Messages

46

Hardware and Performance / Re: Add mirrored drive to existing ZFS install

« on: July 12, 2022, 03:40:36 pm »

, your OmniOS example seems to be Sparc? At least the device names hint at that.

Nope - OmniOS is pure x64. I think SPARC is only catered for by Triblix.

47

Hardware and Performance / Re: Add mirrored drive to existing ZFS install

« on: July 12, 2022, 08:42:18 am »

But in general you need

- an EFI boot partition or
- a legacy boot loader partition
- a swap partition

all outside of ZFS.

Thanks - I'm more familiar with OmniOS, which as far as I am aware does not use partitions and where you would just "install" the bootloader after "attaching" a second disk (https://omnios.org/info/migrate_rpool.html). That's Illumos and not *BSD, though.

48

Intrusion Detection and Prevention / Re: suricata blocklist

« on: July 12, 2022, 08:36:43 am »

Not what you are looking for exactly, but you can lock.all.known IP Blocklists via a firewall URL alias. Requires less performance than IDS.

49

Intrusion Detection and Prevention / Re: How to block ET CINS Active Threat Intelligence Poor Reputation?

« on: July 12, 2022, 08:26:11 am »

Getting the policy to drop properly would be ideal for me since the list gets updated from time to time. I frequently need to access the network from random locations and machines so I cant just blot out whole IP ranges or restrict to certain devices.

I don't get this - what difference does it make it traffic is blocked or dropped?

The URL alias gets updated automatically too, you know ...

50

Hardware and Performance / Re: Power consumption reduction with powerd++

« on: July 12, 2022, 08:18:14 am »

Have you found a way to make this stick / be applied on each boot? It seems that manually changing it does not survive a reboot /upgrade

51

Hardware and Performance / Re: intel_speed_shift.default_epp being ignored on boot

« on: July 12, 2022, 08:16:50 am »

Also note that depending on your CPU, sysctl dev.hwpstate_intel.0.xyz may not work - on my i5250u, it doesn't :-(

Code: [Select]

root@OPNsense:~ # sysctl dev.hwpstate_intel.0
sysctl: unknown oid 'dev.hwpstate_intel.0'

52

Hardware and Performance / Re: Add mirrored drive to existing ZFS install

« on: July 11, 2022, 06:09:32 pm »

This looks horrible from a ZFS perspective :-)

Does FreeBSD really set up partitionson disk  instead of datasets in a ZFS pool?

I would have thought that basically the following should suffice:

Code: [Select]

Zpool attach zroot gpt/whateveryourdrivenameis

53

German - Deutsch / Re: [GELÖST] os-monit rootFS überwachung funktioniert nicht

« on: June 28, 2022, 07:36:29 pm »

Habe diese Fehlermeldung nun auch erstmalig, nach Update auf 22.19_1. alle 2 min.

2022-06-28T19:33:21   Error   monit   'RootFs' unable to read filesystem '/' state   
2022-06-28T19:33:21   Error   monit   Filesystem '/' not mounted   

habe ein neues Boot environment eingerichtet für das Update, das hatte ich für alle 22.1.x updates aber auch schon gemacht.

54

German - Deutsch / Re: [GELÖST] os-monit rootFS überwachung funktioniert nicht

« on: June 28, 2022, 07:32:41 pm »

Habe diese Fehlermeldung nun auch, nach Update auf 22.19_1.

55

Hardware and Performance / Re: Thunderbolt 3 Ethernet Adapters

« on: May 26, 2022, 12:05:15 pm »

Try this one (A+E key for m.2): https://www.amazon.de/NGFF-Gigabit-Ethernet-Chipset-Intel/dp/B09NYMCCMG

56

22.1 Legacy Series / Re: Very confusing incoming blocked logs

« on: May 26, 2022, 12:02:11 pm »

I often see erroneous log messages, and think the logging GUI may be broken.

E.g., the log will show traffic from my local 192.168.x.x to a public IP being blocked by the default deny/state violation rule. That should trigger on WAN in traffic only though, so something is amiss. (I reckon the display is erroneous - this error seems prevalent after changing the firewall rules)

57

22.1 Legacy Series / Re: Alias based firewall rules doesn't work after upgrade to 22.1.8

« on: May 26, 2022, 11:59:39 am »

Only issue I noticed is that the crowdsec aliases remain empty. That may be a crowdsec issue of course.

58

22.1 Legacy Series / Re: Dynamic DNS - Cloudflare

« on: May 25, 2022, 10:13:00 pm »

A temporary fix has been posted on GitHub: https://github.com/opnsense/plugins/issues/2842#issuecomment-1134831981

59

22.1 Legacy Series / Re: Alias based firewall rules doesn't work after upgrade to 22.1.8

« on: May 25, 2022, 10:11:12 pm »

Have you reported this as a bug on GitHub? If not please do - sounds like a bug and that will get resolved earlier if a GitHub report is made.

60

Hardware and Performance / Re: Thunderbolt 3 Ethernet Adapters

« on: May 23, 2022, 05:33:45 pm »

The Kalea one on Amazon seems cheaper:
[Wrong link, see below]