Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - mrpsycho

#31
Quote from: drivera on October 28, 2018, 05:35:07 AM
Any ETA on 18.7.7?

i can say that dev version works fine in 18.7.9.

and main version still doesn't support groups.


DNS problem i semi-solved only with overriding option on "Unbound DNS"
#32
18.7 Legacy Series / Re: Backup to Google Drive
December 17, 2018, 02:56:42 PM
where you have questions?



as for me, i have problems with G Suite account... with personal account works great!
#33
18.7 Legacy Series / Re: ipsec site to site
October 08, 2018, 01:02:21 PM
Julissa,

you have to set site A as responder, and side B as initiator.
#34
did it.
thanks for suggestion!
#35
Hello,

i'm migrating to  OPNsense from pfsense... and found great module - os-openconnect.
on pf i was using plain openconnect from pkgs.

and it was not very comfortable to use, cause i had to manage NAT rules manually (i wrote a simple script, but it needs to be updated sometimes)
so.

problem is - there is no way to add authgroup, certificate and key in web GUI on opnsense.
So, my workaround - is to edit /usr/local/etc/rc.d/opnsense-openconnect  and add needed keys to the start function:

openconnect_start()
{
        echo "starting openconnect"
          echo ${openconnect_flags}
/usr/local/sbin/openconnect --authgroup SSLVPNClient -c /path/to/crt.cer -k /path/to/crt.key ${openconnect_flags} < /usr/local/etc/openconnect.secret 2>&1 > /dev/null
        sleep 5
ifconfig tun30000 name ocvpn0
ifconfig ocvpn0 group ocvpn
return 0
}


and it works fine.
Where can i create Feature Request for it?


And there is a bug - some servers asks for username with case sensitive requrements. Web GUI doesn't allow it. So i had to remove it in config and put it on rc.d script too