Messages

31

20.7 Legacy Series / Re: Kernel panic after enabling IGMP proxy or mdns-repeater

« on: December 03, 2020, 01:59:23 pm »

https://github.com/opnsense/src/issues/70

20.7.3

32

20.7 Legacy Series / Re: Kernel panic after enabling IGMP proxy or mdns-repeater

« on: December 03, 2020, 03:46:37 am »

This issue was fixed in one of the previous builds.

33

20.7 Legacy Series / Re: Unbound DNS vulnerability exploit DDOS attack

« on: December 02, 2020, 02:08:05 am »

I don't think this is a ddos vulnerability.  I think this is rather something that is coming from one of the blocklist providers as I found this was due to the same line in the dnsbl.conf file.  I had this over the weekend and I was able to resolve it by SSHing into my system and removing the offending line manually.  I haven't had time to figure out where it came from but this fixed my issue.  Its most likely due to the fact that unbound can't parse the non standard characters in the line (the /).

34

20.7 Legacy Series / Re: Adblocking: is it still in beta?

« on: November 15, 2020, 03:47:29 pm »

Figured I'd ask this in here since I'm not sure if others have seen this too.  I'm noticing when I whitelist something or turn off the blacklist for troubleshooting, it takes a long time for the changes to kick in.  Anyone notice this too or know of a way to speed this up?  I wish there was a button in the UI or it would do this by default.

35

20.7 Legacy Series / Re: radvd stops announcing IPv6 prefix after a while (radvd freeze?)

« on: November 13, 2020, 03:51:50 am »

Just chiming in.  I'm having this issue as well. Found this:

https://forum.netgate.com/topic/142363/ipv6-broken-radvd-can-t-join-ipv6-allrouters-on-interface/137
https://github.com/pfsense/FreeBSD-ports/pull/773

@franco does this help narrow it down.

36

20.7 Legacy Series / Re: Query Intel igb NIC driver version

« on: November 09, 2020, 09:11:06 pm »

You'll also find this here:

https://downloadcenter.intel.com/download/17509/Intel-Network-Adapter-Gigabit-Base-Driver-for-FreeBSD-?wapkw=i350

I'm not sure the differences between the 2.5.x and the 7.x versions.  Posting this only as this driver seems to be in line with what is already there.

37

Intrusion Detection and Prevention / Re: Snort Rules - not installed

« on: August 29, 2020, 12:40:11 am »

Thanks for posting the fix!  Just an FYI, it looks like snortrules-snapshot-29161.tar.gz also works.

38

20.7 Legacy Series / Re: Call for testing: netmap on 20.7

« on: August 10, 2020, 07:57:13 pm »

Just reporting that I've installed the last test kernel and enabled IPS on my PPPoE connection with IGB drivers.  All appears to be good and haven't had issues over the weekend.

39

20.7 Legacy Series / Re: Call for testing: netmap on 20.7

« on: August 07, 2020, 09:40:21 pm »

Is the kernel above the test kernel that includes the PPPoE fixes, or should we still PM?

40

20.7 Legacy Series / Kernel panic after enabling IGMP proxy or mdns-repeater

« on: August 07, 2020, 06:00:11 pm »

Any chance anyone else is having these sorts of issues or know if there is a known issue?  I've reported this via the built in reporter each time it happens but wasn't sure if these are looked at by anyone.

41

20.7 Legacy Series / Re: IGMPproxy not leaving multicast streams

« on: August 04, 2020, 03:16:51 am »

Are you actually able to enable igmp proxy without it causing the system to hang?  If I enable the service, it causes my system to kernel panic on every boot until I remove the service package in single user mode.

42

19.7 Legacy Series / Re: PPPoE Suricata log flodding

« on: February 04, 2020, 07:24:43 am »

Were any of you able to find a solution to this issue?

43

20.1 Legacy Series / Re: Upgrading from 19.7.10 to 20.1

« on: January 31, 2020, 02:38:22 am »

I feel stupid asking this question.  For those that upgraded, are you switching to development or leaving it as production in the settings?  I'm not seeing the upgrade unless I switch to development.

Update: I figured it out.

44

19.7 Legacy Series / Re: IPv6 via 6rd on Centurylink problem: No route to host.

« on: December 31, 2019, 09:23:01 pm »

I was able to get my IPv6 setup working with a static IP address and a gif tunnel.  I had the static IP from my previous setup before IPv6 and would like to get rid of it.  Has anyone gotten this to work?

45

Intrusion Detection and Prevention / Excluding local hosts from IPS rules

« on: December 25, 2019, 04:28:18 pm »

I have a couple of harmony hubs that seem to have issues with the IPS rules that I have. Nothing shows up in the alerts for them but it seems the remotes are very slow when IPS is on.  When I turn it off, they work as they should.  Has anyone run into this issue and regardless, is there a way in the user defined rules to exclude a host from all rules?