Testing firewall rules with qfeeds

Started by DEC740airp414user, January 25, 2026, 04:36:46 PM

Previous topic - Next topic
March 13, 2026, 09:54:32 AM #30 Last Edit: March 15, 2026, 04:32:28 PM by DEC740airp414user
Quote from: vk2him on March 13, 2026, 07:16:41 AM
Quote from: DEC740airp414user on March 11, 2026, 11:00:54 PMyou mean unbound- advanced area correct?

No - I mean within the Security --> Q-feeds Connect --> Events tab

That's what you posted in your first screenshot?

This is empty on the latest business edition and community edition
The dashboard plugin show blocked increasing
Events is empty for both versions of Opnsense



UPDATE
For the latest opnsense business edition   I readded both feeds using the api key to the advanced unbound blocklist.

Went into the plugin and turned OFF  register domain feeds in  the plugin.   I am now getting events?     
Is anyone else having this issue?
DEC740 > USW-Pro-8-PoE> U6-Enterprise
Dec670. Retired / backup device

At the moment the events tab only shows IP blocks based on the firewall rules you've made with our Alias. In order for the Events tab to get populated you need to have logging enabled on the corresponding firewall rules since the events tab just parses the log files.

For domain (unbound) blocks you can use the unbound reporting -> http://<your-firewall>:<port>/ui/unbound/overview

Your Threat Intelligence Partner  qfeeds.com