121
20.7 Legacy Series / Re: NAT reflection issue in 20.7.b_181?
« on: June 23, 2020, 09:38:07 pm »
This is correct, it is the same on 20.1. If you want to use internal services based around a port forward you need to enable that.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
122
Intrusion Detection and Prevention / Re: Blocking port scans
« on: June 23, 2020, 09:32:51 pm »
What plugins? I had a few on pfsense and it was solid. Only reason I switched to opnsense was a more aggressive dev timeline. Last pfsense release had terrible performance issues and would randomly hang due to a bug that was put in a future patch. Opnsense has plugins, yes. Its the same base as pfsense (bsd) and as such can use ports.
123
Intrusion Detection and Prevention / Re: Blocking port scans
« on: June 16, 2020, 12:43:39 pm »
pfsense does indeed support port scan blocking, as does opnsense. The plugin you want for either firewall is called "suricata", and in the rulesets there is a category for scans 
that will detect port scans and block.
that will detect port scans and block.
124
18.7 Legacy Series / Re: Alias Overrides in Unbound stopped working
« on: October 05, 2018, 03:25:46 pm »
Would you share the solution just for closure? Thanks!
125
18.7 Legacy Series / Re: idea filebeat / metricbeat
« on: October 03, 2018, 06:01:20 pm »
Great idea. Much needed.
126
18.7 Legacy Series / Re: Alias Overrides in Unbound stopped working
« on: October 03, 2018, 06:00:06 pm »
I am also having issues using any DNS mappings after the update. I have internal sites that are now reachable from outside but not inside the network. I was just thinking, I have DNS over TLS setup per the tutorial and the upgrade may have wiped those settings, not sure. I will check when I get home.
127
Intrusion Detection and Prevention / Re: Remote Log server
« on: October 01, 2018, 08:32:56 pm »
I still have not been successful in sending syslogs to my server
128
18.7 Legacy Series / Re: The package manager is not responding
« on: September 20, 2018, 03:01:09 pm »
Also, make sure under System > General you have DNS servers such as 1.1.1.1 or 8.8.8.8
129
18.7 Legacy Series / Re: Trying to figuring out why website is getting blocked by web proxy...
« on: September 13, 2018, 05:39:28 pm »
Can you just whitelist it?
130
18.7 Legacy Series / Re: Port Forwarding with Plex not working.
« on: September 13, 2018, 05:36:01 pm »
The correct format is:
Interface: WAN
TCP/IP: IPv4
Protocol: TCP
Destination: This Firewall (This is a must)
Destination Port Range: The port you are hitting from outside the network
Redirect Target IP: IP of the host within the network
Redirect Target Port: Port you are accessing on the host within your network
Set it up like this under NAT > Port Forwarding
I would highly recommend using firewall aliases, an alias for your host and an alias for the port. Makes things much easier to read and understand down the road when you ask yourself why you needed the port forward. And of course a good description
Edit: Leave everything else default, I would delete your previous rule and add one like this
Interface: WAN
TCP/IP: IPv4
Protocol: TCP
Destination: This Firewall (This is a must)
Destination Port Range: The port you are hitting from outside the network
Redirect Target IP: IP of the host within the network
Redirect Target Port: Port you are accessing on the host within your network
Set it up like this under NAT > Port Forwarding
I would highly recommend using firewall aliases, an alias for your host and an alias for the port. Makes things much easier to read and understand down the road when you ask yourself why you needed the port forward. And of course a good description
Edit: Leave everything else default, I would delete your previous rule and add one like this
131
Tutorials and FAQs / Re: DNS OVER TLS ABSOLUTE BEST CONFIGURATION FOR STUBBY IPV4 AND/OR IPV6
« on: September 13, 2018, 04:52:02 pm »
Thanks! I only ask because I am using DNS over TLS for all ipv4 requests but I most likely am leaking ipv6 since I am tracking WAN and therefore using my ISP ipv6 dns I would assume.
132
Tutorials and FAQs / Re: DNS OVER TLS ABSOLUTE BEST CONFIGURATION FOR STUBBY
« on: September 12, 2018, 03:11:11 pm »
Would this work with IPV6 as well? Thank you so much for the tutorial, set this up last night and it works very well.
133
General Discussion / Re: OPNSense 19.1 Roadmap
« on: September 10, 2018, 05:03:50 pm »
Hey you guys do whatever! I was pretty surprised how much the pfsense team went after that. They really have no room to talk, every time I think about installing pfsense on a device I just remember the childish behavior of the devs and move right along.
134
General Discussion / Re: OPNSense 19.1 Roadmap
« on: September 07, 2018, 03:27:22 pm »
Am I correct in assuming the dev version mirrors the master branch on github?
135
Intrusion Detection and Prevention / Re: Remote Log server
« on: August 31, 2018, 02:10:19 pm »
I am running my instance in docker, Id assume this would only work on a non-docker host.