Messages

https://github.com/opnsense/core/issues/4952

Ok. Thank you

Here is a few link with use cases:

https://campus.barracuda.com/product/cloudgenfirewall/doc/79462985/how-to-create-wildcard-network-objects/

https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/networksetup/wildcard_ip_addresses_about.html

I need to create a firewall rules that gives access to IP's which ends at e.g. .64

Using another firewall provider we could do this by using wildcard netmasks as this 0.0.0.64/0.0.0.252

Can this be done some how with OPNsense?


We need to do the same as this other Cisco example:
Match all 192.168.x.1 addresses:
permit 192.168.0.1 0.0.255.0

Just installed Wireguard.

I have Firewall -> Rules -> Wireguard (had to edit another rule and hit save for Wireguard to show up)

Some guides say that I have to assign wg0 to a new interface - In which use cases would I need to assign the wg0 interface?

Have anyone tried opnsense at Innovision hardware?

So far I have used Qotom hardware for years without problems but they do not provide rack mount systems.

Found this one and would like to know if anyone have trid it:
https://a.aliexpress.com/_mPGe1Ll

How will be the communication between the centralized administration opnsense and the other opnsenses when I place a centralized device to internet?
Is there e.g. a cyclic polling of configuration possible or do I need a direct reachability from the central device to satelites or can I use a VPN wich is started from the satelite to the central instance?

I need that information too.
Can central administration be done without a public ip at the clients?

We are managing more than 50+ OPNsense here, all around the world ;)

So we have developped:
  - a central management solution (cloud)
  - a plugin (with some API extensions)
  - a Zabbix template

So with this, OPNSense is provisionned from our CMS:
  - custom settings (hostname, dns, plugins...)
  - authentication
  - firewall rules
  - autossh service to an "hub" for dynamic IP/restricted WAN, and tunneling for GUI access
  - full supervision by Zabbix (including running services)
  - configuration/status (DHCP leases) access directly from our CMS
  - remote upgrade, with scheduling
  - alerts by email / slack : gateway status, services...
  - daily XML backuping

This solution is currently oriented for our usage, but we can easily extend it.
You can contact us if you are interested!

I have sent you a PM

Hi,

I have had a few new sites where I need to set MSS=1400 om LAN interface to get traffic through IPSEC tunnels.
Is that a "normal" problem?

If i look in the FreeRadius log "Services: FreeRADIUS: Log File" all usernames/passwords I have tested using System/Access/Tester is listed in clear text.

Is there any GUI changes related to NAT over IPSEC or should I still use Manual SPD setting i phase 2?

Hi,

When I go to System -> Gateways -> Single I see a packet loss of 0.0% but when I go to Reporting -> Health -> Quality I see a loss of 100-200m.

How should I read those data?

Yes. Only email from ebay have this problem so far.

[data=0/1 commands=5/6]

Have setup Postfix with rspamd, redis and clamav.

When receiving emails from ebay (only so far) I get the email but ebay resend it again many times.

In the log I get this:
postfix/smtpd[82980]: disconnect from mxphxpool2041.ebay.com[66.211.185.204] ehlo=2 starttls=1 mail=1 rcpt=1 data=0/1 commands=5/6

Is it a timeout problem in some of the components or how do I fix it?

done