OPNsense Forum

English Forums => General Discussion => Topic started by: guest41860 on December 24, 2023, 06:03:19 PM

Title: Lan has no internet
Post by: guest41860 on December 24, 2023, 06:03:19 PM
Hi all,

I'm currently replacing my ISP router with my own GPON, I have spoofed the serial number to get the fiber connectivity and it works!

Then I installed OPNsense on a device to become my new router, I have spoofed the MAC address, created a VLAN (on WAN) and I am sending the good DHCP options to get a lease, it works too, I get an IP!

But now I'm facing a problem and I don't know what is wrong. Neither OPNsense nor the devices connected on the LAN have internet.

The internet Gateway is an upstream gateway, the outbound rules are the default one and I created rules to allow all the traffic in both directions on all the interfaces.

(https://i.ibb.co/yVkHGmK/interfaces-internet.png)

(https://i.ibb.co/4PxbhHm/gateway-internet.png)

(https://i.ibb.co/ctbSjBg/lan-config.png)

If I try to query a DNS server from my laptop, I don't receive any response, the LAN interface neither. But I can see the response in a packet capture on the internet interface.

(https://i.ibb.co/yYZmdkx/live-view.png)

(https://i.ibb.co/jDzvRD8/capture-interface.png)

Do you have any idea to fix this please?
Title: Re: Lan has no internet
Post by: cookiemonster on December 25, 2023, 02:51:06 PM
OPN seems fine at first glance. Query in on LAN, out on WAN aka "Internet" and back in, then out of LAN to client.
Problem client-side maybe?
Title: Re: Lan has no internet
Post by: Maurice on December 26, 2023, 01:54:40 PM
Quote from: wildfire48974 on December 24, 2023, 06:03:19 PM
I created rules to allow all the traffic in both directions on all the interfaces.

This is neither required nor recommended and might cause more problems than it solves, depending on how exactly you configured these rules. The default rules are perfectly fine for basic Internet access.

Do you have a public IPv4 address? Or RFC 1918 / 6598 (CGNAT)? Do these DNS servers have public IPv4 addresses?

Is this packet capture from opt3 only? Asking because there are packets with destination address 10.66.0.10, which should never appear on this interface.

And btw., a /16 for a LAN is generally not recommended.

Cheers
Maurice
Title: Re: Lan has no internet
Post by: jesusdleguiza on September 24, 2024, 04:06:50 AM
issue in 24.x version?