Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [opnsense]

32 questions
2
votes
1 answer

I am unable to access services on the WAN IP from within the network

Normally, this would not be a desired configuration, but I am setting up a NextCloud server, and to validate the domain, it requires that it be able to access it through the public IP address. No matter what I do, I cannot get this to work. It…
Hubert Oliver
  • 65
  • 7
2
votes
1 answer

NTP Traffic, but NTP not installed

I have recently started with OPNSense and have limited outgoing traffic to HTTP/s, SSH ports. When analyzing my blocked traffic i found sporadic outgoing NTP-Requests from my local Linux machine. I am not very familiar with NTP. I am now wondering a…
BillGatesPriv
  • 23
  • 3
2
votes
1 answer

Should I run 2 firewalls or manage everything from one?

I currently have a UniFI Firewall in place and I plan to get a OPNsense firewall mainly for a VPN. Setup: Modem - OPNsense Firewall - UniFI Firewall - VLANS (Rules made by UniFi) Are there any advantages of running a setup with 2 firewalls or should…
Ben
  • 23
  • 3
1
vote
0 answers

LogStash and parsing OPNSenser logs

My logs are coming in as follows: <134>May 24 14:39:32 edge.internal filterlog[2535]:…
Jason
  • 3,931
  • 19
  • 66
  • 107
1
vote
0 answers

Routing issue on Debian 11 VM

I updated my OPnsense "router/gateway" to 23.1 a few days ago, and now I am experiencing an issue with one of my machines. I have one machine with OPnsense installed that acts as a basic NAT router for my private subnet 192.168.50.0/24. This…
Granwille
  • 51
  • 5
1
vote
1 answer

OPNsense move interface to other hardware port

I have an OPNsense with interfaces directy configured to the hardware ports. The corresponding switch port is also an access port. We plan to change the switch port to a trunk port to transport multiple VLANs via this port. Is there a way to move…
Lithilion
  • 131
  • 4
1
vote
0 answers

Wireguard Destination Host Unreachable on internal network

I'm setting up Wireguard to tunnel from a cloud VM to our internal network. The local server is using the Wireguard plugin for OPNSense. OPNSense acts as firewall, dhcp, etc. The cloud VM is not behind any firewall or anything. Server: interface:…
cclloyd
  • 593
  • 2
  • 14
  • 29
1
vote
1 answer

OPNsense NAT/Port Forward: Forward multiple protocols and ports

I want to forward ICMP and specific TCP and UDP ports on OPNsense but I'm unable to find a concise solution. Specifically I want to forward ICMP, http, https and UDP 32768-65535. I'm adding a new port forward in the port forwarding section…
Saumya Kanta Swain
  • 198
  • 1
  • 9
1
vote
1 answer

OPNsense WAN failover causes disruption when non-active WAN is down

I have the latest version of OPNsense set up in a VM on ESXi 7. OPNsense is very similar to pfSense, and I suspect the solution would apply to both. All the NICs are PCI passthrough devices: A management interface WAN 1, my preferred WAN to be used…
user3466413
  • 79
  • 2
  • 5
1
vote
2 answers

Offloading PPPoE from an OPNsense router

I'm running opnSense, a FreeBSD-based firewall and router similar to pfSense, in a virtual machine under VMware ESXi 7 on a Dell PowerEdge R230, as a router for my home network. No other VMs are running or even set up on the host, just this one. My…
user3466413
  • 79
  • 2
  • 5
1
vote
0 answers

Can't see docker ports from external machines when using a veth interface with an OPNSense KVM

Quick summary of the setup: Ubuntu Server 20.04 with 4 network ports OPNsense router running in libvirt KVM One port is WAN, three ports are LAN (bridged) Router works great Server (same one running OPNsense) gets access to LAN and internet by VETH…
colordrops
  • 11
  • 2
1
vote
0 answers

NTP ManualPeerList Client Sync Issue, Windows Server 2019

I am facing NTP syncing issue on my Windows Server 2019 which is syncing as an NTP Client. The OPNSense firewall is syncing from : 2.ie.pool.ntp.org 0.europe.pool.ntp.org 3.europe.pool.ntp.org I have on Firewall : Port 1 - WAN Port 2 - OPNSense…
Huud Rych
  • 85
  • 6
0
votes
0 answers

Multiple Site-To-Site VPNs to one OpenVPN Server

I am struggling to setup multiple site-to-site vpns. I have 3 sites: Site A: OpenVPN Server, inside OPNsense, IP Ranges: 192.168.10.0/24 Site B: Asus Router with Fresh-Tomato, IP Ranges: 192.168.20.0/24 Site C: Asus Stock Router, IP Ranges:…
Roemer
  • 101
  • 1
0
votes
0 answers

OPNsense with Radius Accounting

I've been testing OPNsense radius accounting by following this document, https://docs.opnsense.org/manual/how-tos/accounting.html I am able to authenticate user through the captive portal but there is no 'reply-message' being shown on the user side…
Mindf
  • 1
0
votes
0 answers

Filtering single unrouted IP with firewall VM

I have virtualization hosts (Proxmox) running multiple VMs providing public services. I'm using a firewall appliance (OPNsense) to filter the traffic. This works fine for a routed subnet, where the public IP is bound directly to the virtual network…
Andreas Piening
  • 173
  • 1
  • 9
1
2 3