Messages

61

23.1 Legacy Series / Re: The new unbound reporting is pretty cool

« on: February 01, 2023, 09:09:39 pm »

Hi,

is this only a "design" glitch, or why does it block the A records but not the HTTPS records?

metrics.icloud.com A record blocked
metrics.icloud.com HTTPS record NOT blocked

62

Hardware and Performance / Re: Anyone used TP-link eap670 access point with opnsense?

« on: February 01, 2023, 08:35:44 am »

... Will I need a seperate controller?

You don't need an controller.
TP Link EAPs do have direct web-gui access (no need for an controller - only when you're having a big network and want to 'manage' stuff).
But the web-gui is capable of managing different VLAN SSIDs and so on.

63

Hardware and Performance / Re: Anyone used TP-link eap670 access point with opnsense?

« on: February 01, 2023, 08:33:44 am »

Don't buy EAP650/653 or 670 from TP Link.

They do all have IPv6 issues and TCP issues while using VLANs!

TP Link is working on a fix since months. Take other APs from them but not the named ones above.
You can find a lot of comments within their community forums.

There is a beta - but the issues are still existing. I wouldn't wait for a solution as they're trying a long long time.

64

23.1 Legacy Series / Re: The new unbound reporting is pretty cool

« on: January 31, 2023, 08:56:08 am »

Good to hear, thanks for testing! You can reset the DNS data in Reporting -> Settings -> Reset DNS data.

Hi. I can say that the patch works as it should! All nonsense requests gone within stats! Really nice job.

So will this patch make it into final or is there any other issue which has to be solved?

As a OPNsense newbie - what do I have to do if it will make it into a official patch release? Deleting the patch and updating OPNsense - or just do nothing?

65

23.1 Legacy Series / Re: The new unbound reporting is pretty cool

« on: January 30, 2023, 07:20:28 pm »

And report back if the number of queried PTR records is reduced.

Just to report back - the number went to nearly zero. The patch is working perfectly!

But how can I reset stats to get rid of all these earlier PTR records within my top domains.

66

23.1 Legacy Series / Re: The new unbound reporting is pretty cool

« on: January 30, 2023, 05:16:37 pm »

...
and optionally reset the DNS data, but restarting Unbound.

Thx. Will test it. Patch applied and Unbound restarted. But how do I reset the DNS data of the new Unbound Interface?

67

23.1 Legacy Series / Re: The new unbound reporting is pretty cool

« on: January 30, 2023, 04:04:23 pm »

Hi.

I also really love the new unbound reporting feature. And if that's only the beginning I'm really looking forward for more to come. Thx for that!

I do have one issue within my stats.

It's showing a lot of

Code: [Select]

localhost PTR 10.1.168.192.in-addr.arpa. Pass Local-data NOERROR 0ms 0 None.... messages.

192.168.1.10 is my notebook within the network - and actually the only device, as it's a testing setup for OPNsense.

It's by far No. 1 within my top passed domains.

What am I doing wrong?

68

23.1 Legacy Series / 23.1 fresh install - password change within installer not working | breaks

« on: January 30, 2023, 04:00:12 pm »

Hi,

when installing 23.1 via installer at the end of the process it asks if I want to change default password. If I enter a new one twice the installer stops doing anything only that blueish screen. Have to press CTRL+c to get back to the installer session. Trying again will be the same issue.
Only reboot and changing Password via command line or installer wizard within GUI does work.

69

23.1 Legacy Series / Re: flowd_aggregate.py vacuum done Messages within general log files

« on: January 30, 2023, 03:53:09 pm »

Thx for your feedback. Understand!

70

23.1 Legacy Series / flowd_aggregate.py vacuum done Messages within general log files

« on: January 30, 2023, 03:28:54 pm »

Hi,

within my general log files within system I do get those message:

Code: [Select]

Notice flowd_aggregate.py vacuum done
Notice flowd_aggregate.py vacuum interface_086400.sqlite
Notice flowd_aggregate.py vacuum interface_003600.sqlite
Notice flowd_aggregate.py vacuum interface_000300.sqlite
Notice flowd_aggregate.py vacuum interface_000030.sqlite
Notice flowd_aggregate.py vacuum dst_port_086400.sqlite
Notice flowd_aggregate.py vacuum dst_port_003600.sqlite
Notice flowd_aggregate.py vacuum dst_port_000300.sqlite
Notice flowd_aggregate.py vacuum src_addr_086400.sqlite

What are those kind of messages and why do they appear? Something going wrong?

