Search found 15 matches

by Mentalic
Yesterday, 12:41 am
Forum: IPFire in General
Topic: Intrusion Prevention System - core 131
Replies: 24
Views: 900

Re: Intrusion Prevention System - core 131

Switched dns to verisign and so far its not failing like cloudfare dns was. Cloudfare would begin to fail fairly quickly.
by Mentalic
May 19th, 2019, 11:09 pm
Forum: IPFire in General
Topic: Intrusion Prevention System - core 131
Replies: 24
Views: 900

Re: Intrusion Prevention System - core 131

I'm also using cloudfares dns. Sometimes the rDNS status looks good but ping by name fails, don't know how often that status page updates.. Also there's never anything logged in IPS.
by Mentalic
May 19th, 2019, 1:46 pm
Forum: IPFire in General
Topic: Intrusion Prevention System - core 131
Replies: 24
Views: 900

Re: Intrusion Prevention System - core 131

I'm having trouble connecting with some sites as well and noticed that some DNS query's are being blocked. Take a look at your rDNS status on tabs STATUS>NETWORK(External) . My rDNS was showing failed and takes a while to even load that status page. Another way to test is to try to ping your blocked...
by Mentalic
May 11th, 2019, 4:36 pm
Forum: IPFire in General
Topic: Fixed IP assignment under DHCP
Replies: 30
Views: 1229

Re: Fixed IP assignment under DHCP

Also ran across this issue in core 131. Found a method to work around the bug that is preventing addition of more than one fixed lease before finding this thread. Couple of extra steps but I only had a dozen to add. DHCP manual lease addition after first is entered by add/update. 1-Disable existing ...
by Mentalic
March 31st, 2019, 7:49 pm
Forum: Development
Topic: Core 130 test
Replies: 0
Views: 271

Core 130 test

Loaded the nightly build of 130 and managed to break IPS every time I restore a backup to the machine. Tried several rebuilds, off line or online loading but restoring backup from version 129 results in the IPS service no longer running. Tried a number of things, rebooting, stop/start IPS with no lu...
by Mentalic
March 20th, 2019, 2:52 pm
Forum: Development
Topic: IPFire 2.21 Core update 129 SpecterMeltdownChecker
Replies: 4
Views: 586

IPFire 2.21 Core update 129 SpecterMeltdownChecker

Loaded up the 129 build without issues. Saw on the blog that the spectre-meltdown-checker script is now available as an add-on, only I don't see it listed in packfire?
by Mentalic
February 2nd, 2019, 3:57 pm
Forum: IPFire in General
Topic: QoS to throttle traffic by interface?
Replies: 3
Views: 291

Re: QoS to throttle traffic by interface?

Not aware of a method to use the ipfire qos for what you describe. I too have my iot on blue network and a security cam system (wired). A quick and dirty method would be simply to limit your blue wifi device speeds which is easy to set on box's running ddwrt, possibly not easy on others.
by Mentalic
January 24th, 2019, 3:33 am
Forum: IPFire in General
Topic: Update CORE 127 Issue.
Replies: 9
Views: 1077

Re: Update CORE 127 Issue.

Tried a test version a couple of days ago. I had the GeoIP enabled but the gui kept locking up on me randomly it seemed. Maybe I'll try the latest build tomorrow if I get time.
by Mentalic
December 31st, 2018, 4:01 pm
Forum: Addons
Topic: Problems update Guardian 2.0.2
Replies: 28
Views: 2058

Re: Problems update Guardian 2.0.2

Looks like there are additional problems with Guardian/intrusion detection because I experienced a number of odd things last night while trying to tune my setup. -Intrusion detection filter check box's selections disappear by themselves yet I suspect there still active because memory load did not ch...
by Mentalic
December 30th, 2018, 3:25 pm
Forum: Addons
Topic: Problems update Guardian 2.0.2
Replies: 28
Views: 2058

Re: Problems update Guardian 2.0.2

Think I found the fix to this. After many uninstalls reinstalls, service stop and starts with no success in getting guardian working again.. Until in Guardian Configuration interface, I set "monitor snort alert file" to OFF, then save setting, then set "monitor snort alert file" to ON and save setti...
by Mentalic
December 29th, 2018, 10:25 pm
Forum: IPFire in General
Topic: Ipfblocklist (IP Blocklists for IPFire)
Replies: 14
Views: 1446

Re: Ipfblocklist (IP Blocklists for IPFire)

Thanks TimF,

Adding this into IpFire would be great. Another thing I noticed is when I disabled the IPfblocklist it appears to not really disable it or broke the geoip block. Kept seeing entries for countries I had blocked appear in the firewall log. Ended up reinstalling Ipfire to clear it out.
by Mentalic
December 29th, 2018, 8:55 pm
Forum: Addons
Topic: Problems update Guardian 2.0.2
Replies: 28
Views: 2058

Re: Problems update Guardian 2.0.2

I'm also having issues with Guardian not adding anything to the block list after update to PFire 2.21 (x86_64) - core126. Although initially when I updated from 125 it did work but after trying a block list addon I reinstalled ipfire, then no mater what Guardian does not add entry's.
by Mentalic
December 28th, 2018, 10:35 pm
Forum: IPFire in General
Topic: Ipfblocklist (IP Blocklists for IPFire)
Replies: 14
Views: 1446

Re: Ipfblocklist (IP Blocklists for IPFire)

Just setup the Ipfblocklist without issues. After the rules updated I see that the order of operation is not what I had expected it would be. Specifically it seems the Ipfblocklist is taking place before the GeoIP block system. This results in an huge increase in entries in the firewall log for coun...
by Mentalic
June 20th, 2018, 3:06 pm
Forum: Development
Topic: Suggest Guardian blocked hosts be saved
Replies: 3
Views: 1049

Re: Suggest Guardian blocked hosts be saved

Really would be a great addition to be able to save the blocked lists. I see about 35 new blocked host entries per day. With my "block time" set to 30 days there's quite a list of blocked hosts lost on reboots.
by Mentalic
April 14th, 2018, 2:56 pm
Forum: Development
Topic: Suggest Guardian blocked hosts be saved
Replies: 3
Views: 1049

Suggest Guardian blocked hosts be saved

Currently on reboot Guardian generated blocked hosts lists are lost. Would be better if these could be saved.