Topics

[Unbound DNS]

I have a few domains in Unbound DNS --> Blacklist --> Whitelist Domains - is there a file where those domains are stored, so I can check ?

I checked in /var/unbound/etc but nothing...

Tia.

I've installed turbostat from https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/turbostat-4.17_1.txz with the command

Code Select Expand

pkg add https://pkg.freebsd.org/FreeBSD:12:amd64/quarterly/All/turbostat-4.17_1.txz

and I got the following

Code Select Expand

Fetching turbostat-4.17_1.txz: 100%   46 KiB  46.9kB/s    00:01
Installing turbostat-4.17_1...
Extracting turbostat-4.17_1: 100%


But if I just type turbostat I then get the following error

Code Select Expand

root@doom:~ # turbostat
turbostat version 17.06.23 - Len Brown <lenb@kernel.org>
turbostat: /dev/cpuctl0 missing, kldload cpuctl: No such file or directory

Can someone please guide me how to run it?

Tia.

I'd like to know what the timescale is for getting Suricata v5.0.4 or v6 - thanks.

If I don't use IDS/IPS, by enabling the hardware offloads settings, would I gain performance ?

Tia.

Why do I have to provide my credit card details for a free trial and then I have to cancel the subscription if I don't want to continue? You mention a "seamless subscription experience" but it's nonsense... in my humble opinion, this is not he right way to acquire potential customers...

That's annoying, to be honest and I'll pass.

As per subject, I'd like to be able to log in to modem GUI via WAN port, but (and sorry if it's a dumb question) I don't understand how to configure OPNsense.

First thing, I don't have a 'local' address for my WAN port (I've attached screenshots of the configuration) and I was thinking that if I was able to assign the WAN port an IP in the same subnet as LAN, I should be able to do so: my OPNsense IP address is 192.168.0.1 and my LAN addresses range through DHCPv4 is 192.168.0.2 - 192.168.0.50

Appreciated some help.

Tia.

If I'm not mistaken, there is nothing in the GUI which can give me the info of the connection speed of the modem: is there a command I can type through CLI that would give me the speed that the modem's connected?

Tia.

[VLAN Hardware Filtering]

I'd like to know what the default value is (enabled or disabled) for the VLAN Hardware Filtering.

Thanks.

If I'm running the IDS on the WAN interface only, in the 'Home networks' section should I enter:

1) WAN address only

2) LAN networks only

3) WAN address + LAN networks

Tia.

I set up a new user for SSH access and was wondering what the different login shell options mean.

Tia.

Could someone explain why the IDS/IPS should know the local IP addresses? What if I'd' leave that field empty ?

Tia.

I've created my keys (Ed25519) with puttygen, I've created a new user member of the 'admins' group and have populated its 'Authorized keys' field with the public key, but when I try to access via SSH, I get the attached error: can someone point me in the right direction ?

Tia.

Since I don't have any entries in the 'Alerts' tab, I was wondering which woud be the best way to check that Suricata is actually running ?

Tia.

As per title, the last entry in the unbound log is yesterday at the time I upgraded to 20.7 and nothing since then, how come ??

Tia.

I've just updated to 20.7 and noticed that in "Intrusion Detection" --> "Administration" there is the new setting 'Detecting Profile': no idea what the different options mean (default, low, medium, high, custom)  ???

What default does?

Where can I find a simple document which explains the different settings?

Tia.

My log's got hundreds of those alerts: is this something to worry about or ?

Tia.

I'd like to test MTU=1500 on my PPPoE interface, but if I enter the value on 'interfaces' -> 'wan' -> MTU and saving it doesn't actually change it (still 1492): is there a way perhaps through CLI to force the value to 1500?

Tia.

Before installing that, can anyone please explain what does this rule-set provide more than the standard open rule-set that I'm using ?

Tia.

On the tab 'Settings' -> 'advanced mode' I see you can enter your home networks details: it's currently blank, so should I enter the IP addresses of my local devices, i.e. something like 192.168.0.0/24 or 192.168.0.0/16 ?

Could someone please explain pros and cons of leaving that field empty ?

Tia.

I wanted to try the unbound plus plugin, and after the reboot I saw errors in the log (see picture): can please someone explain what they mean?

I don't recall I have ever seen those errors before the unbound plus installation...

This is the 'custom options' section:

Code Select Expand

server:
   num-threads: 4
   msg-cache-slabs: 8
   rrset-cache-slabs: 8
   infra-cache-slabs: 8
   key-cache-slabs: 8
   aggressive-nsec: yes
   rrset-roundrobin: yes
   qname-minimisation: yes
   tls-cert-bundle: "/usr/local/share/certs/ca-root-nss.crt"
forward-zone:
   name: "."
   forward-tls-upstream: yes
   forward-addr: 9.9.9.9@853#dns.quad9.net
   forward-addr: 149.112.112.112@853#dns.quad9.net

Tia.