Messages

241

General Discussion / Re: OPNsense on Dell Optiplex 7040

« on: April 16, 2024, 07:11:57 pm »

Just an FYI, I no longer recommend anything older than Intel i350 cards. My older Pro1000 based cards all seem to slow down a little when I get all four ports active. When you can catch them, the price difference isn't all that much. I waited a while and got 2 used Intel i350 cards for $35usd shipped.

Else look for i225 or i226 cards which are often around $50usd used and $80+ new. You can buy 10Gtek i350 cards for $80 new, I have one but only very short testing so far, destined for my production OPNsense system when I get a little time to finish building it and putting it into service, probably with Business license.

BIG WARNING! Look out for counterfeit cards! There are some posts about this on the web and revolve around looking at the isolation devices (DELTA) and power supply components.

242

Zenarmor (Sensei) / Re: why is eastpect locked to a single core

« on: April 16, 2024, 03:35:13 pm »

I'm going to throw this out there...

As much as I want multithreaded performance, I also want it to be done right! Please don't rush something that immediately breaks when it gets in the hands of people like me with hardware you could never test on. Please just make it right the first time. Just raise the priority a little if possible.

243

24.1 Legacy Series / Re: Swapping NIC types?

« on: April 15, 2024, 04:31:13 pm »

If going from Intel to Realtek, I'd load the realtek pluggin drivers before shutting down the Intel card. If going the other way, you should be good after VGA, SSH, or alternate http port to get in and reassign the ports.

244

General Discussion / Re: OPNsense on Dell Optiplex 7040

« on: April 12, 2024, 07:08:25 pm »

Well, that makes sense in versioning. 

245

General Discussion / Re: OPNsense on Dell Optiplex 7040

« on: April 12, 2024, 03:43:49 pm »

14 will be newer, that's how the release numbers go.

246

Intrusion Detection and Prevention / Re: Seeking Guidance on Deep Packet Inspection Research

« on: April 12, 2024, 03:39:47 pm »

You may also want to look at the Zenarmor product and some of the guides that they publish.

247

24.1 Legacy Series / Re: changing IP address of OPNsense

« on: April 12, 2024, 03:34:49 pm »

Few things are 1 minute jobs anymore, lucky to get most down to 1 hour in my work day.

Off topic example: Wanted to set up Kasm server on Debian 12. I have a few Debian 12 VMs running on my system and it should be easy for me now (not strong in linux). it took me 4 hours with interruptions just to get the basic Debian set up with UFW, XRDP and a few other configuration items.

Using Kasm I set up a FOG server from home to test. Took 20 minutes to have Debian set up, took another hour and a half to get back to basic Debian install after messing it up many times. And now I have Kasm and FOG to learn (prepping for Windows 11).

248

24.1 Legacy Series / Re: changing IP address of OPNsense

« on: April 11, 2024, 03:17:02 pm »

This was a lot easier on pfsense, only the LAN/WAN/OPT had an IP assigned, everything else was assigned by the name. I'll have to dig into the config file a little deeper before I suggest this again.

But in theory, if you do a find/replace on all of the IP address, you should be working.

249

24.1 Legacy Series / Re: changing IP address of OPNsense

« on: April 10, 2024, 04:44:25 pm »

I have done this for an internal Opnsense router, assigning its management LAN port 10.a.b.1 rather than 192.168.1.1. I found the least error path was to plan the assignments then do it in initial setup.

Me too. In theory you can also edit the backed up config file with the changes needed, then load this from VGA or SSH.

250

24.1 Legacy Series / Re: When does opnsense-business get updated to 24.1

« on: April 09, 2024, 03:21:13 pm »

Thanks, I'll have to keep that in mind. I'm probably going to keep the CE version on my test router, and build a new Business version on the server that will eventually be my longer term production router. Test is doing the job fine, but I want that computer back for other things.

251

24.1 Legacy Series / Re: changing IP address of OPNsense

« on: April 09, 2024, 03:18:50 pm »

You can log into the router from a different port, even a USB adapter would be good enough for this (if supported), then change everything with the LAN that you need to change.

252

24.1 Legacy Series / Re: Automatic Firmware Updates

« on: April 08, 2024, 07:39:28 pm »

I'll simply say that I'm not going to do this. I still haven't had the chance to update to the latest fixes, and those fixes don't apply so they will wait a bit.

If it is a security breach, then yes I will update immediately to try and prevent it from happening to me. One of those, it depends.

I do have my Windows workstation auto update, but my servers are manual update. I schedule every second Wednesday of the month to go through and start the patching of the servers. Most zero day stuff I'll hear about and start looking for a patch immediately.

253

General Discussion / Re: Clarity on Amount of Data Written to Disk - 200GB/Week?

« on: April 08, 2024, 04:01:09 pm »

If you have the RAM, you can also enable a ramdisk for a lot of this stuff, but I forget the exact steps.

254

General Discussion / Re: HDMI output stopped - how to debug?

« on: April 08, 2024, 03:57:32 pm »

I'm going to guess that you have more than 1 video connection available and it is defaulting to the other connections. If you connect to output 1 it might not do this. That said it might also be in BIOS.

My HP T740 does not do this, but I have a display port to VGA adapter on port 1, but my KVM switch might also handle the dummy duties too.

255

Hardware and Performance / Re: How do I run a hardware memory test to find bad memory cells?

« on: April 08, 2024, 03:53:39 pm »

I know this isn't an option for everyone, but if you suspect some RAM, then it might be worth just replacing it. I've never had much luck with memtest finding issues, but replacing has normally cured the problems.