Recent posts

#21

German - Deutsch / Re: Dauer Major Upgrade 24.7.1...

Last post by mimugmail - Today at 07:07:06 AM

Gut Ding will Weile haben :) Gerade bei kritischen Aktionen nimmt man die Zeit anders wahr.
Fetch kann schon mal dauern, 24.7 auf 25.1 war kein Major BSD Upgrade, wundert mich etwas.

#22

German - Deutsch / Re: letsencrypt DNS Problem

Last post by Simaryp - Today at 07:05:31 AM

Ich kann dir nicht ganz folgen, ich bin kein Profi bei den ganzen Netzwerk-Themen.

Mein Server, auf dem traefik läuft und letsencrypt durchgeführt wird, erhält seine komplette Netzwerkconfig per DHCP. ICh habe dort keinen DNS konfiguriert.

Auf der OPNsense habe ich für die MAC-Adresse m eines Servers einen Alias hinterlegt.

Unbound läuft auf der 53 und ist für alle interefaces konfiguriert.

Außerdem habe ich in Nat und in Floating regeln angelegt, die andere DNS-Server unterbinden. Siehe Bilder.

Für my-domain.tld habe ich in unbound ein forwarding auf dnsmasq angelegt, wekcher auf einem anderen Port hört, damit server.my-domain.tld lokal und dynamisch aufgelöst wird.

Müsste ich jetzt in der OPNsense einen externen DNS-Server hinterlegen, unbound auf einen anderen Port ziehen und dann die Umleitungsregeln so anpassen, dass 53 auf diesen neuen Port an die OPNsense weiter geleitet wird?

#23

German - Deutsch / Re: Dauer Major Upgrade 24.7.1...

Last post by danielhainich - Today at 06:44:52 AM

hab abgewartet, 22:30 war er dann fertig...

Danke
Daniel

#24

25.1, 25.4 Series / Disk space issue

Last post by gmartin - Today at 03:27:57 AM

I'm running 25.1.12 in a VM on proxmox v9. It's been running about 9 months without issue.  I noticed today the drive was full.  In the proxmox console, I increased the disk space to 50GB.  I was prompted in the console to run a command to accept the growth but it did not expand the file system. 
The system is showing a discrepancy between gpart and df.

I assume there is something I need to do inside to grow the fs, but growpart isn't available. Is there another tool?

(BTW, I deleted some logs to alleviate the immediate issue.)

Thanks!

Code Select Expand

root@oprouter:~ # df -h
Filesystem                   Size    Used   Avail Capacity  Mounted on
/dev/gpt/rootfs               23G     11G     10G    50%    /
devfs                        1.0K      0B    1.0K     0%    /dev
/dev/gpt/efifs               260M    1.3M    259M     1%    /boot/efi
devfs                        1.0K      0B    1.0K     0%    /var/dhcpd/dev
devfs                        1.0K      0B    1.0K     0%    /var/unbound/dev
/usr/local/lib/python3.11     23G     11G     10G    50%    /var/unbound/usr/local/lib/python3.11
/lib                          23G     11G     10G    50%    /var/unbound/lib
and

Code Select Expand

root@oprouter:~ # gpart show
=>       40  113246128  da0  GPT  (54G)
         40     532480    1  efi  (260M)
     532520       1024    2  freebsd-boot  (512K)
     533544   49798144    3  freebsd-ufs  (24G)
   50331688   16777136    4  freebsd-swap  (8.0G)
   67108824   46137344       - free -  (22G)



#25

Portuguese - Português / Identidade de usuários

Last post by ivotonev - Today at 02:10:31 AM

Quem precisar de uma solução para identidade de usuários de Active Directory, existe um projeto para essa necessidade em https://github.com/ivortonev/int_user_login

#26

25.7, 25.10 Series / Re: ISC to Dnsmasq breaks some...

Last post by Stormscape - Today at 01:38:21 AM

Sounds like you made the same mistake I did, and forgot to tell Unbound about dnsmasq being the authoritative DNS server for your local domain. Make sure to follow the OPNsense hosted guide for setting up dnsmasq

#27

Tutorials and FAQs / Re: How to setup multiple tunn...

Last post by asstrocyte - Today at 12:30:45 AM

Hi, do you have a DNS leak on the hosts routed through your VPN tunnel using this method? I'm running Unbound on my router and having trouble getting DNS requests from my hosts to go through the tunnel with all their other outbound traffic. Followed the method you outlined here exactly (thanks for that!).

Cheers!

#28

26.1 Series / Re: RC1: hundreds of rc.newwan...

Last post by Patrick M. Hausen - Today at 12:20:26 AM

I don't use Suricata or Zenarmor.

#29

General Discussion / Re: DNS bind error when access...

Last post by Patrick M. Hausen - Today at 12:19:33 AM

Don't override but use the public IP address for access from internal networks, too. Either by NAT reflection or by setting up a reverse proxy like Caddy. I prefer the latter.

#30

26.1 Series / Re: RC1: hundreds of rc.newwan...

Last post by nero355 - Today at 12:16:57 AM

Half an hour later Internet was down. SSH to the box still working, system quite sluggish, dashboard widgets failing to load.

A couple of hundred processes like this:

Code Select Expand

/usr/local/bin/php /usr/local/etc/rc.newwanipv6 pppoe0 force

"killall -9 php" made the system responsive again for a short while but the processes kept piling up.

Sounds similar to : https://forum.opnsense.org/index.php?msg=257256 ??