Recent posts

#1

Russian - Русский / Re: os-xray — плагин Xray-core...

Last post by tyra - Today at 02:23:01 PM

Добрый вечер. Оставляю восторг работе!!!!По переключал всё вдоль и поперёк все инстансы всё ХОР.!!! За исключением тех которые не работают и в HAPP на android,но это проблема на vps.ВОПРОС- Как внедрить auto ping и авто переключение между лучшем пингом?

Автоматический выбор не планировал делать, как и работу по спискам. В основном это делалось для работы на актуальной версии opnsense через свой VPS сервер.
Сейчас РКН активно блокирует личные VPS, но я работаю через цепочку VPS и специально использую выходным сервером уже заблокированный в РКН и это позволило мне уже несколько месяцев обходить блокировку.

Это как? Каким то каскадом? У меня сейчас есть (пока оплаченный) тоже заблокированный ip. Получается VPS-заграница -> VPS-заграница уже заблокированный?

#2

26.7, 26.10 Series / Re: PPPoE over an unassigned V...

Last post by fanski - Today at 01:48:56 PM

Hi fanski,

> In 26.7.1 the vlan0.35 was not the first VLAN to be created.

Previously the VLANs were created in a batch before interfaces were brought up, but that changed in .3 with the support of VLANs on top of bridges.

We haven't seen many oddities, but there were a few.  Some hidden in the old code and some apparently in drivers.  I need to recheck the code I gave you, but it feels like the kernel is lying to us here.

At the moment I need to release 26.7.7 though so I'll try to get back to this later this week.


Cheers,
Franco

Hi Franco,

I guess you are really busy at the moment, I just wanted to ask if you think you will have the time to look at this again or if you see another option?
Currently I'm a little bit blocked with my VoIP as it's not working without the siproxd which seems not available in version 26.7.1 (OPNSense tells me to upgrade to get the plugin running again and I need it as my ISP is not really accepting STUN as it seems because I can't login anymore after some time). And additionally I would really like to keep my software up to date, especially the firewall :)

Many thanks,

Fanski

#3

Russian - Русский / Re: os-xray — плагин Xray-core...

Last post by Spylive - Today at 12:35:25 PM

Добрый вечер. Оставляю восторг работе!!!!По переключал всё вдоль и поперёк все инстансы всё ХОР.!!! За исключением тех которые не работают и в HAPP на android,но это проблема на vps.ВОПРОС- Как внедрить auto ping и авто переключение между лучшем пингом?

Автоматический выбор не планировал делать, как и работу по спискам. В основном это делалось для работы на актуальной версии opnsense через свой VPS сервер.
Сейчас РКН активно блокирует личные VPS, но я работаю через цепочку VPS и специально использую выходным сервером уже заблокированный в РКН и это позволило мне уже несколько месяцев обходить блокировку.

#4

General Discussion / Re: Disable: "Default allow LA...

Last post by Monviech (Cedrik) - Today at 11:12:42 AM

Well press on the link button in the rule. You will most likely end up in the migrator cause theyre old rules.

#5

General Discussion / Re: Disable: "Default allow LA...

Last post by passeri - Today at 10:46:27 AM

Rules are processed in order, by default as first match, so there is no impediment to adding overriding restrictions prior to the default rules.

What problem are you trying to solve?

#6

General Discussion / Disable: "Default allow LAN to...

Last post by marsk - Today at 10:36:35 AM

Hi

Disable firewall rules:
- Default allow LAN to any rule
- Default allow LAN IPv6 to any rule

I can't edit the "Default allow LAN to any" and "Default allow LAN IPv6 to any" rules, it seems they are locked.




//marsk

#7

General Discussion / Re: How do I know if a non-off...

Last post by Retired Miner - Today at 04:47:13 AM

The answer is that you don't know, but you are not alone. The guy who created os-loupe hasn't read the 28 thousand lines of the plugin, nobody has...

This is the new normal.

That being said, a good first step is to drop the whole repo to an LLM and ask about it.

Thanks, I did this. Used google a i. I had to ask (push back) several times to get it to parse through all the code as opposed to regurgitating and rewording what it read in the text documentation.

It came back with...

What Found Analysing the Code
.
.
.
Conclusion

The code uses standard Python socket logic exclusively to talk to internal loopbacks, Unix sockets, and local Home Assistant servers. There are absolutely zero outbound tracking vectors, cloud telemetry loops, or hardcoded external endpoints hiding within the .py source.

It listed Verdict = Safe for these three categories Home Assistant Integration (hass.py), Firewall State Tracking (pfstate.py), BPF Packet Capture (packet.py).

Even with that I'm still not sure I trust it. But based on the above comment 'reimplemented in Python scripts in a heartbeat so you don't even have that trust boundary' I plan to stay away until I can read up some on all this.

#8

General Discussion / Re: How do I know if a non-off...

Last post by Retired Miner - Today at 04:13:25 AM

Loupe records which device talked to which site name and how much, what was the Device X doing at 2 a.m.?

So basically a DNS Query Log Overview ?!

My Pi-Hole does that too...

No need to polute OPNsense with all kinds of AI coded crap that does not belong on it! :)

Sorry, I'm lost on this.

If you are asking if it is "a DNS Query Log Overview?" then I can't tell, I have no useful insights, or even an educated guess, as to a yes or no answer.

If "My Pi-Hole" does that, provides the same functionality, then maybe I start reading up on it.

#9

26.7, 26.10 Series / Re: HA setup cannot access gui...

Last post by pftoopn - Today at 02:39:50 AM

The interface assignments are exactly the same. I keep losing the webgui and I cannot ssh into the machine. It's configured exactly as the master. I confirmed ssh is running on the backup.

#10

Virtual private networks / Re: Noob trying to get Wiregua...

Last post by RoWAN Tree - Today at 01:59:09 AM

On that personal test rule you said to make is the domain53 or https443 I select?