Messages

1

24.7 Production Series / Is it possible to change interface colors in the Interface Statistics widget?

« on: August 08, 2024, 08:20:52 pm »

I have a couple that are the same color and would like to change them if that's possible?

2

Zenarmor (Sensei) / Live Sessions empty after reinstalling OPNsense and restoring Zenarmor config?

« on: August 08, 2024, 05:00:12 pm »

***********Disregard...after about 15 minutes they just appeared.*************

I accidently installed using ZFS when I installed OPNsense on Proxmox so I just reinstalled.

I restored a backup of Zenarmor, however, I'm not seeing any sessions in Live Sessions under any tab.

What can I look at to troubleshoot?

My subscription is reporting as being active and I have the LAN interface selected correctly.

3

24.7 Production Series / Re: 24.7 Memory Widget

« on: August 08, 2024, 03:41:32 pm »

I’m guessing then that my best option is to create a new VM with UFS and import the config, correct?

4

24.7 Production Series / Re: 24.7 Memory Widget

« on: August 08, 2024, 04:15:27 am »

Data corruption, especially prevalent in sqlite database. Random issues with kernel update and reboot losing the kernel. No ability for snapshots. If you don't mind these issues you can use UFS.

Note with 24.7 we more or less recommend ZFS by default now although it is heavier on SSDs than it should be.


Cheers,
Franco

Do you still recommend ZFS if it’s a VM on Proxmox that’s already using ZFS?

5

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: July 18, 2024, 08:39:02 pm »

As a side note you may want to check the Status page under VPN --> WireGuard to make sure the tunnels are actually working as even though the Gateway was showing as being "Up" the tunnel wasn't actually working as there wasn't a value for the Handshake, Send, or Received columns I figured out.

I was wondering why pages going out over the tunnels would sometimes load and sometimes wouldn't and that's why.

After changing to different servers they're all up and passing traffic now.

6

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: July 16, 2024, 02:07:40 am »

@umbramalison

In looking at this I kind of wonder if the IP used on the WireGuard Instance doesn't matter at all since Proton reassigns it when you connect?

https://web.archive.org/web/20240222160434/https://protonvpn.com/support/wireguard-privacy/

7

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: July 16, 2024, 12:43:59 am »

Yeah I have no idea why it works. I just know that it does.

8

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: July 15, 2024, 07:58:52 pm »

@umbramalison

I have 3 tunnels running for a Gateway Group and you can't have 3 WireGuard instances running with the same Tunnel Address so that's why I had to change them.

9

Zenarmor (Sensei) / Re: Custom device categories?

« on: April 22, 2024, 10:13:51 pm »

Okay…thanks!

No worries on missing what I was asking.

I’ll wind up using an unused category then I think for my Admin devices.

10

Zenarmor (Sensei) / Re: Custom device categories?

« on: April 22, 2024, 09:53:32 pm »

I must be blind as I can't seem to find how to enter new ones as the dropdown list on individual device property screens isn't editable and I can't find anything about colors anywhere.

Do you happen to have a link to documentation for this?

This is all I can find - https://www.zenarmor.com/docs/opnsense/devices/viewing-devices#category-based-device-listing

11

Zenarmor (Sensei) / Custom device categories?

« on: April 22, 2024, 09:07:22 pm »

Is this possible in the Home license as I'd like to create an "Admin" category to use in policies?

12

Intrusion Detection and Prevention / Unchecking "Enabled" on a policy doesn't stop it from processing

« on: April 18, 2024, 02:19:37 am »

I just made the switch over from Untangle and I believe I found a bug as I made a "Default" policy to test with before making my real policies.

Once I had the real policies in place I just unchecked the "Enabled" checkbox and hit Apply.

It appears that I'm either doing something wrong, I need to restart the service, or there's a bug as the Alerts tab kept showing matches for this policy until I actually deleted it and hit Apply again.

Has anyone else experienced this?

13

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: April 15, 2024, 10:25:46 pm »

Try the images in my original post now as I moved to a new image hosting option.

14

Intrusion Detection and Prevention / Re: How to enable via Policy and Rules useful Suricata IDS Rules (SIDs)

« on: April 06, 2024, 10:45:03 pm »

I don’t have the option for the second plugin either.

15

Virtual private networks / Re: ProtonVPN Wireguard DNS

« on: April 05, 2024, 02:17:46 am »

I got it working!!!!

It involves setting up the WG tunnels correctly and a Port Forward rule, however, it's working beautifully on my devices.

WireGuard Instance Config:


Gateway Config Overview:


Gateway Config Detail:


Aliases:


Port Forward Rule: