare pfsense and OPN on KVM without Wireguard?

111

24.1 Legacy Series / Re: Zabbix Proxy Version??

« on: March 18, 2024, 11:00:55 am »

You need to check which version you have installed via System : Firmware : Plugins.
5.4 was removed but there should also be a version 6.4 available, but with a different plugin name

112

German - Deutsch / Re: ICAP-Fehler beim Laden der Seiten über Squid-Proxy

« on: March 18, 2024, 10:58:44 am »

Segmentation fault ist ein Bug von Squid, bist du auf der letzten Version?

113

24.1 Legacy Series / Re: Hairpin NAT help

« on: March 18, 2024, 10:57:23 am »

You need to check if DNS lookup works, if yes, start packet capture on port 25 in LAN, you should see the whole flow from the client and to the server with LAN IP of firewall. If stuck, just paste the capture here

114

24.1 Legacy Series / Re: Rc scripts not in expected directory.

« on: March 18, 2024, 10:54:33 am »

Yes, there are plenty of plugins out there with manual added rc scripts like maltrail:
https://github.com/opnsense/plugins/tree/master/security/maltrail/src/etc/rc.d

115

Development and Code Review / Re: make plugins - how to?

« on: March 18, 2024, 09:29:02 am »

You can also go into your plugins directory like /usr/plugins/devel/speedtest and type "make upgrade".
This would install it locally (if you do this on a OPNsense instance) or type "make package" to build a pkg

I was able to create my own package using make package, and it installs and works in OPNsense as well (as expected).

Is there any way to convert this package and add it to a custom repository?
Something like what is available at https://github.com/mimugmail/opn-repo or at https://www.routerperformance.net/opnsense-repo/

I would like to include my created package above (os-blocky-xxx.pkg) into a custom repo that can then be installed through OPNsense Firmware Plugin GUI.

What I am looking is guidance as to how to create a custom repository and adding an existing .pkg file to it?
Thanks for your help...

Great, we can also add to the community repo if you like

116

Development and Code Review / Re: Wazuh Agent integration - call for tests

« on: March 18, 2024, 09:26:41 am »

You need to be on a later version and search for the plugin. Which version do you have installed?

117

General Discussion / Re: Create peer for wireguard via API

« on: March 11, 2024, 10:36:49 pm »

https://forum.opnsense.org/index.php?topic=30367.0

118

General Discussion / Re: Create peer for wireguard via API

« on: March 11, 2024, 10:35:07 pm »

https://forum.opnsense.org/index.php?topic=33177.0

119

Intrusion Detection and Prevention / Re: Suricata blocking Microsoft Teams

« on: March 09, 2024, 09:39:33 am »

After upgrading to 24.1.2_1 Suricata has begun blocking some MS Teams traffic, is there a way, without turning IPS/IDS off to add an allow rule for their traffic?

Any assistance is greatly appreciated..

Also witj 24.1.3?

120

General Discussion / Re: Monit settings help

« on: March 09, 2024, 09:38:52 am »

Thx for sharing