Messages

106

21.1 Legacy Series / Re: loosing lots of my band width when connected through opnsense

« on: April 30, 2021, 03:08:26 am »

Have you made any changes to the default install, I.E. tuning?  What HW do you have, E.G. Intel multi-port NICs?  You need to supply much more information then what you have.  Are you matching your MTU for all your links?  What services if any have you enabled on the FW? 

Also, F.Y.I. keep in mind when adding ANY additional components to a network, that will add latency.  This is not to say your issue is the computer you have placed inline, but you will most likely not see the same exact speed.

107

21.1 Legacy Series / Re: upgrading 21.1.4 to 21.1.5

« on: April 30, 2021, 03:00:32 am »

There is a built-in reporting option in the FW, System> FW>Reporter.  Or you could do it on github.com/opnsense.

108

21.1 Legacy Series / Re: Log confusion

« on: April 30, 2021, 02:37:20 am »

Can you give more information?  What rules do you have place actually show the rule.  Also, can you give the info on the message (in live view, click on the i at the right of the entry)  it will give the details and can help deciphering the issue.

109

21.1 Legacy Series / Re: Can´t set new Gatways, error no monitor ip, but disabled this

« on: April 30, 2021, 02:32:35 am »

Can you give more information?  What steps you took, what you are trying to configure, etc.

110

21.1 Legacy Series / Re: Slow Download, Fast Upload

« on: April 30, 2021, 01:56:44 am »

There was a problem with some Intel cards, specifically the drivers not being available within the last couple of years.  Once they received a driver, there still was an issue with the multi-NIC versions.  I ran into this as well and referenced https://docs.netgate.com/pfsense/en/latest/hardware/tune.html

Also, have you thought about using a different hypervisor?  ESXi is free when not requiring the additional functionality.  For multiple VM, no frills (basic) use, it may be a better choice and from my experience, no head-ache.  If you use ESXi, make sure you give a valid email address as you will be emailed a key (for basic usage). When you install, it will be in "evaluation mode" for a few months.  You should entered the free key you received as it will prevent the server from automatically shutting down when not in eval / licensed mode.

111

21.1 Legacy Series / Re: SSD / eMMC wear out & ram disks on 21.1

« on: April 30, 2021, 01:30:17 am »

If I remember correctly, you are correct.  Most of the storage I/O is from logging and there is also some RRD writes that will be omitted when running RAMdisk. 

I have not tried suricata with ramdisk.  My speculation is that there will not be issues as the rules are running from RAM as it is now through hyperscan where you can change the impact (load) by electing a lower grouping (refer to suricata documentation as I don't remember the "levels"  meaning). 

You also can lookup additional information in the manual https://docs.opnsense.org > install and setup > initial install & config.

112

Documentation and Translation / To Developers/Moderators-Announcements: Request providing additional information

« on: April 29, 2021, 10:54:23 pm »

I have been using your software for a few years, and when an announcement is made for an update / upgrade, the information provided is sparse.  Can additional information be provided as to not only the changes being made, but how they are being by the developers.  An Example is monit. 

When I first started using opnsense 19.7.1, monit was a port.  (  https://forum.opnsense.org/index.php?topic=13601.msg62671#msg62671 ports: monit 5.26.0[7])  As much as I wanted to use this program, it did not have a way to secure it's interface; that's to say, it allowed non-authenticated users to access the information it provided (if memory servers). 

Since that time,  the port was integrated into the OS (19.7.3 https://forum.opnsense.org/index.php?topic=14011.msg64417#msg64417 o monit: add parent devices to interface list (contributed by Frank Brendel))

As this is now "integrated", I can start to use this functionality as the issue of not being able to force authentication no longer exists.

In this announcement , there is no mention the port being integrated into the OS.  Searching the OS documentation, there was also no mention.  I was able to fine the changes here, . https://github.com/opnsense/docs/pull/91

As I am sure many people review the announcements; but do not follow the documentation close enough to determine what parts have change and what said changes include.  Can these changes be stated in the announcements as it will show in the pop-up before the update / upgrade is installed.

113

20.1 Legacy Series / Re: os-openconnect / all traffic stops when server forces disconnect

« on: March 22, 2021, 07:59:58 pm »

I am also running into this issue.  However, I am using OpenVPN and the connections on this FW are clients, not Servers. 

Looks like there is are existing threads on this, but last post was from 2020. 
https://forum.opnsense.org/index.php?topic=20045.0 

Additional information, but no responses.
https://forum.opnsense.org/index.php?topic=21533
https://forum.opnsense.org/index.php?topic=15818.0

114

General Discussion / Re: When one of 2 grouped vpn connections drop, normal LAN traffic drops as well

« on: March 22, 2021, 07:22:29 pm »

I am also running into this issue.  However, I am using OpenVPN and the connections on this FW are clients, not Servers. 

Looks like there is are existing threads on this, but last post was from 2020. 
https://forum.opnsense.org/index.php?topic=20045.0 

Additional information, but no responses.
https://forum.opnsense.org/index.php?topic=21533
https://forum.opnsense.org/index.php?topic=15818.0

115

20.7 Legacy Series / Re: Intra VLAN performance issues when WAN has issues

« on: March 22, 2021, 07:21:17 pm »

I am also running into this issue.  However, I am using OpenVPN and the connections on this FW are clients, not Servers. 

Looks like there is are existing threads on this, but last post was from 2020. 
https://forum.opnsense.org/index.php?topic=20045.0 

Additional information, but no responses.
https://forum.opnsense.org/index.php?topic=21533
https://forum.opnsense.org/index.php?topic=15818.0

116

21.1 Legacy Series / Re: Firewall: Log Files: Live View Filters - Not filtering as set

« on: February 21, 2021, 06:38:40 am »

Thannks.  The web performance seem to be with the amount of records and browser cache.

117

Intrusion Detection and Prevention / Re: Chnage Action to Drop in bulk

« on: February 21, 2021, 06:19:58 am »

I don't remember enabling the rules.  I believe they were already enabled by default; at least the important ones.  I.E. DOS, malware, trojans, etc.    Are all the rules disabled by default? 

Thanks for helping me on my other thread.
https://forum.opnsense.org/index.php?topic=21573.0

118

Intrusion Detection and Prevention / Re: Services: Intrusion Detection: Administration:Rules Filter not filtering

« on: February 21, 2021, 06:00:41 am »

I'm on 21.1. Did you update to 21.1.1 to fix this?

119

Web Proxy Filtering and Caching / Re: Proxy-Subnets- Can someone verify if they have an allowed subnets error?

« on: February 17, 2021, 05:21:32 am »

Anyone else run into this?

120

Intrusion Detection and Prevention / [Solved] Services:Intrusion Detection:Administration:Rules Filter not filtering

« on: February 17, 2021, 05:19:43 am »

In rules, selecting filter "status disabled" does not only show rules that are disabled. 

Going to the rules page, it shows all the rules starting from 2000005.  After selecting the filter disable, all the rules are still showing.  This is including the one enabled. 

Has anyone see this?