Idiots everywhere, and they deem themselves geniuses

Enter OPNsense, a better alternative to PFSense.

It's better, but it's still idiotic and here's why.

General trend in OPNsense admin UI is to use a bar at the top for the filtering, i.e. you have a drop-down for the domain and a text box next to it with a plus sign. That plus sign usually adds the entered text to a list of filters. Except the alias diagnostics form where it adds the text to the alias's list of items without any confirmation.

So imagine a network admin diagnosing a oh, so common issue with a GeoIP failure whereby an IP address is allowed through a blocking rule despite it not belonging to an allowed country or the other way around, and you want to search for an IP or subnet but instead OPNsense adds that to the list. FUCK! You've just explicitly allowed an address that is supposed to be blocked or blocked the one that has to be allowed.

Thank you, geniuses! Genius is as genius does: always as a degenerate.

Posted by: LinuxLies at 10:37 AM | No Comments | Add Comment
Post contains 188 words, total size 1 kb.