Show Posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Topics - Georges

Pages: [1] 2

General Discussion / unknown dhcp option error

« on: June 05, 2022, 08:23:29 am »

Hello,
I'm on a DECISO Appliance ( AMD GX-420MC SOC (4 cores, 4 threads))
OPNsense 22.4_2-amd64
FreeBSD 13.0-STABLE
OpenSSL 1.1.1o 3 May 2022

Since the FreeBSD 13, each day, my internet connection is lost and i found on the log "unknown dhcp option error"
I just need to reboot to fix it.
I'm using my OPNsense to replace my ISP Box.

Any idea?

Hardware and Performance / ONT 82599ES GPON-ONU-34-20BI

« on: March 04, 2022, 04:32:00 pm »

Hello,

i'm on 21.10.3 with a Deciso Appliance with AMD GX-420MC SOC
I order a ONT GPON-ONU-34-20BI https://www.fs.com/fr/products/133619.html
But it is not working.
My SPF+ are
vendor = 'Intel Corporation'
device = '82599ES 10-Gigabit SFI/SFP+ Network Connection'

How can i make it work?

Thank you!

Hardware and Performance / OPNsense 21.10.2-amd64 lost packet randomly

« on: February 03, 2022, 07:32:37 pm »

Hello,

This is my DECISO Appliance

Versions OPNsense 21.10.2-amd64
FreeBSD 12.1-RELEASE-p21-HBSD
OpenSSL 1.1.1l 24 Aug 2021
Updates Click to check for updates.
CPU type AMD GX-420MC SOC (4 cores)
I got 8Go RAM.

Since the 21.10.2 i got some strange issue.
Some packet drop. This is random.
I test using my old ISP box and no drop.
When testing speedtest i found something strange. During download no problem. But since i go to upload mode, sometimes i got the test block for secs, a pic of Opnsense CPU and then the test continue sometime increase sometime reduce do 0 Mega and error.
Exemple using the speedtest cli on the Appliance :

Speedtest by Ookla

Server: ISP
ISP: ISP
Latency: 1.70 ms (0.32 ms jitter)
Download: FAILED
[error] Cannot open socket: Timeout occurred in connect.

And other test is

Speedtest by Ookla

Server: ISP
ISP: ISP
Latency: 1.70 ms (0.07 ms jitter)
Download: 935.26 Mbps (data used: 422.5 MB)
Upload: 601.08 Mbps (data used: 271.5 MB)
Packet Loss: 0.0%

I test from the speedtest on my Computer, same behavior.

Is anyone got this lost packet and drop issue?

I didn't activate IDS and Zenarmor for the test.

Thank you for your time

Hardware and Performance / [SOLVED] VM performance issue 21.10.2 Business edition esxi

« on: January 29, 2022, 08:24:27 pm »

Hello,

This is my DECISO Appliance

Versions    OPNsense 21.10.2-amd64
FreeBSD 12.1-RELEASE-p21-HBSD
OpenSSL 1.1.1l 24 Aug 2021
Updates    Click to check for updates.
CPU type    AMD GX-420MC SOC (4 cores)
I got 8Go RAM.

When i'm doing a iperf3 between my computer i get only around 750 Mbits/sec.
When i test it between 2 computer i got around 930 Mbits/sec.

Does anyone get some issue on the 21.10.2-amd64?
And i have stop all services like zenarmor before doing this test.

I got the same kind of issue on my esxi 6.5 with OPNsense, same version where this is 35.8 Mbits...
Where my test from another VM to my PC is around 442 Mbits/sec.

21.7 Legacy Series / OPNCentral - dynfi software

« on: August 05, 2021, 01:20:55 pm »

Hello,

Any idea when we can use the OPNCentral like the Dynfi software?
Manage all firewall, rules etc,.. from only one place.

Like a dream!

