Archives/opensense-docs
2
0
Fork 0
mirror of https://github.com/opnsense/docs synced 2024-11-10 19:10:55 +00:00
Code Issues Projects Releases Wiki Activity
1,039 Commits 7 Branches 0 Tags 555 MiB
331eb6d7e1
Commit Graph

650 Commits

Author SHA1 Message Date
Ad Schellevis
0c57a39f65 System: Gateways: Group - add a note in the example about the "gateway" selection. closes https://github.com/opnsense/docs/pull/518 2023-11-15 17:48:11 +01:00
Ad Schellevis
60825064db stylefix 2023-11-09 15:54:54 +01:00
satrapes
07b8c50c59
Update terminology on Wireguard how-to pages (#517) 2023-11-09 14:55:40 +01:00
Ad Schellevis
eb0fdefcf9 ETPro-telemetry - add product information links 2023-11-09 09:56:33 +01:00
Ad Schellevis
7b27b51f1d VPN: IPsec - add DPD so we have aplace holder to mention the "enable" flag 2023-11-08 15:55:58 +01:00
Ad Schellevis
8a48dce6da System/Access/Servers - add compliance option and some cleanups. closes https://github.com/opnsense/docs/issues/514 2023-11-08 15:12:22 +01:00
Ad Schellevis
467f9585e0 Installation / ESXi - align network driver choice to VMware's compatibility guide. 2023-11-06 17:33:54 +01:00
Ad Schellevis
03b004d1b5 System: Gateways: Group - better explain groups and point to the requirement of addresses. closes https://github.com/opnsense/docs/issues/513 2023-11-05 11:43:40 +01:00
Ad Schellevis
bcb0368cc4 VPN / OpenVPN - some typos in sslvpn_instance_s2s.rst 2023-11-04 15:33:05 +01:00
Ad Schellevis
1798c1c868 VPN: WireGuard - add baseline documentation and move examples. closes https://github.com/opnsense/docs/issues/504 2023-10-31 17:33:11 +01:00
Monviech
7bfa32740c
Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst (#510) 
Hint that IPv6 transport doesn't work with UDP Encapsulation
 2023-10-31 13:27:29 +01:00
Ad Schellevis
dab8d004d9 VPN / IPsec / General context - explain constraints when using both tunnels and connections. closes https://github.com/opnsense/core/issues/6950 2023-10-23 20:02:44 +02:00
Ad Schellevis
1392c4e471 Setup/Updates - add some troubleshooting tips (most common causes for update issues). 2023-10-20 19:49:39 +02:00
Daniel Aleksandersen
2f1b56bc93 mdns-repeater only supports up to 5 interfaces 
Upstream documentation:
fbe78e7ffd/mdns-repeater.c (L330)
 2023-10-20 09:28:56 +02:00
Maurice Walker
d1043f1da6 DHCPv6: document downstream prefix delegation 2023-10-20 01:15:07 +02:00
Ad Schellevis
8086c52a2d fix minor compile issues 2023-10-16 10:15:21 +02:00
Ad Schellevis
8d8a939f83 System: Configuration: History - update documentation with new MVC implementation, closes https://github.com/opnsense/docs/issues/503 2023-10-16 09:56:08 +02:00
Ad Schellevis
51b9acd79f Interfaces: Neighbors - add initial documentation, closes https://github.com/opnsense/docs/issues/506 2023-10-15 15:29:19 +02:00
Monviech
54eef60c16
Wireguard - Reworked wireguard s2s completely & added MTU + MSS to wireguard client (#498) 
* Update wireguard-client.rst - Add MTU and MSS hints

* Update wireguard-s2s.rst - Add MTU and MSS hints

* Update wireguard-s2s.rst - changed mss values

* Update wireguard-s2s.rst - Reworked How-To completely

* Update wireguard-client.rst - adjusted mss value

* Update wireguard-client.rst - Different mss values for IPv4 and IPv6

* Update wireguard-s2s.rst - Improved some aspects

* Update wireguard-client.rst - Improved some aspects

Normalization rules should have different MSS values for either IPv4, or IPv4+IPv6.

Changed the protocol back to any, since I'm unsure if selecting TCP only means IPv4 TCP, since there is also only IPv6 selectable.

