Messages

There must be something I can do to troubleshoot this...?  I'm following the guide and there really isn't much to it.   Is there something I can check via cli?

Anyone got any kind of idea on this?

No but I'll give it a go. Is it another DNS server or sepeerate?  I'm already running pihole on a server and dnsmasq&unbound on the firewall

Hi,

I've set up the TOTP server, created a user and generated a TOTP which I've added to google authenticator using the QR code. 
If i go to the tester, select TOTP and login with

<username>
<password><OTP>
ie
thefunkygibbon
password789412

it always says i've gotten the creds wrong.  (also tried the OTP in front of the password... makes no difference)

Is there some other setting to use to ensure it works?

Both my firewall/phone/laptop are all using the correct time/timezone/date

I can't be the only person who wanted to do this? am i??

can you access the firewall still? does it show the IP you expect it to show in the interfaces part of the main dashboard?
what did you change on the firewall before you rebooted and it stopped working?  what provides the internet?  a cable modem/dsl model or something?  can you reboot that too, maybe its not picked up the IP address again. I've had that sometimes with my crappy ISP provided cable modem

Hi
I've gone through the process of creating the client openvpn to my vpn provider the tunnel is up. Great.

The next step is to only send everything via the VPN if I am using the opnsense Web Proxy.   
But I can't seem to work out how to do that, or if it is indeed possible (feels like it should be something that is)
There doesn't appear to be a way of  assigning an outbound interface for the proxy. 
I thought I could create a rule with the source being the firewalls IP.  But that didn't work as there is already an implied rule which supersedes it which allows traffic outbound from the FW normally through the default gateway.  :-(

Any pointers for the best ways to do this would be appriciated.
Thank you

thats what i've been doing previously with the likes of pihole.  but the downsides of it are that a) the settings are global for everyone on the network and b) if someone changes their dns settings they can get around it

great. I restarted openvpn service anyway and checked the interfaces and i now see ovpnc1 etc.  thanks. will carry on trying to get this set up shortly.  thanks :)

great stuff.  just done it. does it need a reboot or any services restarting to take effect?

Code Select Expand

opnsense-patch 5f6b380a33
Fetched 5f6b380a33 via https://github.com/opnsense/core
Hmm...  Looks like a unified diff to me...
The text leading up to this was:
--------------------------
|From 5f6b380a336f72dd058f495fb27d3734ab1beedd Mon Sep 17 00:00:00 2001
|From: Franco Fichtner <franco@opnsense.org>
|Date: Wed, 9 Feb 2022 09:03:32 +0100
|Subject: [PATCH] interfaces: get_interface_list() must exclude OpenVPN
|
|---
| src/etc/inc/util.inc | 2 ++
| 1 file changed, 2 insertions(+)
|
|diff --git a/src/etc/inc/util.inc b/src/etc/inc/util.inc
|index 0bf05060be..2546147bb3 100644
|--- a/src/etc/inc/util.inc
|+++ b/src/etc/inc/util.inc
--------------------------
Patching file etc/inc/util.inc using Plan A...
Reversed (or previously applied) patch detected!  Assuming -R.Hunk #1 succeeded at 861.
done
All patches have been applied successfully.  Have a nice day.


Listen to me please as I explained it above.

Cheers,
Franco

?? sorry?  I understand that you pointed to some github code and you said it was a mess of a code.  I don't understand your reply to me implying that i should read what you wrote and understand it like it was some kind of fix or something? looking at the link , what that is to do with me wondering why am i the only person who could be experiencing/talking about this?

with respect, sending some backend code to a non-coder and expecting them to understand it doesn't go very far to understand what you are talking about.   

Yes it is latest version.
I can't be the only person who is using that and openvpn as a client though?? How would one even use openvpn client if it wasn't the way that I'm being told to set it up? 

Hi

I've gone through the process of setting up a ovpn client vpn to my provider.  This is connecting fine (apparently.. haven't manage to actually test it yet).    But i'm at a point in the guides I have found that I should be creating an interface 'ovpnc0' (so, presumably I can route certain traffic down that interface) but when I go to interface assignments and try to create a new interface, there isn't one there with that name.  Has something changed in the latest builds of OPNsense or is something just broken on my setup somehow?

thanks

did you get anywhere with finding a list?

Thanks, yeah I already tried to 'reverse' the config of netflow so its not monitoring anything. but alas the numbers keep on incrementing.

But i've just rebooted (updates) and it seems to have stopped now, unsurprisingly.  Bit concerning that there doesn't seem to be an easy way of turning something off though.  :o