Can opnsense do this?

[senser]

Greetings everyone,

I am using the following functionality with my current firewall but i am looking for something new and i was wondering, can opnsense do this too?

Asn ip blocking (alias from whois)
Dns black holes (using common host files)
Geo-ip blocking (alias from geo-ip)
All logging can be disabled

Also, is opnsense using a rolling release model? Or will it be rolling once all big feature changes are complete? How long are old versions supported if its not rolling?

Thank you so much
J

[Stefan]

BGP routing by chance?

[Gargamel]

Greetings everyone,

I am using the following functionality with my current firewall but i am looking for something new and i was wondering, can opnsense do this too?

Asn ip blocking (alias from whois)
Dns black holes (using common host files)
Geo-ip blocking (alias from geo-ip)
All logging can be disabled

Also, is opnsense using a rolling release model? Or will it be rolling once all big feature changes are complete? How long are old versions supported if its not rolling?

Thank you so much
J

For GeoIP blocking see this post:
https://forum.opnsense.org/index.php?topic=5851.msg24639#msg24639

[Ciprian]

Asn ip blocking (alias from whois)

Definitely YES!

Dns black holes (using common host files)

I strongly would say YES, but you have to check, there are host and domain overrides, there are custom options of Unbound DNS, both comprised right on the Web Interface, and if it's not enough, form the console you have the option to edit the Unbound config file the way you want it; never did it, so I don't know for sure if it fits your purpose, and I would redirect you to Unbound DNS (or DNSmask DNS, also included in OPNsense) documentation.

Geo-ip blocking (alias from geo-ip)

YES

All logging can be disabled.

YES

Also, is opnsense using a rolling release model? Or will it be rolling once all big feature changes are complete? How long are old versions supported if its not rolling?

Franco definitely has a better answer, the best answer, but until he writes a few lines, I would say "rolling release" is the model.

Thank you so much
J

You're welcome!

[franco]

Hi there,

Well, we do a major update every 6 months (major incompatible features and operating system updates) and rolling releases with mostly weekly minor updates depending on need. Major versions land in January (x.1) and July (x.7).

We discontinue support for older major releases immediately, but the upgrade is (given the migration notes and operating system limitations) seamless.

https://opnsense.org/about/road-map/


Cheers,
Franco

[senser]

Great, so there is no nice frontend for creating dns entries for unbound from host files, but other than that, its all there. Are there any plans to better support creating dns black holes yet? Thank you!