71

German - Deutsch / Re: zugemülltes Log seit 23.1

« on: January 30, 2023, 08:53:41 am »

Hi.

Ja. Bei mir sieht das im Log ähnlich aus.

Weiter kommen auch viele Meldungen mit

Code: [Select]

Notice flowd_aggregate.py vacuum src_addr_details_086400.sqlite
Notice flowd_aggregate.py vacuum dst_port_086400.sqlite
Notice flowd_aggregate.py vacuum interface_000030.sqlite

usw.

72

Documentation and Translation / Re: AdGuard Home setup guide

« on: January 28, 2023, 10:00:11 am »

Opnsense 23.1 Install:

1 - Activate mimugmail's community repository:

SSH Opnsense: fetch -o /usr/local/etc/pkg/repos/mimugmail.conf https://www.routerperformance.net/mimugmail.conf

2 - Install AdGuardHome from System --> Firmware --> Plugins

3 - Opnsense - System - Settings -General

      DNS Servers: empty

      Untick: Do not use the local DNS service as a nameserver for this system

      Untick: Allow DNS server list to be overridden by DHCP/PPP on WAN

4 - Services – DHCPv4 – [LAN] : DNS Servers all empty

5 – Opnsense – Services - Unbound DNS – General

       Tick: Enable Unbound ( Listen Port: 5353 )

     ….

Don‘t use port 5353 as it‘s used by mDNS service!!!

73

German - Deutsch / Umstieg auf OPNsense - VF Station Bridge Mode und IPv6 auf einmal aktiv - Hilfe.

« on: January 24, 2023, 04:47:11 pm »

Hi,

nachdem ich nach langem testen und vorbereiten nun den Switch gemacht habe von UniFi zu OPNsense und diese direkt an meine Vodafone Station (Bridge Mode) angeklemmt habe, merke ich auf einmal, dass bei mir auch IPv6 läuft!

An sich sehr gut - doch bin ich gerade damit ein wenig "überrannt" worden und weiß nicht genau, was ich jetzt tun muss, damit ich es absichere bzw. auch gescheit einstelle.

Im Grunde habe ich nichts gemacht, außer dass es wirklich direkt läuft.

Ist da irgendwas schief gelaufen oder ist das richtig so?

Dachte, dass die Vodafone Station im Bridge Mode nur IPv4 kann?

Und was muss man genau alles einstellen, damit es gut und sicher läuft?

74

German - Deutsch / Re: Eure geschätzte Meinung zu meinem Standard-Setup.

« on: January 20, 2023, 12:23:11 pm »

nutzt Du dann zu Hause gar kein Zenarmor, sondern nur AdGuard Home mit BIND und das war's?

Exakt. Wozu braucht man mehr?

Danke Dir - ich mag die klaren und richtigen Aussagen sehr  Aber so ist es auch - man sollte es einfach nicht zu komplex machen.
Schön, dass hier so lernen zu können - das Forum und das Feedback ist wirklich super in der Sache und noch ein großer Mehrwert eben doch OPNsense zu nutzen als andere Varianten.

Mit dem neuen 23.1 Release werden die Unbound Blocklists ja ein wenig ausgebaut. Das bezieht sich aber denke ich nur auf eine Ansicht/Übersicht, oder?
Oder ist das dann direkt schon ein vollwertiger Ersatz für AGH der da vor der Tür steht?

75

German - Deutsch / Re: Eure geschätzte Meinung zu meinem Standard-Setup.

« on: January 20, 2023, 10:43:18 am »

@Thomas_L ich benutze AdGuard Home zum Blocken von Trackern und Malware.

Hi Patrick,

nutzt Du dann zu Hause gar kein Zenarmor, sondern nur AdGuard Home mit BIND und das war's?

Bin am Überlegen, ob es mit Zenarmor ein großer Zugewinn ist, wenn man AGH schon hat?