Messages

2656

Documentation and Translation / Re: italian traslate

« on: July 18, 2016, 07:19:41 pm »

Hi burghy,

you have to send an email to Franco with the username you want to get, the language and, if it is different, the email address you want to use.

Kind regards,

Fabian

2657

General Discussion / Re: Intrusion Detection Rules, should I activate all?

« on: July 17, 2016, 11:00:55 pm »

You should enable only the rules you need because all rules need to be processed so when you have more rules, you will also have more CPU load. Useless rules are bad for your overall performance without any advantage.

You should read the description and if the rules fits your needs, enable them. Otherwise just leave them disabled.

2658

16.1 Legacy Series / Re: Routing apple Bonjour

« on: July 17, 2016, 05:51:10 pm »

This issue is fixable:

Yes it is in the man page: http://linux.die.net/man/5/avahi-daemon.conf
And it is in the ports: https://github.com/opnsense/ports/tree/master/net/avahi

Maybe Franco can build the package for you.

Kind regards

Fabian

2659

General Discussion / Re: Question about ad blocking.

« on: July 16, 2016, 12:58:09 pm »

First of all: Intrusion detection is a really bad idea because you would block a lot of websites.
A subset of rules would work with the URL filter - the cosmetic filters will not work on the proxy because it does not parse the HTML. This can be done via an ICAP-Service.

2660

General Discussion / Re: OPNSENSE HELP

« on: July 16, 2016, 11:08:11 am »

You can use another server as a proxy as well. Just make sure it is reachable by your hosts and that it is working. You will have to write the configuration file by yourself or copy your current configuration from your firewall.

If you used a transparent proxy on your firewall, you will have to update the rules as well.

2661

16.7 Legacy Series / Re: Firewall rules error

« on: July 13, 2016, 10:07:21 pm »

this looks like a nat rule where the source is IPv4 and the destination is IPv6

2662

16.7 Legacy Series / Re: Ipsec

« on: July 12, 2016, 03:27:02 pm »

at least it looks possible: https://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig

2663

Documentation and Translation / Some issues with the japanese and chinese translation

« on: July 11, 2016, 11:54:38 am »

Hi,

there is an issue with the Japanese and Chinese translation. The way to fix it: Install an additional font.
If you are using it on a system where the font is not installed, the page may look empty.

The question is, how this issue should be fixed. Does anyone know an open source font which can be used or have another idea?

Kind regards,

Fabian

2664

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 07:28:55 pm »

Maybe this link can help: https://serverfault.com/questions/609572/pfsense-openvpn-dns-resolution

2665

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 07:20:27 pm »

Wenn die Computer die Clients sind, dann kannst du den DNS-Server in der Konfiguration des OpenVPN-Servers eintragen. Hier muss dann die IP des DNS-Servers eingetragen werden, der verwendet werden soll.

2666

German - Deutsch / Re: Bereits vorhandenen DNS Server nutzen

« on: July 07, 2016, 02:56:00 pm »

Üblicherweise musst du das im DHCP-Server oder lokal am Host eintragen.

2667

16.1 Legacy Series / Re: e2guardian setup

« on: July 06, 2016, 10:20:40 pm »

You cannot see the URL when the user is using TLS because it is part of the request line: https://tools.ietf.org/html/rfc2616#section-5.1

2668

16.1 Legacy Series / Re: Transparent proxy - bypass for some LAN IPs

« on: July 06, 2016, 09:01:00 am »

Hi emilio,

can you add this host also to the "SSL no bump sites" as this looks like the ssl handshake fails.
Can you then connect to it and open it with a browser and check which cryptographic algorithms are used?

2669

General Discussion / Re: Web and Content Filter

« on: July 06, 2016, 08:52:15 am »

Here is the link to the docs: https://docs.opnsense.org/manual/how-tos/proxywebfilter.html

2670

General Discussion / Re: A Proxy Server Question.

« on: July 03, 2016, 09:07:03 am »

This links may answer your last question:
https://tools.ietf.org/html/rfc2616#section-14.45
https://en.wikipedia.org/wiki/X-Forwarded-For