Messages

Have you disabled all hardware acceleration features for your physical interfaces?

Hi folks!

I have improvements on my desk that I plan to submit this month, anyway. An sslh plugin at least. It would be great if I could participate in Hacktoberfest and get a cool t-shirt, specifically since I am a rather "old school" operator/admin and not considered much of a developer by my colleagues ;) Talk about peer pressure ...

As I understand it Hacktoberfest was changed to a strict opt-in policy for projects hosted on Github, so the question is if OPNsense will opt in or not.

Kind regards,
Patrick

Updated yesterday, nothing noteworthy.

Fragmentation can only occur at layer 3, e.g. routing.

20.7 is based on FreeBSD 12. I am not familiar with the install process if you use an already running FreeBSD system, but this is probably the cause of your problem.

Did you assign the bridge interface to LAN in the "assignments" section?

Because a large part of the network interface drivers were rewritten for FreeBSD 12 and iflib. I have occasional glitches with speed/duplex settings, too. But that is something hard to fix for the OPNsense project. Needs to be resolved upstream.

Hi all,

I am running Monit on my FreeNAS in a FreeBSD jail to monitor all of my private infrastructure. From browsing the OPNsense UI I get the impression the bundled Monit instance is limited to checking local services. Is that true? Can I implement something like this?

Code Select Expand


check host public-cloud address cloud.hausen.com
  if failed
    port 443 protocol HTTPS
    with http headers [Host: cloud.hausen.com]
    and request "/login" with content = "Hausen Family Cloud Home"
    for 3 cycles
  then alert


It would be great if I could retire yet another jail and run essential services on that 24x7 on appliance while hacking on my FreeNAS ...

Thanks,
Patrick

To my knowledge you cannot bridge two different MTUs. You need to route between the networks so fragmentation can occur.

Sslh can multiplex at least

• HTTPS
• OpenVPN
• SSH

all on one port, e.g. 443 with much better performance than the builtin fallback function of OpenVPN.

I plan do write a plugin for Hacktoberfest.

https://github.com/yrutschle/sslh

Bitte schreib doch nochmal die SAs Deines Policy Based Tunnels auf und die falsche Route, die installiert wird.

You can use a DNS challenge with Letsencrypt instead of HTTP:

https://letsencrypt.org/docs/challenge-types/

HTH,
Patrick

I run this confuguration. OPNsense behind my Fritzbox router.

I only have a LAN interface, bridge0 with all 4 Gbit interfaces as members, so I don't need another small switch. Firewall is globally disabled, no NAT.

I run an IPSec tunnel to my company office and WireGuard to connect from remote when I am in the road.

Please sketch what you are trying to achieve and I can probably help. "VPN" is many different things ;)

OPNsense 20.7.2-amd64
Coreboot v4.12.0.4
APU4D4

No problems whatsoever.

HTH,
Patrick

NBMA should be used in usual networks

NBMA for Ethernets? Could you explain?

Thanks,
Patrick