Messages

its still collecting packets.    ::)

Hi,

I turned on netflow to try to troubleshoot some traffic flows earlier on but I cannot see a way of stopping it.. the 'cache' page has packet counts still going up and up and it was about half hour ago when i turned it on.   
Obviously I don't want it to run forever...  any pointers?

Cheers

yeah, that argument doesn't hold up.
I'm a member of plenty of discord/irc channels for different communities which have forums/subreddits.  it does not 'split' the community at all, they both offer completely different and complimentary routes to get help or chat.

I often see threads in both OPNsense subreddits and forums with different peoples and different (often wrong) answers. To me it feels wrong, but only my personal opinion

absolutely.  manners are key!

I think for the most part it really matters what the thing is that you need help with.   for example a firewall such as this, usually someone wants to advice THERE AND THEN.  they've likely (hopefully scoured all online resources) and is now requiring to chat to someone who has more of a clue than they do.   Its the next best thing to getting phone support really.  Often (especially with more niche things) it can take hours or days to get a reply.  (not saying its always massively quicker via chat... if noones around, noones around) Yes non essential things will still be posted on forums for all and sundry to benefit from.  and chat servers help with offloading the banter/rubbish posts which are better suited to a chat than a forum.
my 2p's worth.

wow ok cool thank you. that looks like it has made it work.  not sure which though as i created refection enabled rule to start with. these settings just turn it on by default doesnt it?

thanks. can you point me in the direction of where those tick boxes are in the ui?  thanks
:edit: found them, enabled them.  will test again.

yeah, that argument doesn't hold up.
I'm a member of plenty of discord/irc channels for different communities which have forums/subreddits.  it does not 'split' the community at all, they both offer completely different and complimentary routes to get help or chat.

Hi all,

New to OPNSense, but not new to Firewalls and UTM's etc. (although it's been some years since I did any web proxy/filtering jobs... things have moved on it seems in the last 10odd years!)

I'm a little confused about a bunch of things and I would really appreciate some advise.

Here are my take on things.  I'm assuming that I can't / shouldn't run most of these concurrently but i'd love to hear what everyone else is doing.

What I want -  Malicious/phishing/spam blocking, AV scanning, adblocking, Geoblocking.  Blocking on a per user/IP basis. Transparent rather than setting an explicit proxy.

• Web Proxy - Can do URL blocking and block all the above categories (dependant on having a URL blacklist... which i'm struggling to find other than 1 which doesn't appear to have many items in each category). 
  
  
• ClamAV - Can do AV obviously - relies on web proxy/caching to be in place.  so presumably can't work with zenarmor
  
  
• ZenArmor - Has most of the functionality I'd desire (except AV) but I'm not going to pay $100 a year for it)
  
  
• PiHole - Already run this on a docker image.  Working fine for the most part.
  
  
• OpenDNS - Used to use this, useful except it was a little slow to use and no way of differentiating between users.
  

So my question is, what would be the best/least expensive product/combination to get as much functionality as possible from my requirements above?  I am assuming that using multiples of the above is going to a) cause conflicts  b) cause confusion where you don't know what is blocking. 

Thanks in advance for your thoughts .

Thanks.
Yes Reflection is enabled for the port forward rule i created.
Not for 1:1 nat as i'm using portforwarding (only have 1 public IP) so nothing is in that tab at all.
Not sure where you mean with the automatic outbound nat for reflection.  I'm set to automatic outbound but there are no options for reflection there afaics

regards

https://github.com/pfelk/pfelk maybe?

cool thanks,  i've got a few other systems i wouldnt mind logging too too (such as docker, pihole, my wifi controller etc)  is this just for OPNsense or can you log other stuff to it too?

Was thinking of sticking some kind of log server on a docker container on my server... something maybe that has a decent presentation of the logs rather than just a plain old table of logs.
Maybe some fancy analytics?   Not sure if such things exist or if i'm going to have to just use something like plain ol syslog-ng ?

thanks in advance.

Ah brilliant. Changed to Intel (it's an atom cpu) and it tells me in the widget that all 4 cores are at around 42 degrees. Not too bad. Thank you.  I assume I can use monit to alert on this too?

Sent from my SM-G986B using Tapatalk

also, I've tested going down the dns route with internal dns resolving my url to be the internal address. but i still have issues with it getting a bit confused between being on the network and not. (ie when i fired up Home assistant, it said it couldn't connect (so clearly wasn't working properly despite being on the LAN for the last 12 hours) until i refreshed it and it was ok again. )

how is this a tutorial or faq? :-(

Hi,

I've just replaced my fan on my Caswell CAF-0260 (smoothwall s2) as the existing one was very loud.  The paranoia in me is now concerned that it might not be cooling as well as the previous one was. 

Is there any way of monitoring the temperature on OPNsense?  is it hardware dependant? 
I've searched forums and reading that you can find the temps out by running

Code Select Expand

sysctl -a | grep temperature
or sysctl -a | grep thermal


but i don't see much in there
other than
hw.acpi.thermal.tz0.temperature: 0.1C
hw.acpi.thermal.tz0._CRT: 94.1C
(bit concerned about the latter one, but the number doesn't seem to change, so i'm guessing its not an accurate readout of the actual temps)

any advice?

Thanks in advance

ok thanks. i'll try that then, i used it a few years ago and it wasn't amazing and only supported certain forums like phpBB.  will give it another shot.

out of interest , why don't you want to funnel your creds through your phone?  don't trust the app specifically or phones in general?  why not just use unique passwords for each forum account?