OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: LiorY on May 23, 2024, 08:08:58 AM

Title: Adding LAN suspends connection via WAN
Post by: LiorY on May 23, 2024, 08:08:58 AM
Im running OPNsense on PROXMOX and when I have a WAN ips I can access the GUI, after I add LAN my connection is lost.
Any ideas?
Title: Re: Adding LAN suspends connection via WAN
Post by: meyergru on May 23, 2024, 08:48:14 AM
That is why there is an "IDS" setting. Enable only that, see what gets flagged in the logs and then either disable those specific rules or remove the root cause. Obviously, when you jump directly to "IPS", some anticipated problems cause a disconnection.
Title: Re: Adding LAN suspends connection via WAN
Post by: LiorY on May 23, 2024, 09:27:59 AM
I actually removed all rules of NAT and filter before adding the new LAN, which means I shouldnt have any disruption between the networks.
Title: Re: Adding LAN suspends connection via WAN
Post by: meyergru on May 23, 2024, 11:22:18 AM
You cannot remove IPS rules by fiddling with NAT and firewall settings.

If you enable suricata IPS, it will detect, log and block anything suspicious. With only IDS enabled, it will detect and log only.

However, when your are locked out, you obviously cannot inspect the logs to see which suricata (i.e. not NAT/firewall) policies or rules cause the block. These are on a tab under "Intrusion Detection", not in the firewall or NAT rules.