Messages

16

General Discussion / Re: Unbound for DoT Upstream or DNS-Crypt Proxy?

« on: March 22, 2021, 06:03:31 pm »

So do most of you guys just use Unbound to upstream to DoT servers with DNSSEC or use DNSCrypt?

The former and never had problems so far... but I started to study if/how DNSCrypt can be used to add an additional layer of security: do you know any online documentation for beginners on this?

dont think you can do anything else with it
it just does DNSSEC, Ad Blocking and DoH.

17

General Discussion / Unbound for DoT Upstream or DNS-Crypt Proxy?

« on: March 21, 2021, 11:29:38 pm »

hi all
I been using Unbound as my network DNS server and upstream to DNS Crypt Proxy.
However I constantly get DNS not resolving on browsers. This does not happen if I use Unbound to upstream to Quad9 instead.

So do most of you guys just use Unbound to upstream to DoT servers with DNSSEC or use DNSCrypt?

18

Virtual private networks / Re: OpenVPN Client Split Tunnel

« on: March 02, 2021, 11:20:02 pm »

close this topic please

19

Virtual private networks / Re: Wireguard & Mullvad - I'm lost.....

« on: March 02, 2021, 11:19:43 pm »

solved it
had to remove the 1.2.3.4 from allowed networks and then put my client IP in NAT rule

20

Virtual private networks / Re: Wireguard & Mullvad - I'm lost.....

« on: March 02, 2021, 09:53:42 pm »

having issues with this too
I got it setup using the 1.2.3.4 method for the GW.
The GW is green with health check against 1.1.1.1.
I can see packets from LAN going to WG Interface but no return traffic.
My client looses all internet access.
My FW rule is as below:

21

Virtual private networks / OpenVPN Client Split Tunnel

« on: March 02, 2021, 07:01:05 pm »

Hi all
Is there any guides on setting up a OpenVPN Client on OPNSense with Mullvad and routing 2 clients only through it?
I use Mullvad VPN and gave up on wireguard as it just did not work.

Thanks

22

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: January 11, 2021, 10:40:51 pm »

Hi @Nekromantik,

You can use the free edition for your network. Home and other licenses provide extra features. But if you ask a license type for fewer devices, unfortunately, the basic license is Home 100.

ok

23

Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering

« on: January 11, 2021, 05:43:52 pm »

Hi

Can we have a free edition for devices less then 15?
I dont have 50 so spending  $10 a month on home seems a lot when max I have 5 devices.

24

General Discussion / GetDNS update

« on: December 15, 2020, 08:52:03 pm »

hi all
will GetDNS and Stubby plugin get updated to latest version?

25

Tutorials and FAQs / Re: FRESH NEW AND IMPROVED GETDNS STUBBY AND UNBOUND AKA DNS PRIVACY

« on: July 18, 2020, 06:42:53 pm »

yes may need to play around with servers

26

Tutorials and FAQs / Re: FRESH NEW AND IMPROVED GETDNS STUBBY AND UNBOUND AKA DNS PRIVACY

« on: July 18, 2020, 02:04:01 pm »

have this working but first time you visit website it does add a long delay
anyway to make this quicker?

27

General Discussion / Access to External domain from Internal

« on: June 08, 2020, 11:52:28 am »

Hi all
So I have a web server that has a NAT to forward traffic to it from WAN.
This works fine.
I then had to add that domain and re direct it to Internal IP in Unbound to stop it breaking when Im on the Internal network.
This stopped working after the last update to OPNSense.
Now I started to get OPNSense cert error when accessing from inside as its trying to hit hit the firewall IP on 443 and getting to the firewall instead of going to web server so the unbound dns over ride has broken.
Any tips?

28

Tutorials and FAQs / Re: HOWTO - DNS Security / Unbound DNS with DNSCrypt, DoH Plugin for IPv4 + IPv6

« on: January 28, 2020, 08:24:06 pm »

thanks

29

Tutorials and FAQs / Re: HOWTO - DNS Security / Unbound DNS with DNSCrypt, DoH Plugin for IPv4 + IPv6

« on: January 26, 2020, 07:01:11 pm »

does this replace using stubby?

30

19.7 Legacy Series / Re: [Solved] Unable to Export OpenVPN Configuration

« on: August 04, 2019, 07:44:57 pm »

same here
what was the fix?