* Update wireguard-s2s.rst

- Omitted Source Port in Firewall rules
- Added tip and note about dynamic WAN IP

* Update wireguard-s2s.rst - Terminology changes 23.7.6

- Changed Local to Instance
- Changed Endpoint to Peer
- Added information about CARP vhid tracking to mitigate HA problems.
- Added note about Keepalive for NATed sites.
 2023-10-15 15:04:43 +02:00
Monviech
d16635ca9a
ipsec-swanctl-rw-ikev2-eap-mschapv2 (#501) 
* created ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* Update vpnet.rst

Changed the position of Legacy and New > 23.1
Added how-tos/ipsec-swanctl-rw-ikev2-eap-mschapv2 to doctree in New > 23.1

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

General structure of How-To added

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Populated Prerequisites

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Populated IPsec connection settings for roadwarriors

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

Fixed IP address formatting in pools

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

* ipsec-swst Version completedanctl-rw-ikev2-eap-mschapv2.rst - Fir

* Update vpnet.rst - Switched Positions for client config

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Version 1.0

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst

- Added DNS configuration payload information to pools and clients https://github.com/opnsense/core/pull/6864
- Added hint that ncp client is not affiliated with Deciso B.V.

* Update ipsec-swanctl-rw-ikev2-eap-mschapv2.rst - Added Routing

hint for Windows RAS Client in Split Tunneling mode.
 2023-10-15 15:02:27 +02:00
Monviech
3cc00bfdf5
Update nat_reflection.rst (#507) 
* Update nat_reflection.rst

- Fixed typo (asynchronous should be asymmetrical traffic)
- Added note about "reply-to" in specific setups with VPN WAN

