Recent posts

#1

Portuguese - Português / Re: OPNsense Wireguard+VXLAN+B...

Last post by jovangdg34 - Today at 02:20:26 PM

Esse comportamento intermitente aponta para algo que merece ser observado no estado da bridge, ARP e filtragem do firewall, principalmente porque desativar o pf faz os hosts voltarem a responder. Eu começaria capturando o tráfego nos diferentes pontos da bridge para descobrir exatamente onde os pacotes deixam de passar.

Enquanto faço esses testes de rede, também gosto de ter algo mais leve para ocupar as pausas; Baixar Tomato Animes para TV Box pode ser uma opção para variar um pouco entre uma análise e outra.

#2

26.7 Series / Re: Postfix sender rewriting

Last post by keeka - Today at 01:49:37 PM

Now I'm nervous we've been wasting effort - we have several deployed systems where we've customised the rspamd plugin configuration to enable DKIM,as per this post:

https://forum.opnsense.org/index.php?topic=20280.msg270642#msg270642

 - is there a risk that configuration work will be lost on the next service/firewall restart?

I am not familiar with rspamd or its opnsense plugin. However part of your howto refers to creating files in `/usr/local/etc/rspamd/override.d/`. This suggests it is set up in such a way that it loads custom config from there. Providing scope for your DKIM conifg without fear of it being ignored/overwritten. Postfix as far as I am aware doesn't provide this include mechanism. The directives are invariably in main.cf and that is very likely overwritten by the plugin.

#3

26.7 Series / Re: Connections suddenly block...

Last post by BoerBart - Today at 01:01:08 PM

Definitely weird : You need to Bridge that Modem/Router from your ISP and use it as a pure Modem that way on the WAN of your OPNsense :)

What you have know is the same 192.168.1.0/24 subnet at two places and that can't work properly because your OPNsense did not know where the traffic should go : WAN or LAN ?!

I definitely agree with you that this is not the setup you would want to have, though, apart from this issue, it has been working like a charm. I'm keeping the modem there to at least have some sort of protection from my own mistakes. I might start looking at a separate appliance to run OPNsense on - for now I'm gonna enjoy that it's functioning again. Thanks for your replies!

(Somewhat of a) solution to this issue:
In case you have a similar setup, don't define your OPNsense LAN interface as gateway on hardware within the same subnet.

#4

26.7 Series / Re: Bug found in Edit rule at ...

Last post by mrzaz - Today at 12:47:49 PM

This is not a bug. Create an Alias if you want to combine entries.

After doing some more testing I found that:

if you do it Predefined and then Input it remove predefined.

If you do Input first and then select Predefined it shows like both is selected, but this only until press apply/save. Then it only save the last one selected.

So the confusion was that I was able to selected 2 at first (like multiselect) but later was reverted to only last selected threw me a curveball.

So we could revert this topic from bug to rather an opinion about function.

It would have been easier if I select something and later click on something else in the drop down it should auto deselect the previous entry so when closing the dropdown (before apply/save)
there should only be one entry = the last thing selected and not as today that you find it after you pressed save.

Best regards
Dan Lundqvist
Stockholm, Sweden

#5

26.7 Series / Re: Postfix sender rewriting

Last post by putt1ck - Today at 12:32:15 PM

Now I'm nervous we've been wasting effort - we have several deployed systems where we've customised the rspamd plugin configuration to enable DKIM,as per this post:

https://forum.opnsense.org/index.php?topic=20280.msg270642#msg270642

 - is there a risk that configuration work will be lost on the next service/firewall restart?

#6

26.7 Series / Re: Bug found in Edit rule at ...

Last post by mrzaz - Today at 12:30:35 PM

I wasn't aware you could do both in one rule. Always used it as either - or.

Apparently it is working as a multiselect function.

If you do the input function first and then select the predefined after it works OK but if you select the predefined first and then selected the input function it removes the predefined function.

Dan Lundqvist
Stockholm, Sweden

#7

26.7 Series / Re: Bug found in Edit rule at ...

Last post by bamf - Today at 12:16:56 PM

This is not a bug. Create an Alias if you want to combine entries.

#8

26.7 Series / Re: Bug found in Edit rule at ...

Last post by Patrick M. Hausen - Today at 11:36:54 AM

I wasn't aware you could do both in one rule. Always used it as either - or.

#9

26.1, 26,4 Series / Re: dnsmasq does not give any ...

Last post by DEC740airp414user - Today at 11:35:22 AM

I have my configuration integrated into dnsmasq and kea.

it works.   setup dhcp ranges first.  then static hosts of needed.

I go back and forth between them on the occasion just to see if I notice anything(mainly memory use resources).  so far I haven't but still use kea for my home network

#10

26.7 Series / Re: Bug found in Edit rule at ...

Last post by mrzaz - Today at 10:35:53 AM

When you select "single host or network" you are supposed to enter an IP address or network manually. When you select any predefined alias, e.g. "LAN net" the type is implicit.

Yes, i understand that.

But why I reported this is the fact that selecting a predefined object first in a multiselect option and later select an object that requires an input, the previous selected item in the multiselect is removed.

If I select the object which requires input first and then  select the predefined as second it stores both.

It shouldn't matter in what order you select them.

Best regards
Dan Lundqvist
Stockholm,Sweden