• OPNSense rules...

    From Shurato@21:2/148 to All on Thursday, July 31, 2025 19:22:00
    How do I set this for a protocol? Google says it's an option, but it's
    not.

    I need to set 1 connection per IP for Telnet and SSH, 2 for NNTP and 3 for
    FTP, but I can't figure out how to do that...

    Ok, looks like it's max source states. If I set that, I have to pass the
    rule. Do I set this for LAN or WAN? I've tried both, applied the rule and
    was able to connect from an IP behind a VPN more than once with the max
    source states set to 1.

    --
    Shurato, Sysop Shurato's Heavenly Sphere (ssh, telnet, pop3, ftp,nntp,
    ,wss) (Ports 22,23,110,21,119,999)


    *** THE READER V4.50 [freeware]
    ---
    * Origin: Shurato's Heavenly Sphere telnet://shsbbs.net (21:2/148)
  • From phigan@21:1/141 to Shurato on Monday, August 11, 2025 21:34:50
    I need to set 1 connection per IP for Telnet and SSH

    That sounds nice until your terminal session locks up one day and you can't access your things because there's a stale connection and you have to get in from an alternate source which you may or may not have access to right at that time.

    ---
    * Origin: 68k Mac Club | bbs.m68k.club (21:1/141)
  • From Digital Man@21:1/183 to poindexter FORTRAN on Wednesday, August 13, 2025 21:02:38
    Re: Re: OPNSense rules...
    By: poindexter FORTRAN to phigan on Mon Aug 11 2025 08:51 am

    they applied their firewall rules on the wrong interface and locked themselves out of the network[1] and the responses were hilarious. This
    one made me cough up my coffee.
    [1] I've done that.

    Rite of passage. :-)
    --
    digital man (rob)

    Synchronet "Real Fact" #34:
    The back-up synchro.net nameserver and CVS repository is hosted by Deuce
    Norco, CA WX: 68.8øF, 80.0% humidity, 5 mph W wind, 0.00 inches rain/24hrs
    --- SBBSecho 3.29-Linux
    * Origin: Vertrauen - [vert/cvs/bbs].synchro.net (21:1/183)