Messages

2626

16.1 Legacy Series / Re: Routing apple Bonjour

« on: July 17, 2016, 05:51:10 pm »

This issue is fixable:

Yes it is in the man page: http://linux.die.net/man/5/avahi-daemon.conf
And it is in the ports: https://github.com/opnsense/ports/tree/master/net/avahi

Maybe Franco can build the package for you.

Kind regards

Fabian

2627

General Discussion / Re: Question about ad blocking.

« on: July 16, 2016, 12:58:09 pm »

First of all: Intrusion detection is a really bad idea because you would block a lot of websites.
A subset of rules would work with the URL filter - the cosmetic filters will not work on the proxy because it does not parse the HTML. This can be done via an ICAP-Service.

2628

General Discussion / Re: OPNSENSE HELP

« on: July 16, 2016, 11:08:11 am »

You can use another server as a proxy as well. Just make sure it is reachable by your hosts and that it is working. You will have to write the configuration file by yourself or copy your current configuration from your firewall.

If you used a transparent proxy on your firewall, you will have to update the rules as well.

2629

16.7 Legacy Series / Re: Firewall rules error

« on: July 13, 2016, 10:07:21 pm »

this looks like a nat rule where the source is IPv4 and the destination is IPv6

2630

16.7 Legacy Series / Re: Ipsec

« on: July 12, 2016, 03:27:02 pm »

at least it looks possible: https://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig

2631

Documentation and Translation / Some issues with the japanese and chinese translation

« on: July 11, 2016, 11:54:38 am »

Hi,

there is an issue with the Japanese and Chinese translation. The way to fix it: Install an additional font.
If you are using it on a system where the font is not installed, the page may look empty.

The question is, how this issue should be fixed. Does anyone know an open source font which can be used or have another idea?

Kind regards,

Fabian

2632

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 07:28:55 pm »

Maybe this link can help: https://serverfault.com/questions/609572/pfsense-openvpn-dns-resolution

2633

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 07:20:27 pm »

Wenn die Computer die Clients sind, dann kannst du den DNS-Server in der Konfiguration des OpenVPN-Servers eintragen. Hier muss dann die IP des DNS-Servers eingetragen werden, der verwendet werden soll.

2634

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 02:56:00 pm »

Üblicherweise musst du das im DHCP-Server oder lokal am Host eintragen.

2635

16.1 Legacy Series / Re: e2guardian setup

« on: July 06, 2016, 10:20:40 pm »

You cannot see the URL when the user is using TLS because it is part of the request line: https://tools.ietf.org/html/rfc2616#section-5.1

2636

16.1 Legacy Series / Re: Transparent proxy - bypass for some LAN IPs

« on: July 06, 2016, 09:01:00 am »

Hi emilio,

can you add this host also to the "SSL no bump sites" as this looks like the ssl handshake fails.
Can you then connect to it and open it with a browser and check which cryptographic algorithms are used?

2637

General Discussion / Re: Web and Content Filter

« on: July 06, 2016, 08:52:15 am »

Here is the link to the docs: https://docs.opnsense.org/manual/how-tos/proxywebfilter.html

2638

General Discussion / Re: A Proxy Server Question.

« on: July 03, 2016, 09:07:03 am »

This links may answer your last question:
https://tools.ietf.org/html/rfc2616#section-14.45
https://en.wikipedia.org/wiki/X-Forwarded-For

2639

16.7 Legacy Series / Re: Suggestion: provide ChangeLog on the website

« on: July 02, 2016, 10:58:52 pm »

You can import the blog into your feed reader: https://opnsense.org/feed/

2640

16.1 Legacy Series / Re: OPNsense on Secure Digital Firewall hardware

« on: July 02, 2016, 10:23:34 pm »

Depends on how much I/O per second you need - for me it works (for home usage). This is an answer you will have to answer by yourself as this depends on factors like usage, amount of users (network size), content to cache etc.

Fabian