21.1 Legacy Series / Gateway - multiple gateway and route

« on: July 20, 2021, 12:04:36 pm »

Hello,

I got a multiple gateway and route.
I'm starting to be lost for how the gateway behavior work.
I'm using the Business edition btw.
For now i got 3 gateway ( i change the ip don't worry)
WAN_GW (active)    WAN    IPv4    253    192.168.0.1
AdminGW    ADMIN    IPv4    254    192.168.2.2
FW_OUT    ADMIN    IPv4    255    192.168.2.1

And some routes
   192.168.3.0/24   AdminGW - 192.168.2.2
   192.168.4.0/24   FW_OUT - 192.168.2.1
   0.0.0.0/0   WAN_GW - 192.168.0.1
   192.168.5.0/24   AdminGW - 192.168.2.2
   192.168.6.0/24   AdminGW - 192.168.2.2
   192.168.7.0/24   FW_OUT - 192.168.2.1

I would like to know if my priority is good and if i need the 0.0.0.0/0 in the route.
For now without this route i can't reach internet.

Any advice?

Some questions :
- How i need to configure a basic gateway to match specific route (priority? same as the default?, Activate the gateway or not?)

20.7 Legacy Series / [RESOLVE] Strange behavior 2 opnsense same subnet

« on: January 05, 2021, 02:53:55 pm »

Hello,
I got 2 Opnsense Admin interace in the same subnet.
.1 and .2
a 3rd firewall in .3.
Each 2 first opnsense send telegraf information to another VM passing throught the .3.
So .1 to VM by .3
And .2 to VM by .3
(With gateway and route configure on both opnsense firewall)
I got this behavior
On the .1 i see the blocked request from the .2 at destination to the VM
And same on the .2, i see the .1 request to the VM blocked...
How.. is this even possible? 0.0...
I and it's really block, on the .3 with tcpdump i can see the request.
I am confuse. Did anyone already get this strange behavior?

General Discussion / OPNCentral - Rules management

« on: December 16, 2020, 01:39:54 pm »

Hello,

Is there any plan to be able to manage rules and all component from the OPNcentral to other OPNsense?

For now only update is possible...

Zenarmor (Sensei) / Policies don't match Source IP

« on: November 25, 2020, 04:08:28 pm »

Hello,

I'm on sensei 1.6.X Premium Edition and i have create a new Policies where i have enter the IP address of my laptop and block for exemple Porno**** And when i try to access it... it's work...
It's only block when the block section is in the Default Policies

Why ?

Thank you in advance

General Discussion / CrowdSec

« on: November 20, 2020, 06:53:44 pm »

Hello,

I just discover this.
"CrowdSec is a security automation engine, using both local IP behavior detection & our community-driven IP reputation database."

https://crowdsec.net

Still in beta but this will power OPNsense into a new level with a plugin like this 0.0

What do you think?

General Discussion / Grafana Dashboard for OPNSense and Sensei

« on: November 11, 2020, 11:23:02 am »

Hello folks!

I just made some dashboard for OPNSense and the Sensei Plugin

Enjoy ! https://github.com/b4b857f6ee/opnsense_grafana_dashboard

Development and Code Review / dns/dyndns cloudflare cannot get vlan interface IP

« on: October 21, 2020, 06:53:05 pm »

Hello,

When i try to configure cloudflare and click on "Add" no thing appear in the list, like this is not saving by the interface. Any idea?

Thank you in advance.

Intrusion Detection and Prevention / Just ran out of space in queue - Suricata Crash

« on: September 29, 2020, 12:37:29 pm »

Hello, i got this error, any idea?

General Discussion / [SOLVED] You do not have the permission to perform this action

« on: September 24, 2020, 08:15:21 pm »

Hello,

20.7.2 and 20.7.3

I have do some **** on my opnsense.

I was configuring the LDAP but i have create anothe group with the same right as the admins group, si now, i can't remove the group because the is the root user inside it and i can't create another admin user or even a user in local...

..

How to fix it?

I found we can remove it if we have another admin user but i don't have another...

Thank you for your help!

https://forum.opnsense.org/index.php?topic=10873.msg49701#msg49701 And about that, i can't see the cloud button

[EDIT] for the cloud button it is here : https://forum.opnsense.org/index.php?topic=12652.0

French - Français / [SOLUTION TROUVE] Orange Fibre débit problème

« on: September 08, 2020, 10:59:00 am »

Hello,

J'ai un OPNsense sous 20.7.2 avec la connexion Orange FTTH qui fonctionne (seulement IPv4) - Appliance Physique
J'ai sniffé les paquets de ma box pour le faire.
Néanmoins j'ai un débit.... catastrophique... je passe 900Méga en download à 32... pareil réduction sur l'upload.
Vous avez déjà eu cela?

Merci d'avance

Pages: [1] 2