Messages

Ahhh so what is really the difference is that Unbound is an authoritative DNS, whereas Dnsmasq will forward to an authoritative source. Now that makes sense. Staying with Unbound then.

No worries...and thanks for all the efforts. I am learning alot about OPNsense!

Not sure what it was. Rebooted the firewall and all was good again.

Agreed...and I was really not asking if there was an update but more if we could install the updated Curl, which looks to be available.

So I do not enable Dnsmaq and I am good...thanks!

Hello all,

I did a security audit of my system and its showing that Curl has multiple vulnerabilities. Is there a new pkg that addresses these?

Thanks,
Steve

I would agree on what Suricata shows. I am actually trying to find some kind of front end that visualizes the Suricata data. Working with Elastic Search right to see where it can get me.

Does the filter get implemented on the OPNsense firewall?

OK I am sure I did something but for the life of me I am not sure what I did.

When I connect my PC to the LAN port of my firewall I can login to the GUI with no issues. If I connect the PC to a switch, which in turn connects to the LAN port of my firewall, It times out and does not let give me the login screen. Why would this be happening...what option did I enable that I should not have?

Steve

Thank you sir!

@mb does Sensei augment what Suricata brings to the table or are they aimed at totally different things. It seems to me there is overlap and I am trying to understand if I should use one or the other or both.

So since there was no new kernel in 19.1.7 and 19.1.8 that means I need to install the new netmap via CLI correct? The netmap in plugins is still old?

Thanks @mb.

What does Sensei replace?

Is Sensei available from the plugins section or do we need to do a CLI install? I would very much like to try it out.

Hello all,

I am new to OPNsense and clearly there are logs that I would like to be able to review, from time to time, so make sure there is nothing getting through that I do not want. Keeping the logs on the firewall, long term, does not seem like a good idea. I am thinking of building a dedicated syslog server, to take in logs from the firewall and other network devices.

A couple of questions:

1) Do you have a syslog server app that you would recommend?
2) Is there a front end to Suricata that would allow me insight into what is going on from an IDS/IPS perspective?
3) Do you run NTOPNG on the OPNsense firewall or do you run it independently of the firewall?

Thanks,
Steve