Hi everyone. Im newbie in os routing. I was using fortinet fortigate 100d but when it crash i think i try opensource router and i found opnsense. Im installed latest version on my old pc and add 2 ethernet card. I configured wan, lan, lan2(securitycams). Im accessing wan, using dhcp, ftp etc. but
1- i want WebGUI access allow on internet (like my cellphone gsm access to my home opnsense)
2- i want ping hosts in lan (like in lan, ping pc1 to pc2)
3- i want reach lan host to lan2 (like in lan(lan) pc1 to lan2(securitycams) nvrdevice)
i google it and try some solutions but they dont work (Try disabling reply-to on WAN rules for webgui access)
and im here :)
i need your great holy informations and helps
best regards
ginitto
Quote from: gillmore271 on April 10, 2023, 02:37:19 PM
1- i want WebGUI access allow on internet (like my cellphone gsm access to my home opnsense)
2- i want ping hosts in lan (like in lan, ping pc1 to pc2)
3- i want reach lan host to lan2 (like in lan(lan) pc1 to lan2(securitycams) nvrdevice)
1) exposing any administrative panels to the Internet is not a good idea
2) this is default behaviour
3) allow traffic between these networks in firewall rules
I would agree with the comments in the post above. Under no circumstances should you allow the possibility of anyone on the internet to connect to your firewall - anyone that cracks it can get full access to everything behind your firewall.
If you really want to be able to modify your firewall when you're not on site I'd suggest you set-up a Wireguard VPN to your firewall, you should then be able to connect to the LAN port that way - it's what I use.