Topics

Hi there,

I initially updated my OPNsense (running in a Proxmox VM) when the 23 release was made. I was either running 23.0.X or 23.1.1. I don't exactly remember the release I had prior to the update currently. Regardless, since it's been a while since I updated my OPNsense and I was performing maintenance on my homelab, updating other stuff, I decided to update OPNsense as well. The update installed a new kernel and required a reboot, which happened automatically. However, upon reboot, I lost all internet connectivity in my household.

I can verify my ISP router has internet. I have connected to it via Ethernet and removed the routing/DNS setting to my OPNsense and I am able to access the internet. When reverted, and all traffic is going back to my OPNsense, my devices can get an internal IP address, thus I am able to reach my servers etc. but I cannot ping 1.1.1.1 or google.com. When pinging Google, I do not get any messages etc. presumably because I am not able to translate the domain to an IP address. When I ping 1.1.1.1, I get no route to host.

I tried downgrading to whatever I had (presumably 23.1.1) using opnsense-update -kr 23.1.1, however, since I have no internet, I cannot get the kernel/packages.

I have read that several people faced issues with the 23.1.6 update, due to the AdGuard Home plugin being broken for a bit. I have AdGuard Home in my network, but not on OPNsense as a plugin. It's on a separate VM/container (i.e. independent), and it was fully functional before the update, as I've updated it 2-3 days before I decided to update OPNsense.

I am trying to figure out what is the problem, i.e. why am I not getting any internet on my WAN, and how to fix it, but I can't seem to figure out what the problem is or what the solution is. As a result, I am curious how can I downgrade/revert the update, before I try something drastic, such as spinning up a new OPNsense VM, and migrating the traffic there using a backup of my configuration etc.

Does anyone know how can I fix this, or if they've experienced such an issue?

Thanks!

Hey all,

I am trying to use OPNsense with ProtonVPN (installed on my LXC container) for torrenting, so that I can torrent my favorite stuff without leaking my IP.

I am using

- qBittorrent 4.5.2
- Proxmox Virtual Environment 7.3.4 (Custom HPE DL360p Gen8 Kernel)
- OPNsense 23.1.1_2 (Virtualized on PVE)

The container has protonvpn-cli installed and has the wireguard profile (with nat-pmp forwarding enabled) downloaded and imported to nmcli via nmcli connection import type wireguard file ProtonVPN-SE05.conf. However, when I run natpmpc to check the natpmp state, as instructed by https://protonvpn.com/support/port-forwarding-manual-setup/ ProtonVPN help article, I get the following:

Code Select Expand

$ natpmpc
initnatpmp() returned 0 (SUCCESS)
using gateway : 10.10.20.1
sendpublicaddressrequest returned 2 (SUCCESS)
readnatpmpresponseorretry returned -52 (FAILED)
readnatpmpresponseorretry() failed : network failure
    errno=0 'Success'

The ProtonVPN Wireguard config looks like the following:

Code Select Expand


[Interface]
# Key for qBittorrent
# Bouncing = 2
# NetShield = 1
# Moderate NAT = off
# NAT-PMP (Port Forwarding) = on
# VPN Accelerator = on
PrivateKey = REDACTED
Address = 10.2.0.2/32
DNS = 10.2.0.1

[Peer]
# SE#5
PublicKey = REDACTED
AllowedIPs = 0.0.0.0/0
Endpoint = X.Y.172.188:51820

I checked my OPNsense firewall and filtered the live traffic to 10.10.20.8 (the IP of the container), however I do not see any blocked traffic etc. in 10.10.20.8, as seen https://imgur.com/a/5cboDRc. Since the traffic was going to Port 5351 on 10.10.20.1, I configured my upnp plugin to the https://imgur.com/a/sZu9pYt settings:

For context, my VLAN20 firewall rules look like https://imgur.com/a/J4WZ2V9. For further context, my (now out-of-date) home topology looks like https://imgur.com/a/u4NgOye (several VMs etc. were deleted etc. since that topology's creation).

Any idea how can If ix this, so I can port forward only 62157 on my container, in order to torrent without leaking my home IP?

Thanks in advance!

Hi there,

I am trying to modify my OPNsense's SSH service config (sshd_config). I tried editing /usr/local/etc/ssh/sshd_config, but upon saving, it gets overwritten/reset by OPNsense. I am just trying to increase MaxAuthTries to 10 (instead of 6), as I use my password manager's SSH agent, which tries multiple SSH keys before getting to the correct one.

I tried editing /etc/rc.conf and adding the following line: sshd_flags="-o MaxAuthTries=10", but this did not seem to have worked/taken effect.

Does anyone know how can I increase the MaxAuthTries?