Recent posts

#1

Tutorials and FAQs / Re: HOWTO - Redirect all DNS R...

Last post by meyergru - Today at 12:07:02 PM

Which do you mean? The first post, which now is ~8 years old? Probably not.

There are several posts in here that discussed additions on DoT, DoH and gave directions on what can and what cannot be done. This is largely independend of the DNS service in charge. The guide is essentially about how to use firewall rules to redirect queries to that service, be it Unbound, DNSmasq or any other of your choice. Even to that extent, additions have been made, e.g. the initial post does not cover IPv6.

#2

Tutorials and FAQs / Re: HOWTO - Redirect all DNS R...

Last post by Shihatsu - Today at 11:47:18 AM

Hi gzys, just a small question:
Is this guide still valid after the "change" to DNSmasq?

#3

General Discussion / Re: Setting Up a PPPoE Connect...

Last post by crunchy - Today at 11:03:34 AM

I reset opnsense to defaults, rebooted and went through the wizard again. I did get internet connection this time.

I obviously did something wrong on the first try.

All is good. This post has been solved.

Looking forward to trying out opnsense!

#4

German - Deutsch / Frage zu Interfaces: Assignmen...

Last post by trixter - Today at 10:53:55 AM

Kann es sein dass die unassigned Interfaces nicht mehr angezeigt werden?

Kann mich noch dunkel erinnern, dass zB OpenVpn-Server unassigned waren und von Hand zugewiesen wurden.

Habe aktuell eine Sense die fleißig in Nutzung ist, nebst OpenVpn, aber ich sehe keine unassigned Interfaces ... ist das ein Bug oder ein Feature?

Oder hat sich mit den Instaces etwas Grundlegendes geändert, dass ich verpasst habe?

Symptom: " AEAD Decrypt error: bad packet ID (may be a replay)" Also UDP-Pakete die in der falschen Reihenfolge eintrudeln ...
Kann ich mir bisher noch keinen Reim drauf machen.

#5

German - Deutsch / Re: Neues setup - Fragen zur S...

Last post by trixter - Today at 10:47:18 AM

Das ist einfach eine scheiß Seuche, Prefixe zu rotieren und das auch noch im dümmsten Fall alle 24h. Das läuft inzwischen schlicht unter "defekt" bei uns weil du nichts ordentlich damit anfangen kannst. Und da hilft dir weder irgendein DNS/DDNS noch sonstwas dagegen. Leider.

Das ist leider immer so eine Sache, wie der ISP das handhabt.
Bi mir blieb der V6 Prefix stehen, daher machte das kine Probleme, allerdings ist das leider kein Standard.

#6

General Discussion / Re: Monitoroing: Missing SNMP ...

Last post by Isabella Borgward - Today at 10:29:17 AM

bsnmpd provides features that the Zabbix agent and net-snmpd does not - notably, sensible names for interfaces and firewall metrics.

I decided to re-visit this and have a look at using the OPNsense API. Was easy to test with Curl, started to build a Zabbix template, but then I googled it and this year several different Zabbix templates which use the API to fetch all the useful stuff [and way more than can be collected with either SNMP implementation, Zabbix agent or combinations thereof], have been published on Github. So for my purposes, SNMP agent and Zabbix agent monitoring of OPNsense are obsolete now, and someone else did most of the hard work for me :)

#7

General Discussion / Re: Plugin Update or Removal

Last post by sopex - Today at 10:14:07 AM

Yeah, it will be fixed with ca_root_nss   3.132 which will probably be released on Thursday.

When it comes to cloudflared itself... https://www.freshports.org/net/cloudflared

#8

26.7 Series / Re: Invalid argument errors wh...

Last post by Shad - Today at 10:09:30 AM

Yes, you're right, the mini-pc is fanless inside a rack, between two shelves, I'll probably add some fans in.
I am looking forward buying an opnsense appliance as soon as I can afford it.

Thanks for your accurate instructions.

#9

26.7 Series / Re: PPPOE Connection Keep drop...

Last post by nicholaswkc - Today at 10:04:41 AM

I know the pppoe settings. Dell 9020

#10

General Discussion / Setting Up a PPPoE Connection

Last post by crunchy - Today at 08:48:22 AM

New to OPNsense after using pfsense for about a year. I still consider myself a newbie though when working with these types of firewall setups.

pfsense worked ok but I was frequently kicked offline when implementing WG and VPN service for my LAN.

I've got a new OPNsense installation on a protecli 4-port vault (I've only gone through the wizard setup and changed DHCP to PPPoE with a username and password - my ISP modem is set to bridged mode)

I've got the interfaces set up as:
igc0=WAN, igc1=LAN, igc2=OPT1, igc3=OPT2

I can connect my laptop to the protecli vault LAN port and use the default 192.168.1.1 ip in my browser to get into the opnsense console without any issues.

My current router connects to the PPPoE without any issues, and I've never had to use a vlan to connect to it.

However, I'm unable to get internet access through the PPPoE connection with OPNsense. I've looked at several tutorials for OS and this forum, and tried many things in the OS console, but am unable to get an active internet connection.

When I go to >System >Routes >Status, it shows a public ip address from my isp, and a private ip address for the gateway. I tried adding the private gateway listed above but still unable to get connected.

I would be grateful for any suggestions to help me get connected.
Thanks for you time.