Topics

31

19.1 Legacy Series / OPNsense 19.1 released update!

« on: January 31, 2019, 06:33:18 pm »

update to 19.1 release works without any problem!
-> Using Supermicro Denverton c3558!

Thx to franco!!! :-)
Great work and thx to the whole community!

:-)

32

Development and Code Review / DNS over TLS - Tutorial ?

« on: January 28, 2019, 09:51:17 am »

is there any working tutorial for unbound?
Do i need to explicit block the port 53 ?
Do i need a nat rule ?
How can i test if this is 100% working ?

i found several tutorials. what is the actually best working solution?

thx
regards
rené

P.S. sorry wrong Forum. should be in tutorials! :-)

33

19.1 Legacy Series / Update to 19.1 RC1 from 18.7.10_3 (11.2) Atom Denverton?

« on: January 21, 2019, 04:16:02 pm »

console:
opnsense-update show:

Code: [Select]

Nothing to do.
The following package files will be deleted:
        /var/cache/pkg/opnsense-devel-19.1.r_34-9b47390c38.txz
        /var/cache/pkg/opnsense-devel-19.1.r_34.txz
The cleanup will free 4 MiB
Deleting files: 100%
All done

prod gui update shows:

Code: [Select]

base 19.1.b 18.7.10
kernel 19.1.b 18.7.10 upgrade
dev gui update shows:

Code: [Select]

e2fsprogs-libuuid N/A 1.44.5 new
opnsense-devel N/A 19.1.r_34 new
syslog-ng N/A 3.19.1 new
but no rc1?

did i forget something? :-(

thx

34

Documentation and Translation / [SOLVED] Configure - DynDNS + Cloudflare + dnsomatic - Howto?

« on: January 06, 2019, 07:59:17 pm »

i couldn´t find any tutorial on wiki or anywhere else for my problem.:-(
so i have to ask the community and hope someone can help me! :-)
Even in the internet i found no working tutorial for my problem!

Mailserver (iredmail) works great with cloudflare! :-) sending and recieving.

But my provider only supports dynamic ip.
So i have to use dyndns for my mailserver in my local lan.

1. I created an dnsomatic account with these setting:

Email : "Cloudflare registered email"
API Token : "Global API Key from Cloudflare"
Hostname : dynamic
Domain : "mydomain.com"

Status: "Waiting for first update"....but nothing happens! :-(

2. I installed dyndns on opnsense:
Enable : "set"
Service type: dns-o-matic
Interface to monitor: wan
hostname: "mail.mydomain.com"
MX: "no entry"
wildcards: "not set"
verbose logging: "not set"
username: "my dnsomatic username"
password: "my dnsomatic password"
Description :"set"

Cached IP: "N/A"....but nothing happens! :-(

error message on opnsense (dyndns)

Code: [Select]

opnsense: /services_dyndns_edit.php: Dynamic DNS: (Error) Hostname does not exist or does not have dynamic DNS enabled
Did i miss something?
Can someone help me?

regards
rené

35

Documentation and Translation / Letsencrypt and Mailserver (IRedmail) ?

« on: January 05, 2019, 06:57:21 pm »

Hello community! :-)

I have two questions and hope someone can help me!

I host my own email server for one day and use iredmail for it. Sending mails is already working. But do not receive yet. But thats another problem.

Additionally, I have letsencrypt installed. this rings so far without errors.

now I use squid. if I'm not mistaken, squid can not be used with the letsencrypt certificate!

How can i use the letsencrypt certificate that opnsense generated for my mailserver?
Do I have to export it from opnsense via the trust menu or can I somehow automate this?

Can someone give me a detailed guide. Unfortunately I did not find anything for this theme.

best regards, rene

36

German - Deutsch / Chaos Computer Club - Live Event (Refreshing Memories)

« on: December 29, 2018, 04:59:06 pm »

kann es nur hier posten, da das Event teilweise nur in deutsch ist, aber sehr interessant, vorallem der Vortrag über "Amazon" und wie Amazon seine Daten speichert war super.

