196
Zenarmor (Sensei) / Re: Loss of LAN connectivity
« on: July 02, 2022, 02:56:42 pm »
Note: something was not right with packages/plugins, so I have performed an opnsense-bootstrap.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
197
Zenarmor (Sensei) / Re: Loss of LAN connectivity
« on: July 02, 2022, 01:56:15 pm »
OK, done. From ....@home.nl
198
Zenarmor (Sensei) / Loss of LAN connectivity
« on: July 01, 2022, 06:06:59 am »
976.452223 [1139] generic_netmap_attach Emulated adapter for igb1 created (prev was NULL)
976.452269 [1044] generic_netmap_dtor Emulated netmap adapter for igb1 destroyed
976.633263 [1139] generic_netmap_attach Emulated adapter for igb1 created (prev was NULL)
976.722312 [ 320] generic_netmap_register Emulated adapter for igb1 activated
976.452269 [1044] generic_netmap_dtor Emulated netmap adapter for igb1 destroyed
976.633263 [1139] generic_netmap_attach Emulated adapter for igb1 created (prev was NULL)
976.722312 [ 320] generic_netmap_register Emulated adapter for igb1 activated
199
Zenarmor (Sensei) / Re: Do I need Suricata IDS running if using Zenarmor (Sensei)
« on: June 25, 2022, 10:58:18 pm »
Zenarmor is no IDS.
And you only need Suricata if you open ports to the world.
And you only need Suricata if you open ports to the world.
200
22.1 Legacy Series / Re: [CALL FOR TESTING] FreeBSD 13.1 / 22.7 operating system preview
« on: June 18, 2022, 03:40:08 pm »
Yup, spoke too early. Between 7th and 8th day I lose connectivity on LAN.
201
22.1 Legacy Series / Re: [CALL FOR TESTING] FreeBSD 13.1 / 22.7 operating system preview
« on: June 17, 2022, 09:51:06 am »
About one time per week I had connectivity loss on the LAN. With the test kernel it seems that is no longer happening. Although it might be a bit early to say that.
202
Zenarmor (Sensei) / Re: Has sensei a ssl inspection feature
« on: May 18, 2022, 02:09:01 am »
I don't know if it makes much sense: Zenarmor isn't IPS, nor virus scanner.
203
Zenarmor (Sensei) / Re: High RAM Usage
« on: April 11, 2022, 11:32:28 pm »
It means 1200 internal IPs. And since I am a home user I never had that many IPs on my network. So, I manage easily with 16 GB RAM and at my mother's house Sensei is running upon a device with 4 GB RAM.
204
General Discussion / Re: Just installed Opnsense and confused
« on: March 31, 2022, 06:47:06 pm »
Yup, your system got replaced by a custom FreeBSD 13 system, which works as a firewall.
205
General Discussion / Re: Just installed Opnsense and confused
« on: March 31, 2022, 05:52:12 pm »
As you know there are three rules of system administration: backup, backup, backup.
Linux is very easy to backup and restore since a compressed tar is enough for the system partition. Or use clonezilla.
Linux is very easy to backup and restore since a compressed tar is enough for the system partition. Or use clonezilla.
207
22.1 Legacy Series / Automatic OpenDNS
« on: March 25, 2022, 10:19:19 am »
I want to check if this makes sense:
In Services / OpenDNS I have:
Filter DNS requests using OpenDNS : check
Do not alter system DNS server settings: check
Username <censored>
Password <censored>
Network <censored>
Test result good
# cat /etc/resolv.conf
domain locallandomain
nameserver 127.0.0.1
nameserver 208.67.222.222
nameserver 208.67.220.220
nameserver 208.67.222.220
nameserver 208.67.220.222
search locallandomain
In Services / Unbound DNS / DNS over TLS I have:
each of those four IPs
port 853
dns.opendns.com
Does it make sense? I.e. DoT to OpenDNS. Do I need a firewall rule to filter DNS calls or it does that automatically?
In Firewall: Diagnostics: Statistics / rules there is nothing with port 53, nothing with DNS, and nothing with domain.
In Services / OpenDNS I have:
Filter DNS requests using OpenDNS : check
Do not alter system DNS server settings: check
Username <censored>
Password <censored>
Network <censored>
Test result good
# cat /etc/resolv.conf
domain locallandomain
nameserver 127.0.0.1
nameserver 208.67.222.222
nameserver 208.67.220.220
nameserver 208.67.222.220
nameserver 208.67.220.222
search locallandomain
In Services / Unbound DNS / DNS over TLS I have:
each of those four IPs
port 853
dns.opendns.com
Does it make sense? I.e. DoT to OpenDNS. Do I need a firewall rule to filter DNS calls or it does that automatically?
In Firewall: Diagnostics: Statistics / rules there is nothing with port 53, nothing with DNS, and nothing with domain.
208
Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering
« on: March 25, 2022, 06:44:04 am »
It's not the fault of Zenarmor, it's the fault of OPNsense.
209
22.1 Legacy Series / cyrus-sasl
« on: March 01, 2022, 07:22:55 pm »
cyrus-sasl is vulnerable. Run pkg audit -F
210
22.1 Legacy Series / Re: os-ddclient
« on: February 12, 2022, 07:13:29 pm »so practically it seems that as a user of Mythic Beasts, a small yet highly clueful UK ISP it is unlikely to ever get support in os-ddclient, my options will beDon't think so. You may edit ddclient config with an URL to your own liking.