Topics

I have an external spam filter that passes mail to my mail server on port 25.

I want to ensure that only mail from the spam filter is delivered to my mail server.

I setup an alias with the IP ranges for the spam filters public ip address but the server gets blocked no matter what I try.

I am setting this up on the NAT port forward.


Do anyone have an example of how to set this up?
for example I have this range setup in the alias:    72.35.12.0/255.255.255.0

Thanks,

Trent

Been using opnsense since the  version 17.* days and In prior versions I had no issue adding and IP alias from WAN address block under the virtual IP setting.

Now when I enter one it flags that IP is invalid.  I can export the config file and add or edit manually but was wondering if there is something I am doing wrong when I try to use the GUI.


Thanks,

Trent

I have 2 virtual IP addresses assigned and have adjusted the settings so that you will use the same IP address for a connection. (Made adjustments to the stick connection)

I have 2 outbound NAT rules set for servers so any data out will use the specified IP address. But my question is how can I force all other LAN traffic to simply only the Wan IP address and not use the other defined addresses.


Thanks,

Trent   

Just last night I upgraded to OPNsense 18.1.2_2-amd64 and since the upgrade none of the computers that have FTP clients running on them can access an FTP server outside the firewall.

I never added any special rules to the firewall up to this point to get them to work. But the upgrade from 7.7 to 8.1 change something related to the FTP.


Right now I had to move those machines over to an internet connection that is routed through my old firewall to get things working again.  Anyone have any suggestion of something I can try to resolve the issue?



Thanks,

Trent

Everything has been working fine the last month since Installed OPNsense firewall then out of the blue Randow people have started getting SSL certifcate errors when trying to connect to our internal exchange server.

The SSL certificate is valid also one of the warning is an OPN certificate as well.

Anyone have any idea how to have the firewall stop block the SSL certs?  If revert them back to the one firewall everything is fine.

Thanks,

Trent

Hello,

I am wondering how to correctly setup  additional IP addresses on my WAN connection.

I have 8 IP addresses available and need to use the additional IPs to forward ports via NAT to my mail and web server.

Thanks