Hier ist der Link zum gesamten Event:
https://streaming.media.ccc.de/35c3

37

19.1 Legacy Series / Can´t upgrade to 19.1.r1!

« on: December 26, 2018, 07:43:28 pm »

It´s not possible to upgrade my current version to 19.1.r1-openssl-amd64.tar!
it´s loading and loading and loading... nothing else happens! 
Tried several servers...no luck at all!

38

General Discussion / Opnsense and QUIC?

« on: November 13, 2018, 10:58:08 pm »

https://en.m.wikipedia.org/wiki/QUIC

Will this be supported by opnsense in the future?

39

General Discussion / What are the best DNS Servers for privacy use?

« on: November 12, 2018, 01:41:36 pm »

There is 1.1.1.1 and 9.9.9.9 but are there any other Servers?
I read on the internet that opendns is not recommended because they are related to hijacking nxdomain records and serving up their ad page?

does anyone know safe and fast dns server?

Thx,
Regards
Rene

40

General Discussion / GeoIP Problem!

« on: November 09, 2018, 12:09:34 pm »

First, I created the alias. then I have selected the countries or continents that I want to block.
In the last step, I selected the alias as the source in the firewall rule of the wan interface. this then confirmed, 10 minutes waiting and tried.

how can it be that I still can load for example the angola homepage?

I then additionally entered as destination the alias in the wan firewall rules too. but it does not work either.

does this work only with IDS / IPS or am I doing something wrong?

Screenshots of the settings see appendix!

best regards
rené

41

18.7 Legacy Series / For one App or program - explicitly use the host DNS server?

« on: November 09, 2018, 08:20:23 am »

Is there a way for a particular app or program to explicitly use the host DNS server of my ISP and for all other programs the DNS servers (General / Settings / System) specified by me?

thx
regards rené

42

19.1 Legacy Series / opnsense-update -kr 18.7.7 update on dev not working?

« on: November 09, 2018, 08:09:28 am »

using

Code: [Select]

opnsense-update -kr 18.7.7 failed ?

opnsense-update -kr 18.7.6 is the current version ?

43

General Discussion / dropbox as client networkdrive is blocked on transparent proxy

« on: October 20, 2018, 04:00:25 pm »

hope someone can help me or just give me a good advise!

i use transparent squid proxy with cert for https and http.

i have a problem using dropbox as a networkdrive for uploading and syncing!

1. i opened up ports 17500, 17600 and 17603!
https://www.dropbox.com/en/help/desktop-web/configuring-firewall

2. i made a no rdr rule for traffic the goes directly to dropbox.com and http://dropbox.com by alias!
i even pinged the url to get the ip´s and and entered them to alias list too.
3. i added the ip of dropbox.com to "unrestricted ip adresses" under access control list.
4. i added "*.dropbox.com, .dropbox.com " to the whitelist.
5. i added ".dropbox.com" to the no ssl bump sites.

but i only get my networkdrive working for uploading and syncing by completely disable the nat rules for transparent proxy. "No RDR" doesn´t work and i found no solution in the forum.
Entering the dropbox by browser works but networkdrive can´t establishe any connection.
Firewall log says nothing!

can someone help me find the problem ?

regards
rené

44

General Discussion / Does anyone know why the hostnames aren´t shown in the arp table?

« on: October 15, 2018, 02:59:58 pm »

see my screenshot

45

Development and Code Review / Updating 8d08b67d2..b9ba4f60e -> error: Your local changes to the following file

« on: October 07, 2018, 08:44:06 pm »

Code: [Select]

root@OPNsense:~ # opnsense-code core
Fetching origin
Updating 8d08b67d2..b9ba4f60e
error: Your local changes to the following files would be overwritten by merge:
        plist
Please commit your changes or stash them before you merge.
Aborting
what i already did:

1. delete core and plugins folder from my local storage and my github repos (core and plugins)
2. refork to my git and clone to my harddisk again!

but i get the same error!

what can i do ?
thx
regards rené