Messages

16

22.7 Production Series / Anti DDOS - Firewall Advanced Settings

« on: August 07, 2022, 06:41:57 pm »

1. What is the difference between the 3 setting options of Anti DDOS?
2. Can someone explain when it makes sense to activate Anti DDOS or what should be considered when activating it?
3. Is there a documentary about it?
4. Is there a log?

thx

17

22.1 Legacy Series / Re: os-ddclient

« on: August 07, 2022, 10:54:19 am »

Thanks for keeping dyndns in play for a little longer.

I just tried to switch to os-ddclient for Cloudflare using API token unsuccessfully
Tried adding this https://github.com/opnsense/plugins/issues/2842

Still couldn't get it to work.
Also the GUI config is pretty hard (impossible) to work out what you should put where.

Looking forward to os-ddclient catching up.

use the Global api key >> this works

these are the setting you have to make:

##
## CloudFlare (www.cloudflare.com)
##
#protocol=cloudflare,        \
#zone=domain.tld,            \
#ttl=1,                      \
#login=your-login-email,     \ # Only needed if you are using your global API key.
#password=APIKey             \ # This is either your global API key, or an API token. If you are using an API token, it must have the permissions "Zone - DNS - Edit" and "Zone - Zone - Read". The Zone resources must be "Include - All zones".
#domain.tld,my.domain.tld

18

22.1 Legacy Series / Re: os-ddclient

« on: August 07, 2022, 10:53:04 am »

Late to the party, sorry.

Could not find a way to properly set the IONOS API update URL. It just needs to call that custom URL, nothing else. ( https://www.ionos.de/hilfe/domains/ip-adresse-konfigurieren/dynamisches-dns-ddns-einrichten-bei-company-name/ )

Also, even if it worked, no way to update it to a GW group anymore?

I am also using IONOS API.  Since it is as simple as calling a custom URL, I just created a custom cron job to do it. Need not bother about the os-ddclient.

Using All-Inkl, however IONOS is straight forward with os-ddclient. Set to custom, set to DynDns2, post URL as mentioned for FritzBox, leave everything empty. Done.

https://www.ionos.de/hilfe/domains/ip-adresse-konfigurieren/dynamisches-dns-ddns-einrichten-bei-company-name/

use the Global API Key >> this works

19

Zenarmor (Sensei) / Blocked message from zenarmor should also be seen in opnsense firewall live log

« on: August 07, 2022, 09:42:13 am »

would be great if blocked messages are also shown in the opnsense firewall live log labeled with "zenarmor" or something like that.

20

Zenarmor (Sensei) / custom Message instead of "PR_END_OF_FILE_ERROR"

« on: August 07, 2022, 09:12:43 am »

is it possible to make a user-defined output message instead of the "PR_END_OF_FILE_ERROR", as shown for example. "This page has been blocked by the admin" ??

21

German - Deutsch / Re: Firewall live Ansicht mit GEOIP Verknüpfung?

« on: August 06, 2022, 09:13:13 am »

Im Endeffekt wäre es das. Ein wenig modifiziert und man hätte gleich in der Detailansicht der Block Regel das Land und diverse andere Informationen.

Code: [Select]

<?php

function ip_info($ip = NULL, $purpose = "location", $deep_detect = TRUE) {
    $output = NULL;
    if (filter_var($ip, FILTER_VALIDATE_IP) === FALSE) {
        $ip = $_SERVER["REMOTE_ADDR"];
        if ($deep_detect) {
            if (filter_var(@$_SERVER[&#39;HTTP_X_FORWARDED_FOR&#39;], FILTER_VALIDATE_IP))
                $ip = $_SERVER[&#39;HTTP_X_FORWARDED_FOR&#39;];
            if (filter_var(@$_SERVER[&#39;HTTP_CLIENT_IP&#39;], FILTER_VALIDATE_IP))
                $ip = $_SERVER[&#39;HTTP_CLIENT_IP&#39;];
        }
    }
    $purpose    = str_replace(array("name", "\n", "\t", " ", "-", "_"), NULL, strtolower(trim($purpose)));
    $support    = array("country", "countrycode", "state", "region", "city", "location", "address");
    $continents = array(
        "AF" => "Africa",
        "AN" => "Antarctica",
        "AS" => "Asia",
        "EU" => "Europe",
        "OC" => "Australia (Oceania)",
        "NA" => "North America",
        "SA" => "South America"
    );
    if (filter_var($ip, FILTER_VALIDATE_IP) && in_array($purpose, $support)) {
        $ipdat = @json_decode(file_get_contents("http://www.geoplugin.net/json.gp?ip=" . $ip));
        if (@strlen(trim($ipdat->geoplugin_countryCode)) == 2) {
            switch ($purpose) {
                case "location":
                    $output = array(
                        "city"           => @$ipdat->geoplugin_city,
                        "state"          => @$ipdat->geoplugin_regionName,
                        "country"        => @$ipdat->geoplugin_countryName,
                        "country_code"   => @$ipdat->geoplugin_countryCode,
                        "continent"      => @$continents[strtoupper($ipdat->geoplugin_continentCode)],
                        "continent_code" => @$ipdat->geoplugin_continentCode
                    );
                    break;
                case "address":
                    $address = array($ipdat->geoplugin_countryName);
                    if (@strlen($ipdat->geoplugin_regionName) >= 1)
                        $address[] = $ipdat->geoplugin_regionName;
                    if (@strlen($ipdat->geoplugin_city) >= 1)
                        $address[] = $ipdat->geoplugin_city;
                    $output = implode(", ", array_reverse($address));
                    break;
                case "city":
                    $output = @$ipdat->geoplugin_city;
                    break;
                case "state":
                    $output = @$ipdat->geoplugin_regionName;
                    break;
                case "region":
                    $output = @$ipdat->geoplugin_regionName;
                    break;
                case "country":
                    $output = @$ipdat->geoplugin_countryName;
                    break;
                case "countrycode":
                    $output = @$ipdat->geoplugin_countryCode;
                    break;
            }
        }
    }
    return $output;
}

