Topics

1

Zenarmor (Sensei) / number of policies in home subscription

« on: August 11, 2023, 03:04:54 pm »

Can we only have two policies in addition to default in home subscription? I have default, vlan and vpn. If I try to add another I get a warning that I have exceeded my plan.

I guess it does not matter since I can't get the vpn interface detected.

2

Zenarmor (Sensei) / route vpn through zenarmor

« on: August 08, 2023, 02:45:40 pm »

Is it possible to route my Openvpn traffic from my client (open vpn for android)?

If it's possible, how to configure it?

Thanks,
Terry

3

23.7 Legacy Series / unbound ssl crypto error

« on: August 06, 2023, 11:12:52 pm »

I have OPNsense 23.7 running on a Dell Optiplex. Unbound is configured and working with DNS over TLS.




I am getting: error: remote control failed ssl crypto error:00000000:lib(0):func(0):reason(0)




Also, I have these DHCP errors, I don't know if they are related. Probably not:





My devices all connect without issue and DNS resolves. But I would like to correct the cause of these errors.

Any help would be appreciated

4

Zenarmor (Sensei) / Zenarmor database update schedule

« on: June 24, 2022, 05:57:18 pm »

I'm curious what the update schedule is for the free version of Zenarmor. My install has rules version 1.11.22050910, is this the latest?
Last update was June 3.
Thanks

5

General Discussion / redirect dns

« on: May 25, 2022, 04:17:07 pm »

I have a port forward redirect rule for DNS. I can see in the logs that the rule works. However, some DNS continues to go out from the WAN, to servers that are not what I have setup in Unbound.
I am referring to the 8.8.8.8 destination in the picture.
How do I set up OPNsense to only allow the DNS server I specify?

Edit: I noticed the packets I am seeing are ICMP packets, not DNS lookups. 

6

General Discussion / unknown lan address in statistics

« on: May 06, 2022, 07:04:56 pm »

When I view traffic in reporting I see 192.168.6.120 making a connection to Amazon.com among other sites. But, 192.168.6.120 is not listed as a lease in Unbound. So, where is this address assigned from and who is it?

7

General Discussion / critique my setup

« on: April 26, 2022, 03:26:19 pm »

I have installed OPNsense 22.1.6 and setup three interfaces. WAN, LAN and IOT.

Since I am relatively new to firewall rules I would like some feedback on my setup. My goal is to have my computers and cell phones on the LAN and internet of things (Roku, Firestick and Amazon Plugs) on IOT. LAN can access IOT, but IOT is blocked from LAN.

My setup works, but is it correct and secure?