* Update nat_reflection.rst

- Fixed VTI NAT description, referenced the tunables to make it work
 2023-10-15 14:59:46 +02:00
Stephan
7c208a30b5 unbound: update DNSBL sources list and explain wildcard lists 2023-10-03 09:49:44 +02:00
Ad Schellevis
4a79cb9aed Services: Intrusion Detection - make a note about emulated mode as this is often a more stable solution when there are traffic issues with network cards / drivers. 2023-10-03 09:18:50 +02:00
Ad Schellevis
9f1bee2aa0 VPN: IPsec - add some migration notes when moving from tunnels to connections. 2023-10-02 16:44:26 +02:00
Ad Schellevis
8d030c3596 minor compile issue in https://github.com/opnsense/docs/pull/489 2023-10-02 15:54:27 +02:00
Cedrik Pischem
e86e01f1db
How-To for Reflection and Hairpin NAT added (#489) 2023-10-02 15:37:01 +02:00
Ad Schellevis
f3b42ec79e System: Configuration: Backups - history setting moved as part of https://github.com/opnsense/core/issues/6828 2023-09-27 10:14:04 +02:00
Ad Schellevis
5aa468ceba Authentication - LDAP: add new "constraint groups" property implemented in d971257fd9 2023-09-27 09:08:44 +02:00
Alexander Münch
ded92025fc Fix: Typo in reverse_proxy.rst 2023-09-09 21:13:52 +02:00
xilmen
946e9471e4
Change path for update (#492) 2023-09-04 08:42:45 +02:00
Hiigaraa
c2745b3ddc
Update Orange FTTH guide with additionnal info and troubleshooting section (#475) 2023-09-01 13:21:18 +02:00
Thomas
1eecec559c
manual: how-to for FritzBox IPv6 
New HowTo to explain the setup of an OPNsense as IPv6
router / firewall behind an AVM Fritz!Box (common German Router)
 2023-08-29 14:06:09 +02:00
Monviech
c0c1bb9e5c
Update carp.rst - fixed Build Warnings and added note (#490) 2023-08-28 09:50:46 +02:00
Ad Schellevis
6f042673be IDPS / User defined rules - glue howto (https://github.com/opnsense/docs/pull/485) into document 2023-08-26 11:18:43 +02:00
Ad Schellevis
25b61f66a4 VPN: OpenVPN - explain interaction with CARP, including the new option introduced in f56c6e2a0b 2023-08-26 11:02:11 +02:00
Monviech
ceed02cc9c
How-To added for suricata bypass feature (#485) 2023-08-26 11:02:01 +02:00
Monviech
cb07e622b6
Update carp.rst - Add IPv6 CARP Section (#488) 2023-08-25 13:18:39 +02:00
Ad Schellevis
c3651bb78f Wazuh agent - point to debug toggle when the logging is too limited to find issues. 2023-08-23 10:06:15 +02:00
Franco Fichtner
b4146d3959 manual: update Dynamic DNS for native backend changes 2023-08-18 09:54:30 +02:00
Ad Schellevis
e3eef04970 add wazuh-agent documentation 2023-08-16 21:15:50 +02:00
Ad Schellevis
62d8fc1915 Community Plugins / HAProxy - ditch outdated documentation without owner. 2023-08-08 14:49:38 +02:00
Failing Root
097db9d6ae
fix typo (#482) 2023-07-29 17:22:29 +02:00
Ad Schellevis
a899fe3000 VPN/IPsec add Miscellaneous section to explain tunables, starting with PMTU/DF bit 2023-07-26 16:00:29 +02:00
Stephan de Wit
f134b6f3bd firewall: diagnostics: states: document the kill-all-states button 2023-07-13 16:51:35 +02:00
Stephan de Wit
d577cf7f7f unbound: small rephrase/addition based on new MVC page 2023-07-13 16:35:24 +02:00
Stephan de Wit
d8f42f0484 gui: rephrase search input and document tokenization of search phrases 2023-07-13 16:34:14 +02:00
Stephan de Wit
97db0d20f8 system: configuration: backups: document console settings and interface mismatches 2023-07-13 14:26:09 +02:00
Stephan de Wit
e4f27e1f37 dhcp: documentation for the MVC leases pages 2023-07-13 13:28:21 +02:00
Matt Jolly
b5401626f2
Fix typo'd port (#481) 2023-07-12 13:25:02 +02:00
Ad Schellevis
470ff9702c OpenVPN - add new Instances module 2023-06-29 19:09:02 +02:00
Sam Wilson
1cc6809fdc
Update multiwan.rst (#480) 2023-06-29 15:22:46 +02:00
Michael
5f24f0de2f
Update multiwan.rst (#478) 
Add a note to disable shared forwarding when using multiwan with sage tier in gw groups
 2023-06-28 15:40:18 +02:00
Franco Fichtner
08b8b9d705 manual: fix small issues in IPv6 doc 2023-06-27 10:24:44 +02:00
Ad Schellevis
d46cf057ed missing new-line, closes https://github.com/opnsense/docs/issues/476 2023-06-25 19:46:25 +02:00
Franco Fichtner
7f9b87f944 ipv6: fix typos 2023-06-01 12:36:21 +02:00
Ad Schellevis
cef78bd5ea dyndns: compile issue 2023-05-31 17:24:10 +02:00
Ad Schellevis
85ad4ea359 Improve IPv6 documentation. 2023-05-31 17:23:10 +02:00
Ad Schellevis
d1b8f3c680 Sky UK tutoriali: escape quotes. closes https://github.com/opnsense/docs/pull/474 2023-05-25 09:03:50 +02:00
sjjh
2b805178bf
Update logging_firewall.rst: corrected format (bold, italic) (#473) 
It seems no nested stars are supported, thus concatenated.
 2023-05-19 07:38:00 +02:00
sjjh
0982c72fc1 Update insight.rst: typo 
Netlfow -> Netflow
 2023-05-18 08:12:07 +02:00
Juan
5a66dcfb22
Update dynamic_dns.rst (#469) 
Documentation for cloudflare in PR https://github.com/opnsense/plugins/pull/3435
 2023-05-15 21:16:22 +02:00
Ad Schellevis
7b15bae3ad os-ddclient: add some missing parameters 2023-05-08 10:28:03 +02:00
Franco Fichtner
5f50d046fd dnscrypt-proxy: listen address is automatic on IPv6 so the daemon trips over itself 
