211
Zenarmor (Sensei) / Re: Sensei - External elastic search - socket/open
« on: February 04, 2022, 11:29:53 am »
1.9.3 is not right. I have 1.10.1.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
212
Zenarmor (Sensei) / Re: Sensei on OPNsense - Application based filtering
« on: February 03, 2022, 08:53:58 pm »
If the processor is fast enough, there are no performance losses.
213
22.1 Legacy Series / Re: os-ddclient
« on: January 31, 2022, 05:34:20 am »
Yup, succeeded with:
Code: [Select]
daemon=300
syslog=yes # log update msgs to syslog
pid=/var/run/ddclient.pid # record PID in file.
#
# setup how we expect to retrieve an IP address
#
use=web, web=http://checkip.dyndns.org/, web-skip="Current IP Address:"
# Configuration file for ddclient generated by debconf
#
# /etc/ddclient.conf
protocol=dyndns2
#use=if, if=igb0
server=updates.dnsomatic.com
ssl=yes
login=myusername
password='mypassword'
Myhostname
214
22.1 Legacy Series / Re: os-ddclient
« on: January 29, 2022, 08:08:18 pm »
DNSOMatic also is absent from ddclient.
215
22.1 Legacy Series / Re: os-ddclient
« on: January 24, 2022, 01:38:38 pm »
If you want a cheap solution, but a really cheap router (e.g. a Linksys E3000 or Asus RT-N16). Install FreshTomato or DD-WRT, and attach it behind your firewall. And, bingo, inadyn is working out of the box with many standard services and a custom option, checking the external IP by itself. You don't have to use its WiFi. This is supposing you have IPv4.
Otherwise a NAS (Synology or QNAP) will do for both IPv4 and IPv6.
Otherwise a NAS (Synology or QNAP) will do for both IPv4 and IPv6.
217
Zenarmor (Sensei) / Re: Advanced Security coming soon?
« on: January 19, 2022, 05:55:14 pm »
Not worthless: I was much longer doing this with Diversion and Skynet for AsusWRT Merlin, and even before that with custom Optware for DD-WRT.
So, yeah, I love censored internet. I don't censor it morally or politically, but I censor it for ads, scams, phishing and other security risks.
So, yeah, I love censored internet. I don't censor it morally or politically, but I censor it for ads, scams, phishing and other security risks.
218
Zenarmor (Sensei) / Re: Advanced Security coming soon?
« on: January 15, 2022, 07:53:23 pm »
To sum up:
* I know what alises are;
* I know how to insert a list of aliases;
* I know that 95% of the lists of aliases are free (gratis).
But even then I cannot find the proper balance.
* I know what alises are;
* I know how to insert a list of aliases;
* I know that 95% of the lists of aliases are free (gratis).
But even then I cannot find the proper balance.
Quote
A man worked in a factory and worked on the same machine all his life. This machine was unique and whenever it broke down, he would fix it. He was the only person who used the machine and the only one who could fix it and keep it running.
The time came for the man to retire. The whole company turned out and wished him well.
A couple of months later, the machine broke down. There was no replacement in existence so the Company Director rang the man and asked him to come in as a consultant to have a look at the machine and fix it.
The man came in, spent 15 minutes looking over the machine, pressing his ear to it, peering into gaps until he reached in to his bag and brought out a hammer. He then gave the machine a small tap and lo and behold, the machine was FIXED!
The director was overjoyed and asked the man to send him his invoice.
The invoice arrived for £10,000. The director was furious and immediately rang the man and demanded that he send a breakdown of the invoice and the tasks he performed.
He received the following:
Hitting the machine with a hammer .. .. .. £5.00
KNOWING where to hit the machine with a hammer .. £9995.00
The director paid the invoice without complaint.
219
Zenarmor (Sensei) / Re: Zenarmor & IPv6: Bad Combo (At least on ATT Fiber/US)
« on: January 14, 2022, 01:13:05 pm »
Have you upgraded to 22.1.r1? Maybe it behaves differently.
220
Zenarmor (Sensei) / Re: Zenarmor & IPv6: Bad Combo (At least on ATT Fiber/US)
« on: January 13, 2022, 01:54:36 pm »
That's quite true, Zenarmor chokes IPv6 if you have hardware checksum offload and/or hardware TCP segmentation offload enabled.
221
Zenarmor (Sensei) / Re: Trusting Sensei
« on: January 13, 2022, 01:24:58 pm »
Listen, my calculation is this: I will stop paying for Kaspersky (my internet provider provides me with 20 licenses for F-Secure, branded with the name of the provider). So, I will be still covered in respect to using an antivirus, and I will pay two licenses for Zenarmor: one for my house and one for the house of my parents.
So, whether it's Kaspersky or Zenarmor who reads my data it is pretty much the same situation.
So, whether it's Kaspersky or Zenarmor who reads my data it is pretty much the same situation.
222
22.1 Legacy Series / Re: 22.1.r1
« on: January 12, 2022, 09:14:47 am »
I did not know it will get released so soon.
223
22.1 Legacy Series / 22.1.r1
« on: January 12, 2022, 08:00:47 am »
I'm on 22.1.r1 (opnsense-update -fur 22.1.r1), but it wants to update to 22.1.b3.
LibreSSL if that matters.
If I switch to community version, it says "The release type "opnsense" is not available on this repository."
https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/libressl/Latest/opnsense-update.txz says 22.1.b3.
https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/libressl/Latest/opnsense-devel.txz says 22.1.b_141.
====
Okay, done like this:
# nano /usr/local/etc/pkg/repos/OPNsense2.conf
With the following content:
OPNsense2: {
fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
url: "pkg+https://pkg.opnsense.org/${ABI}/snapshots/libressl",
signature_type: "fingerprints",
mirror_type: "srv",
priority: 22,
enabled: yes
}
pkg update -f
pkg upgrade -f
reboot
Option 12 in the menu. Choose 22.1.r1. Let it reboot, and bingo!
I'm running now OPNsense 22.1.r_3 LibreSSL.
LibreSSL if that matters.
If I switch to community version, it says "The release type "opnsense" is not available on this repository."
https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/libressl/Latest/opnsense-update.txz says 22.1.b3.
https://pkg.opnsense.org/FreeBSD:13:amd64/22.1/libressl/Latest/opnsense-devel.txz says 22.1.b_141.
====
Okay, done like this:
# nano /usr/local/etc/pkg/repos/OPNsense2.conf
With the following content:
OPNsense2: {
fingerprints: "/usr/local/etc/pkg/fingerprints/OPNsense",
url: "pkg+https://pkg.opnsense.org/${ABI}/snapshots/libressl",
signature_type: "fingerprints",
mirror_type: "srv",
priority: 22,
enabled: yes
}
pkg update -f
pkg upgrade -f
reboot
Option 12 in the menu. Choose 22.1.r1. Let it reboot, and bingo!
I'm running now OPNsense 22.1.r_3 LibreSSL.
224
Zenarmor (Sensei) / Re: Advanced Security coming soon?
« on: January 07, 2022, 04:51:32 pm »
As I said, I am not expert, and if I were to use aliases, I would block too much. So, I was speaking about me and people like me, who can either trust the experts or behave like paranoid dabblers.
I did use pfBlockerNG and decided it is not my thing.
I did use pfBlockerNG and decided it is not my thing.
225
Zenarmor (Sensei) / 22.1.b3
« on: January 06, 2022, 01:18:49 am »
I was testing 22.1.b3_321 (based on FreeBSD 13) and there is no Zenarmor installation for it. I know that the beta version does not have plugins.