151
17.7 Legacy Series / Re: how to further tweak Suricata
« on: January 04, 2018, 08:18:10 am »
Sounds easy to me. The CPU isn't fast enough.
Show Posts
This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.
152
17.7 Legacy Series / Re: OPNsense vs. pfsense on Soekris net6501 - HELP!
« on: January 02, 2018, 01:00:35 am »
I would advise a mSATA drive. But keep in mind the CPU is only 32 bit, and it isn't exactly fast.
Depends on what you plan to use it for, of course.
OPNsense-17.7.5-OpenSSL-serial-i386.img.bz2 is the one you want to download.
extract the img file, and with Rufus it should be usuable.
What exactly isn't working for you?
Saying "it doesn't work" isn't really helpful ;-)
Depends on what you plan to use it for, of course.
OPNsense-17.7.5-OpenSSL-serial-i386.img.bz2 is the one you want to download.
extract the img file, and with Rufus it should be usuable.
What exactly isn't working for you?
Saying "it doesn't work" isn't really helpful ;-)
153
17.1 Legacy Series / Re: USB to Ethernet interface removed on reboot
« on: December 20, 2017, 01:54:33 pm »
There is a topic here about a specific USB ethernet dongle.
I have that model at home, and have those issues as well.
Seems to be crappie FreeBSD support AFAIK.
I have that model at home, and have those issues as well.
Seems to be crappie FreeBSD support AFAIK.
154
17.7 Legacy Series / Re: libxml2-2.9.4 is vulnerable
« on: December 17, 2017, 10:48:09 am »
Saw that one too.
155
Documentation and Translation / Proposed changes for "Configuring LDAP"
« on: December 09, 2017, 01:27:58 pm »
The documentation on Configuring LDAP has an error in the text that makes Active Directory (don't know about OpenLDAP or Novell eDirectory) confusing to configure.
https://wiki.opnsense.org/manual/how-tos/user-ldap.html
Under Step 1 there is a list of things to fill in. The Bind Credentials part is wrong.
At User DN you need to fill in <username>@<domain name> like ldap@opnsense.local.
As it is now, it won't work when doing the container search.
For the record, domain\username works too, but is Pre-2000 and should really not be used anymore.
It works fine, just old skool.
Last, there is a small typo under Step 5: "configureS" should be "configureD", without the capitol letters of course.
https://wiki.opnsense.org/manual/how-tos/user-ldap.html
Under Step 1 there is a list of things to fill in. The Bind Credentials part is wrong.
At User DN you need to fill in <username>@<domain name> like ldap@opnsense.local.
As it is now, it won't work when doing the container search.
For the record, domain\username works too, but is Pre-2000 and should really not be used anymore.
It works fine, just old skool.
Last, there is a small typo under Step 5: "configureS" should be "configureD", without the capitol letters of course.
156
17.7 Legacy Series / Re: PC Usage monitor and Quotas
« on: December 08, 2017, 04:00:57 pm »
I don't know about reporting, but on IRC it was mentioned that perhaps a captive portal on the LAN port might be useful for the quota use.
No idea if it's possible, but worth investigating.
No idea if it's possible, but worth investigating.
157
General Discussion / Re: How to connecto to windows DNS server
« on: December 07, 2017, 01:10:16 pm »Isn't DNSSEC disabled by default?
Never enabled it myself, and I use my Domain Controller's DNS service for lookup from the OPNsense box.
From memory, you set the DNS setting somewhere in Settings\Administration?
Could be wrong, but it's not on the interface page.
No, DNSSEC it's not disabled by default, quite contrary, by default it's enabled and hardened!
In "System: Settings: General" you only set the IP addresses of DNS forwarders (and have 2 DNS options as checkboxes below). Almost all other DNS settings are, by default (meaning, after fresh install) at "Services: Unbound DNS".
I checked it on IRC and it seems it enabled by default since 17.7.
I'm still using my configuration I made in 2015, and import when setting up new or for testing.
Still need to look into it. Running Domain Controllers at home, and my OPNSENSE box uses those DNS server as forwarders (which in turn use Pi-hole).
158
General Discussion / Re: How to connecto to windows DNS server
« on: December 06, 2017, 09:04:30 pm »
Derp haha
159
General Discussion / Re: How to connecto to windows DNS server
« on: December 06, 2017, 12:36:24 pm »
Isn't DNSSEC disabled by default?
Never enabled it myself, and I use my Domain Controller's DNS service for lookup from the OPNsense box.
From memory, you set the DNS setting somewhere in Settings\Administration?
Could be wrong, but it's not on the interface page.
Never enabled it myself, and I use my Domain Controller's DNS service for lookup from the OPNsense box.
From memory, you set the DNS setting somewhere in Settings\Administration?
Could be wrong, but it's not on the interface page.
160
17.7 Legacy Series / Re: I promise I searched - Theme availability?
« on: December 02, 2017, 11:41:16 am »
Totally missed the day part. My bad.
Still early here...
Still early here...
161
17.7 Legacy Series / Re: I promise I searched - Theme availability?
« on: December 02, 2017, 11:32:55 am »
It's a forum. Don't expect people to answer in 30 minutes after your initial post ;-)
Be patient.
Be patient.
162
17.7 Legacy Series / Re: OPNsense loses network settings (VLAN) after reboot or shutdown
« on: November 23, 2017, 05:29:39 pm »
Only thing I can imagine is that somehow the NIC has a MAC address or other information on boot.
That would trigger the network setup...
That would trigger the network setup...
163
17.7 Legacy Series / Re: /var/etc/dnsmasq-hosts is overwritten on dnsmasq restart
« on: November 23, 2017, 05:27:40 pm »
Wrong expectations.
That file is overwritten on boot.
Edit dnsmasq from the webGUI.
That file is overwritten on boot.
Edit dnsmasq from the webGUI.
164
17.7 Legacy Series / Re: Lobby Dashboard. MSIE10 has a memory leak
« on: November 23, 2017, 12:02:47 pm »
Also keep in mind that only IE11 is supported by Microsoft.
Maybe upgrade?
Maybe upgrade?
165
17.7 Legacy Series / Re: [SOLVED] OPNsense V17.7.5 installation on APU2
« on: November 21, 2017, 10:32:35 pm »
Could ask the ISO to put the router in bridge mode. You'll have a modem then.
I do that with the cable routers I've had so far.
I do that with the cable routers I've had so far.