See: https://github.com/DNSCrypt/dnscrypt-proxy/issues/1217
 2023-05-08 10:11:37 +02:00
Ad Schellevis
0a5361b675 os-ddclient: add a note about backend selection 2023-05-08 10:08:12 +02:00
Hiigaraa
cc565a2ca5
Update Orange FTTH guide to follow the changes in the Orange infrastructure (#468) 2023-04-26 17:29:21 +02:00
Franco Fichtner
c8b3bb0043 orange fr: note change in 23.1.6 about VLAN-PCP on DHCP(v4) 2023-04-20 10:51:50 +02:00
Franco Fichtner
86480ca98d dnscrypt-proxy: same same but not different 
Remvoe the Unbound workaround asa "default" suggestion.  Standalonew
works fine so just make sure to reflect this correctly in the document.
 2023-04-20 10:47:02 +02:00
Franco Fichtner
0a0a607146 bind: improve documentation for 23.1.6, remove faulty advanced section 
Better blocklist support exists in Unbound and since Bind can run as
standalone there is no need to transform the faulty advanced options
to the file-based override that Unbound still supports.
 2023-04-20 10:40:23 +02:00
Ad Schellevis
b9fbf01aa6 cloud_backup - fix typo 2023-04-18 16:25:43 +02:00
Ad Schellevis
f2f2eb7a5e Interfaces: Diagnostics: Trace Route - extend doc for new mvc module 2023-04-15 19:27:55 +02:00
Ad Schellevis
4c2dadc84c VPN/IPsec - explain the need for firewall rules. The new connection module does not offer automatic rules as these are prone to errors. 2023-04-08 17:02:14 +02:00
Ad Schellevis
c2a0c3426c troubleshooting : add webgui recovery help, ipsec: explain async crypto a bit better 2023-04-04 17:08:55 +02:00
Ad Schellevis
c22256a674 VPN/IPsec/Examples - add a note about connecting childre. closes https://github.com/opnsense/core/issues/6451 2023-03-29 16:27:46 +02:00
Ad Schellevis
6148a3f658 System/Settings/Administration - minor fixes 2023-03-28 17:03:30 +02:00
Ad Schellevis
39187fbf03 System/Settings/Administration - reorganise settings a bit and add missing options. Also explain the risks of using "listen interfaces" and how to properly use them. Loopbacks are intended to create the environment needed to reliably bind a service in a changing world. 2023-03-28 16:50:58 +02:00
Stephan
3242ef1100 unbound: update reporting/advanced/blocklist documentation 2023-03-28 16:24:13 +02:00
Ad Schellevis
c4c8ac2078 Access / Servers / Radius - add mnissing options 2023-03-27 17:38:49 +02:00
Ad Schellevis
9f8e0a7910 IPS: change Emerging Threats documentation links 2023-03-21 16:36:02 +01:00
Ad Schellevis
ab648e28ea Interfaces: Diagnostics: Ping - update documentation, closes https://github.com/opnsense/core/issues/6378 2023-03-17 15:30:16 +01:00
Ad Schellevis
38e62752fb Interfaces: Diagnostics: Ping - documentation for https://github.com/opnsense/core/issues/6378 2023-03-16 21:59:34 +01:00
Ad Schellevis
f3c6e5b277 installer - fix compile errors 2023-03-13 20:51:26 +01:00
tinyboxvk
f8af768e58
Update the VMware instruction link to FreeBSD 13.x (#462) 2023-03-09 08:31:05 +01:00
Ad Schellevis
02f7d53076 installer - merge relevant items from https://github.com/opnsense/docs/pull/460 and cleanup 2023-03-06 20:18:01 +01:00
Justin Horton
d5f3033ae9
Update "first" WireGuard instance number (#459) 2023-03-05 10:51:26 +01:00
Joseph Shanak
b93ca29af3
Fix typo (#458) 2023-03-04 21:10:54 +01:00
Ad Schellevis
349fed6974 install.rst fix some links and start with an index due to the length of the page (https://github.com/opnsense/docs/pull/456) 2023-03-04 10:35:36 +01:00
Nick H
28ca1324d1
Update install.rst (#456) 2023-03-04 10:26:30 +01:00
Ad Schellevis
ced7ffee37 ditch Libre, undo install.rst to prevent merge conflicts in https://github.com/opnsense/docs/pull/456 2023-03-04 10:08:59 +01:00
Ad Schellevis
045c1ebb7d Firmware/Settings - Add "Activate the Business Edition" section 2023-03-02 17:25:05 +01:00
Ad Schellevis
e5c0069202 ditch Libre 2023-03-02 17:09:00 +01:00
Ad Schellevis
23ce3a341b Firewall: Settings: Advanced - update documentation, remove non existnig options and add Anti DDOS section 2023-03-02 16:55:22 +01:00
Michael Sims
c4bb885a21
Update git-backup document to include detailed SSH instructions. (#448) 2023-03-02 16:42:28 +01:00
Ad Schellevis
872bd4598a Firewall/Aliases - Add "OpenVPN group" type, closes https://github.com/opnsense/core/issues/6312 2023-03-01 18:16:35 +01:00
Christian
3877d1748f
Added section "Advanced Configurations" for Monit (#455) 2023-02-22 09:39:43 +01:00
Michael
e5472386dc
manual: make note about IPv6 24 hour disconnect (#454) 
https://forum.opnsense.org/index.php?topic=32259.msg156936;topicseen#msg156936
 2023-02-13 10:28:36 +01:00
Franco Fichtner
849aa4ba47 manual: typo in previous 2023-02-10 11:38:22 +01:00
Franco Fichtner
3679ae3697 manual: add common cron job information; closes #450 2023-02-10 11:33:17 +01:00
Justin Horton
c44d97b664 Fix typos in wireguard-client.rst 2023-02-05 22:59:15 +01:00
Evan Allrich
0d3dba2b69
Minor doc fixes (#452) 2023-02-05 11:51:18 +01:00
Stephan
7b3e1a7a31 unbound: update reporting / blocklist documentation 2023-01-25 12:09:33 +01:00