Messages

, your OmniOS example seems to be Sparc? At least the device names hint at that.

Nope - OmniOS is pure x64. I think SPARC is only catered for by Triblix.

But in general you need

- an EFI boot partition or
- a legacy boot loader partition
- a swap partition

all outside of ZFS.

Thanks - I'm more familiar with OmniOS, which as far as I am aware does not use partitions and where you would just "install" the bootloader after "attaching" a second disk (https://omnios.org/info/migrate_rpool.html). That's Illumos and not *BSD, though.

Not what you are looking for exactly, but you can lock.all.known IP Blocklists via a firewall URL alias. Requires less performance than IDS.

Getting the policy to drop properly would be ideal for me since the list gets updated from time to time. I frequently need to access the network from random locations and machines so I cant just blot out whole IP ranges or restrict to certain devices.

I don't get this - what difference does it make it traffic is blocked or dropped?

The URL alias gets updated automatically too, you know ...

Have you found a way to make this stick / be applied on each boot? It seems that manually changing it does not survive a reboot /upgrade

Also note that depending on your CPU, sysctl dev.hwpstate_intel.0.xyz may not work - on my i5250u, it doesn't :-(

Code Select Expand

root@OPNsense:~ # sysctl dev.hwpstate_intel.0
sysctl: unknown oid 'dev.hwpstate_intel.0'

This looks horrible from a ZFS perspective :-)

Does FreeBSD really set up partitionson disk  instead of datasets in a ZFS pool?

I would have thought that basically the following should suffice:

Code Select Expand

Zpool attach zroot gpt/whateveryourdrivenameis

Habe diese Fehlermeldung nun auch erstmalig, nach Update auf 22.19_1. alle 2 min.

2022-06-28T19:33:21   Error   monit   'RootFs' unable to read filesystem '/' state   
2022-06-28T19:33:21   Error   monit   Filesystem '/' not mounted   

habe ein neues Boot environment eingerichtet für das Update, das hatte ich für alle 22.1.x updates aber auch schon gemacht.

Habe diese Fehlermeldung nun auch, nach Update auf 22.19_1.

Try this one (A+E key for m.2): https://www.amazon.de/NGFF-Gigabit-Ethernet-Chipset-Intel/dp/B09NYMCCMG

I often see erroneous log messages, and think the logging GUI may be broken.

E.g., the log will show traffic from my local 192.168.x.x to a public IP being blocked by the default deny/state violation rule. That should trigger on WAN in traffic only though, so something is amiss. (I reckon the display is erroneous - this error seems prevalent after changing the firewall rules)

Only issue I noticed is that the crowdsec aliases remain empty. That may be a crowdsec issue of course.

A temporary fix has been posted on GitHub: https://github.com/opnsense/plugins/issues/2842#issuecomment-1134831981

Have you reported this as a bug on GitHub? If not please do - sounds like a bug and that will get resolved earlier if a GitHub report is made.

The Kalea one on Amazon seems cheaper:
[Wrong link, see below]