?>

22

German - Deutsch / Firewall live Ansicht mit GEOIP Verknüpfung?

« on: February 23, 2022, 04:10:04 pm »

Von Vorteil wäre, wenn das Firewall-Livelog (Detailansicht) die IP mit einem GEOIP-Host verknüpfen könnte.
Was denken ihr?

Ich habe eine einfache Lösung per PHP gefunden.
https://www.a-coding-project.de/ratgeber/php/geolocation

Vielleicht gibts ja auch was besseres oder es ist sowieso nicht gewünscht bzw erwünscht, dann vergesst es.
Ist nur ein Verbesserungsvorschlag von mir bzw eine Idee.

Danke

23

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 08:22:31 pm »

Any solution for Cloudflare users? I thought I read something about custom settings but I don't see anywhere to do that.

There will be Cloudflare support!

24

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 02:00:13 pm »

ddclient already has a home. I'm happy to take OS-DDNS under our umbrella as it's php.

great 

There already is a custom field, however it will not work for some providers as they do not follow the standard format.

perfect 

25

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 10:58:30 am »

Marjohn56 and franco made a new home for ddclient. so as I understand it, the revised version of the ddclient supports much more dns services.

26

22.1 Legacy Series / Re: os-ddclient

« on: January 29, 2022, 12:48:24 am »

The developer page describes that it supports cloudflare and a lot of other DNS Services.
https://github.com/ddclient/ddclient

27

German - Deutsch / Re: ddclient mit ddnss.de nutzen

« on: January 28, 2022, 12:15:34 pm »

Also ich habe es nun zum Laufen bekommen.
Folgende Einstellungen musste ich vornehmen:
- In dem Reiter "Accounts" habe ich nichts eingetragen
- Im Reiter "General Settings" musste ich bei Check ip method "freedns" auswählen, "dyndns" hat bei mir nicht funktioniert, hatte immer folgende Fehlermeldung im Log stehen:

Code: [Select]

WARNING: cannot connect to checkip.dyndns.org:80 socket: IO::Socket::INET: Bad hostname 'checkip.dyndns.org'
Die config-Datei sieht dann wie folgt aus:

Code: [Select]

use=web, web=https://freedns.afraid.org/dynamic/check.php

ssl=yes
protocol=dyndns2
server=ddnss.de
login=<dein login>
password=<deinpasswort>
<deinedomaint>.ddnss.org


Ich würde mal abwarten mit dem umstellen. Denn anscheinend ist das letzte Wort noch nicht gesprochen. Vor allem wäre die Umstellung sowieso erst in 6 Monaten. Bis dahin kann noch einiges passieren. Siehe Link
https://forum.opnsense.org/index.php?topic=26446.0

28

22.1 Legacy Series / 22.1 upgrade

« on: January 27, 2022, 09:15:26 pm »

Everything went fine. thx to the whole opnsense team! 

29

21.7 Legacy Series / Re: 21.7.3. - high CPU and MEM usage

« on: September 23, 2021, 11:26:32 am »

after reboot cpu and mem is normal again

30

German - Deutsch / Router selber bauen | Internet SCHNELLER und Ping BESSER! (OPNsense + Firewall)

« on: August 09, 2021, 06:18:28 am »

https://www.youtube.com/watch?v=TPHwomummP8