Messages

2596

16.7 Legacy Series / Re: Cant setup webserver from behind opnsence

« on: September 08, 2016, 11:47:40 am »

I have not read the full post but it could be a routing issue (if you have the same network on lan and wan). In such a case it does not know that those are different networks and it can be sent to the wrong one. It could be fixed by changing the network part of the address (for example by increasing the number in the 3rd byte by one if you use a /24 network).

2597

16.7 Legacy Series / Re: Replacing Watchguard XTM2

« on: September 07, 2016, 06:24:46 pm »

For the RAID question: https://github.com/opnsense/ports/issues/24

2598

17.1 Legacy Series / Re: Idea(s) for the road map

« on: September 07, 2016, 11:26:26 am »

The road map is now online: https://opnsense.org/about/road-map/

2599

16.7 Legacy Series / Re: Why are some outbound connections being blocked?

« on: September 06, 2016, 06:55:28 pm »

I am sorry but I cannot help in that case - maybe franco or ad can. Maybe they will need your /tmp/rules.debug

2600

16.7 Legacy Series / Re: Why are some outbound connections being blocked?

« on: September 06, 2016, 05:28:06 pm »

This should work if the AP is connected on the right interface and the device gets the right interface assigned. Can you check if you connected it to GUEST_LAN?

2601

16.7 Legacy Series / Re: Why are some outbound connections being blocked?

« on: September 06, 2016, 04:48:44 pm »

Sorry but I am confused about your post (I am not sure how your setup looks like). I did not have to create a single NAT rule for the usual stuff because with the default settings this works out of the box. The only NAT rules I configured are used for the transparent proxy. Filtering is done by the firewall.

Can you post your firewall rules and your NAT rules as well as the information if the private addresses are blocked?

2602

16.7 Legacy Series / Re: Why are some outbound connections being blocked?

« on: September 06, 2016, 02:27:55 pm »

You don't have a rule to pass the traffic so it is blocked. Look at your firewall rules

2603

16.7 Legacy Series / Re: Help with OpenVPN and StartCom SSL certificates

« on: September 06, 2016, 02:23:53 pm »

I am using a self signed CA for that (should be in System > Trust). This CA signs a server certificate for the OpenVPN Server and at least one client certificate. After you set up the server you can download a configuration file generated for your client to use it with the server. This usually works. I did never use the wizard to create it. Can you retry it without the wizard?

Kind regards,

Fabian

2604

General Discussion / Re: SNMP, router status updates available

« on: September 05, 2016, 11:45:08 am »

I am not aware of such an oid but you can use the API for that.

You can find a samples here:
https://docs.opnsense.org/development/how-tos/api.html

2605

16.7 Legacy Series / Re: DHCPv4 server API

« on: September 01, 2016, 08:48:35 pm »

The answer is no.

2606

17.1 Legacy Series / Re: [CALL FOR TESTING] Phalcon 3.0

« on: September 01, 2016, 10:50:47 am »

Hi Franco,

have not tested a lot with 3.0.1 but did not recognise any difference to 3.0.0.

Kind regards

Fabian

2607

German - Deutsch / Re: Update Accelerator einfach durch Einstellungen realisierbar?

« on: August 31, 2016, 07:05:59 pm »

Als Plugin gibt es das nicht, aber du kannst versuchen, das mit der Squid config irgendwie hinzubekommen indem du zumindest Debian-Pakete im Cache zwischenspeicherst. Out of the Box geht das nicht.

Folgende Seiten helfen dir:
* http://www.squid-cache.org/Doc/config/refresh_pattern/
* https://forum.opnsense.org/index.php?topic=3595.msg12105#msg12105

2608

German - Deutsch / Re: Update Accelerator einfach durch Einstellungen realisierbar?

« on: August 31, 2016, 12:04:37 pm »

Vielleicht hilft dir das hier: https://wiki.ubuntuusers.de/Lokale_Paketquellen/apt-cacher/

2609

German - Deutsch / Re: Transparenten Proxy (auch https) ausprobiert und mächtig enttäuscht

« on: August 31, 2016, 11:47:08 am »

Bei Android solltest du in den Systemeinstellungen die Zertifikate importieren können.
Bei mir geht das unter Einstellungen -> Sicherheit -> Von Speicher installieren

2610

German - Deutsch / Re: Webfilterprofile

« on: August 30, 2016, 01:22:53 pm »

Wieso greifen die inkludierten Regeln nicht?

Ohne http_access tut eine acl in deinem Fall nichts.

Müssten die vor den "ICAP SETTINGS" stehen?

nein