"Recent posts
#1
26.7 Series / Re: slow dhcp on wan -> broken...
Last post by lmoore - Today at 08:47:36 PMFirewall and Source NAT rules attached - note the use of tags.
#2
26.7 Series / Re: slow dhcp on wan -> broken...
Last post by lmoore - Today at 08:46:05 PMAnother thought you could try.
- Assuming you have configured a static IP address on your ONT, add a static route on your ONT to reach your management network (LAN) via 192.168.11.10 (optional)
- Add a Bridge interface and include WAN as a member
- Assign the bridge interface and enter ONT in the description field
- Refresh the web page
- Select [ONT] interface and select Enable Interface
- Set IPv4 configuration to Static IPv4
- Set IPv4 address to 192.168.11.10/24
- Save the settings
- Apply the changes
- Select your [WAN] interface
- Check Block private networks
- Save the settings
- Apply the changes
- Review your firewall rules allowing connections to the 192.168.11.0/24 network
- On ONT, if no static route to your management network (LAN) - see above, create a Source NAT rule to the ONT network using the bridge address
- Assuming you have configured a static IP address on your ONT, add a static route on your ONT to reach your management network (LAN) via 192.168.11.10 (optional)
- Add a Bridge interface and include WAN as a member
- Assign the bridge interface and enter ONT in the description field
- Refresh the web page
- Select [ONT] interface and select Enable Interface
- Set IPv4 configuration to Static IPv4
- Set IPv4 address to 192.168.11.10/24
- Save the settings
- Apply the changes
- Select your [WAN] interface
- Check Block private networks
- Save the settings
- Apply the changes
- Review your firewall rules allowing connections to the 192.168.11.0/24 network
- On ONT, if no static route to your management network (LAN) - see above, create a Source NAT rule to the ONT network using the bridge address
#3
26.7 Series / Re: Realtek 2.5 Gbit Lan
Last post by Karla - Today at 07:59:50 PMI have bought an Intel 82576 based dual port Lan card.
#4
26.7 Series / Re: Unbound NXDOMAIN response ...
Last post by db9 - Today at 07:50:44 PMQuote from: muchacha_grande on Today at 05:24:47 PMIt's in Services: Unbound DNS: Advanced. The fifth option.
Thank you. Do you know if TLD .internal has the same issue. If not I could rename my TLD from .lan to .internal
#5
26.7 Series / Re: 26.7.1: "state-insert,bloc...
Last post by SonicJoe - Today at 07:01:50 PMQuote from: fastboot on Today at 08:00:15 AMHi @SonicJoe,
that was my first assumption. I disabled the divert to of the rules that allow the flows. But in my case it did not help. I also checked the corresponding logs for suricata and could not find any blocks. For example "dest_port:123" should trigger a hit in the suricata logs, as this was blocked.
@franco: Help please
I should clarify that I have other rules with divert-to set that work fine. It is only the rules on the WAN interface. I suspect something about the Destination NAT rules is causing confusion when the packet comes back from Suricata and gets re-inserted in the flow. I agree that Suricata is not blocking anything. I did see evidence that Suricata was evaluating the packets though:
Code Select
app_layer.flow.sip_udp | Total | 10
app_layer.tx.sip_udp | Total | 57 #6
26.7 Series / Re: Realtek 2.5 Gbit Lan
Last post by rdunkle84 - Today at 06:23:34 PMI have realtek nics on two systems.
I am using arm64.
I compile the ports myself or fetch the package and manually install the driver.
realtek is supported by these ports:
https://www.freshports.org/net/realtek-re-kmod/
https://www.freshports.org/net/realtek-rge-kmod/
This is the one for arm64:
https://www.freshports.org/net/realtek-re-kmod198/
To bootstrap the process you could use a usb nic to get connectivity.
I am using arm64.
I compile the ports myself or fetch the package and manually install the driver.
realtek is supported by these ports:
https://www.freshports.org/net/realtek-re-kmod/
https://www.freshports.org/net/realtek-rge-kmod/
This is the one for arm64:
https://www.freshports.org/net/realtek-re-kmod198/
To bootstrap the process you could use a usb nic to get connectivity.
#7
26.7 Series / Re: Realtek 2.5 Gbit Lan
Last post by meyergru - Today at 06:17:55 PMYou probably need the os-realtek-re plugin. Without a network connection, it is a little hard to install it, though.
#8
26.7 Series / Re: slow dhcp on wan -> broken...
Last post by synfinatic - Today at 06:13:56 PMSo looking again at the NAT settings, seems like there are 3 options in the drop down for `ixl0`:
* interface address
* ONTWAN address -- ONTWAN is the name for ixl0
* 192.168.11.10 ONT Management -- the virtual IP
Seems like using the 2nd option should provide the correct results? Or are the 1st and 2nd effectively the same option with different names?
* interface address
* ONTWAN address -- ONTWAN is the name for ixl0
* 192.168.11.10 ONT Management -- the virtual IP
Seems like using the 2nd option should provide the correct results? Or are the 1st and 2nd effectively the same option with different names?
#9
General Discussion / Re: Checking the zpool status
Last post by Patrick M. Hausen - Today at 05:25:09 PMAbout right.
#10
26.7 Series / Re: Realtek 2.5 Gbit Lan
Last post by Patrick M. Hausen - Today at 05:24:54 PMProbably they are simply not supported by FreeBSD.
Hardware compatibility list:
https://www.freebsd.org/releases/15.1R/hardware/#ethernet
https://man.freebsd.org/cgi/man.cgi?query=re&sektion=4&format=html
I cannot find any 2.5G Realtek adapers in there, only 1G Realtek and 2.5G Intel.
Hardware compatibility list:
https://www.freebsd.org/releases/15.1R/hardware/#ethernet
https://man.freebsd.org/cgi/man.cgi?query=re&sektion=4&format=html
I cannot find any 2.5G Realtek adapers in there, only 1G Realtek and 2.5G Intel.
