Control D DoT: DNS has Datacamp as ISP on https://www.dnsleaktest.com

Control D DoT: DNS has Datacamp as ISP on https://www.dnsleaktest.com

UPDATE: apparently they use Datacamp servers! I'll leave this post up for future references.

I'm using Opnsense's Unbound DNS to get DNS Over TLS with p2.freedns.controld.com (76.76.2.11 and 76.76.10.11).

When i use dnsleaktest.com, it sometimes one server has Control D as an ISP and it ALWAYS shows one ISP as Datacamp.

Datacamp mostly used by Proton VPN. I am testing without a vpn on.

Is my DNS data being redirected to a malicious server?

edit: when i disable Unbound DNS, my ISP's DNS server is used 100% of the time.

u/XxTriviumxX — 13 days ago

Allowing only my country with Maxmind geolite2: on opnsense vs SWAG (reverse proxy)?

Hi! I'm about to expose my server's services with SWAG reverse proxy. I know i can setup geolite2 on either OPNSense or SWAG. My goal would be to allow only IPs in my own country to "pierce through" my OPNSense firewall.

If I allow only IPs from my country on OPNsense, I'm scared I won't be able to access servers and services from other countries (ie: losing access to Aliexpress). However, when i enforce that on SWAG, it will only allow connections from my country directly on my services without worrying about losing access to services in other country. In return, with SWAG, i can't block them globally.

If it won't break anything when set up on OPNSense, can I just simply whitelist my own country? Or do i have to select every region one by one?

reddit.com
u/XxTriviumxX — 2 months ago

DoT using p2.freedns.controld.com, status page say: "Not Using Control D"

I'm using Opnsense's Ubound dns to get DNS Over TLS.
I tested DoT with quad9 and mullvad. Their status pages say i'm using their servers.
With p2.freedns.controld.com (76.76.2.11 and 76.76.10.11), the Control D status page says "Not Using Control D".

When i use dnscheck.tools, it says the DNS revolver is Control D as well as NetActuate. The NetActuate ptrs are presented in this form: xyz-h04.int.controld.com and they are in a different province (which is good, proves i'm not using the ISP's DNS server). The test claims i passed every DNSSEC tests.

I highly suspect this is an error on the status page, but i'm not surprised there could be something wrong on my end.

edit: there's also no errors on opnsense's logs! Everything runs great.

u/XxTriviumxX — 2 months ago

Opnsense and Omada Software Controller: setting up vlan 99 (mgmt)

I'm trying to move from vlan 1 to vlan 99 to manage my OPNSense router, my omada software controller (currently on my laptop, will migrate to mini pc), my sg2008p switch and my EAP603-outdoor AP with my management laptop.

I was able to pull it off with standalone mode, but as soon as you let the omada software controller take control, my efforts are gone! The guide i used (and the video in it) is https://homenetworkguy.com/how-to/set-up-management-vlan-for-opnsense-network-switch-and-access-point/

VLAN 99 works great when set as an access port. DHCP works well and i can access the web.

It's just that with standalone mode i can just set tagged and untagged ports during vlan creation as well as the ID after that as shown in the guide.... but the menu in the omada software is very different. Can someone help me recreate the steps on omada software controller?

u/XxTriviumxX — 3 months ago

Can an intel n150 16gb mini pc handle suricata/zenarmor at gigabit speed?

Hi! I want to know if my intel n150 16gb intel dual i-226v nic mini pc can handle suricata in IPS mode and zenarmor at gigabit speed..

I've looked everywhere and all i see are speculations... The closest answer i read was: n305 can handle 3gbps very well in a home lab with suricata/zenarmor enabled.

Can anyone confirm they are using n150 16gb at full gigabit speed while suricat and zenarmor is running? No speculations please­..

reddit.com
u/XxTriviumxX — 3 months ago

tl-sg2008p has vents blocked by sheet of paper

Hi! Is there any reason my vents are blocked by a sheet of paper? Is it okay for me to remove the paper?

edit: removed it.. https://imgur.com/a/w9gYd2O
Still don't know it's purpose though.

u/XxTriviumxX — 4 months ago

EAP603-Outdoor as a replacement for eap650?

I wanted to use an EAP650 to give my house wifi while paired with Opnsense and a SG2008p. I will have the software omada SDN. I will have at least 4 ethernet vlans and one of the wifi ssid will share the same vlan as an ethernet vlan.

After reading, i felt that the range of the EAP650 will not be enough. I was wondering if the EAP603-Outdoor can do the "SSID to VLAN Mapping" function like the EAP650.

It is unclear if i can do it or not, even with the omada software.

Let me know if I can just swap the EAP650 for the EAP603-Outdoor without losing functions..

edit: i am aware of the speed loss, which is okay.

reddit.com
u/XxTriviumxX — 4 months ago

Vlans with EAP603-Outdoor as a replacement for eap650?

I wanted to use an EAP650 to give my house wifi while paired with Opnsense and a SG2008p. I will have the software omada SDN. I will have at least 4 ethernet vlans and one of the wifi ssid will share the same vlan as an ethernet vlan.

After reading, i felt that the range of the EAP650 will not be enough. I was wondering if the EAP603-Outdoor can do the "SSID to VLAN Mapping" function like the EAP650.

It is unclear if i can do it or not, even with the omada software.

Let me know if I can just swap the EAP650 for the EAP603-Outdoor without losing functions..

edit: i am aware of the speed loss, which is okay.

Solved! The emulator shows VLAN settings: https://emulator.tp-link.com/EAP603-Outdoorv1.0_emulator/index.html

reddit.com
u/XxTriviumxX — 4 months ago

Before i buy a F2-425 Plus: Will installing Debian as the OS void the warranty?

Hey! I just wanna know if it voids the warranty when you install another os on a F2-425 Plus. I know TOS 7 looks promissing, but i'm a sucker for debian! Let me know!

bonus question: does changing the ram with my own DDR5 stick void the warranty?

reddit.com
u/XxTriviumxX — 4 months ago

TERRAMASTER F4-425 Plus: can i upgrade ram with any brand?

I love the hardware and the price of the TERRAMASTER F4-425 Plus! But i hear that some Terramaster NAS computers require specific Terramaster branded ram. Is it the case with TERRAMASTER F4-425 Plus? or can i simply use any brand of ddr5 ram?

edit: What about the F2-425 Plus?

bonus question: Can i install Debian via a bootable usb? And will that void the warranty?

reddit.com
u/XxTriviumxX — 4 months ago