Messages

Hello, I'm trying to write the image OPNsense-16.1-OpenSSL-nano-i386.img on a new Compact Flash Kingston CF/4G for use with Alix 2d3 (256 MB, low memory I know...) but it doesn't fit.

Windows: physdiskwrite -u OPNsense-16.1-OpenSSL-nano-i386.img
WARNING: that disk is larger than 2 GB! Make sure you're not accidentally overwriting your primary hard disk! Proceeding on your own risk...
About to overwrite the contents of disk 3 with new data. Proceed? (y/n) y
3997163520/4294967295 bytes writtenWrite error after 3997163520 bytes.

Ubuntu: sudo dd  if=OPNsense-16.1-OpenSSL-nano-i386.img of=/dev/sdb bs=16k
dd: errore scrivendo "/dev/sdb": Spazio esaurito sul device
243968+0 record dentro
243967+0 record fuori
3997163520 byte (4,0 GB) copiati, 384,21 s, 10,4 MB/s

is there a way to force it or can I use other installation images? It is possible to resize the image?
Thank you and congratulation for your great project!

This isn't a solution!  :) Updates have to be done in lab...

In Captive Portal - Allowed IP addresses is there a way to insert a range of IP instead of a single IP?

Change IP is easier than change mac address, rather best known...
Obviously changing mac address or IP is the way to bypass the block.

Captive Portal seems working BUT I think it could be improved: if a user has internet access (without authentication) and I block his mac address, the only way is reboot the firewall, if not  PC continues to navigate. Trying to reboot Pc or Captive Portal with no success... If I reboot firewall, navigation on PC is denied.
Is it possible block navigation without rebooting?
Thank you

Inside LAN mac address is known and I think it could be possible block or allow navigation through firewall. So through GUI isn't possible to block navigation? Many domestic router have this function. It could be nice also allocate more or less bandwidth, but this is another story  ;D

Hi, is there a way to block navigation on wan to a specific mac address? I don't find anything, eg. in firewall rule I can only set an IP address...

Ok, but in the wiki - step 3 - is different. It is due to different needs (...limit the traffic passing between LAN/WAN to 1Mbps per user)?

Can you tell me how please? My (advanced) configuration is in my first post.
(Edited adding direction: both that I've forgot).

How can I replicate in OPNsense the simply QoS feature "Share bandwidth evenly on lan" that was in old great M0n0wall?
For a 10Mbit ADSL I tried these values in "Firewall - Traffic Shaper":

Pipe:
bandwith: 9Mbit/s
mask: destination

Rule:
sequence: 1
interface: wan
proto: ip
source: any
src-port: any
destination: any
dst-port: any
direction: both
target: name of pipe previously created

But results aren't great...
Does anyone know how and what set properly?

Thank you all, which one is better to set, mine (Domanin Overrides) or juha's (Firewall Alias)?

Reply by myself, Domain Overrides trought DNS Forworder could be the solution. It can be useful to someone.....?

Hello, in regard of proxy (transparent mode), it should block navigation if I set in blacklist a specific website. In fact it blocks only HTTP, not HTTPS. How can I set it right?
PS: Is it possible without proxy?
Thank you

 :) :)
So none of you have this problem?

Computers are not mine, I work in a repair shop, after repairing customers bring them back to home.