hi am trying to moving from PFSense to OPnSence
am trying to do the same setup on OPNsense that i have in pfsence and i have 16 internet ip that can be used but hiting a problem
this is part of the setup have hidden my ip
Wan **.**.***.210 /28
Gateway **.**.***.209
Lan 192.168.1.2 /24
Dmz 10.10.10.10 /24
Virtual IPS
**.**.***.211/28
**.**.***.212/28
**.**.***.213/28
**.**.***.214/28
**.**.***.215/28
**.**.***.216/28
**.**.***.217/28
**.**.***.218/28
**.**.***.219/28
**.**.***.220/28
Outbond nat mode
Automatic outbound NAT rule generation.
(IPsec passthrough included)
Nat /Port Forward
Interface Protocol Source Address Source Ports Dest. Addr Dest. Ports NAT IP NAT Ports Description Actions
WAN TCP * * WAN address 993 (IMAP/S) 192.168.1.18 993 (IMAP/S) imap ssl
WAN TCP * * WAN address 143 (IMAP) 192.168.1.18 143 (IMAP) MAIL IMAP
WAN TCP * * WAN address 110 (POP3) 192.168.1.18 110 (POP3) MAIL POP
WAN TCP * * WAN address 80 (HTTP) 192.168.1.18 80 (HTTP) cb http
WAN TCP * * WAN address 443 (HTTPS) 192.168.1.18 443 (HTTPS) cb https
WAN TCP * * WAN address 587 (SUBM) 192.168.1.18 587 (SUBMISSION)
WAN TCP * * WAN address 25 (SMTP) 192.168.1.165 25 (SMTP) cb mail
WAN TCP/UDP * * WAN address 8320 192.168.1.85 8320
WAN TCP * * WAN address 8081 192.168.1.100 8080
WAN TCP * * WAN address 465 (SMTP/S) 192.168.1.165 465 (SMTP/S) cb smail
WAN TCP * * **.**.***.216 25 (SMTP) 10.10.10.151 25 (SMTP) z mail
WAN TCP * * **.**.***.216 22 (SSH) 10.10.10.163 22 (SSH) z mail
WAN TCP * * **.**.***.216 587 (SUBM) 10.10.10.163 587 (SUBM) z mail
WAN TCP * * **.**.***..216 465 (SMTP/S) 10.10.10.163 465 (SMTP/S) z mail
WAN TCP * * **.**.***.216 2703 10.10.10.163 2703 z mail 2703
WAN TCP * * **.**.***.213 80 (HTTP) 10.10.10.5 80 (HTTP) 4 http
WAN TCP * * **.**.***.213 443 (HTTPS) 10.10.10.5 443 (HTTPS) 4 https
WAN TCP/UDP * * **.**.***.213 34000 10.10.10.5 34000 4
WAN TCP * * **.**.***.211 80 (HTTP) 10.10.10.30 80 (HTTP) z http
WAN TCP * * **.**.***.211 443 (HTTPS) 10.10.10.30 443 (HTTPS) zf https
WAN TCP * * **.**.***.211 8080 10.10.10.30 8080 z magmi
WAN TCP * * **.**.***.211 8022 10.10.10.30 22 (SSH) z ssh
the problem is everry time someone try to access 213 port 80 it keep going to wan port 80
in pfsence this work fine but it seem to alway fail
what am i doing wrong and why pfsense is fine but not OPNsense
hope is a silly diffrent am missing
thanks
"WAN address" is all addresses on WAN including the virtual IPs. Configure the individual addresses explicitly. With or without a "speaking" alias is your choice.
Ensure that System: Settings: Administration > HTTP Redirect is checked to disable redirection of port 80 to the web GUI.
ok thanks, funny pfsense is fine with that but i will try again and come back again thanks
pfSense redirects port 80 as well as long as you didn't check System: Advanced: Admin Access > WebGUI redirect.
port 80 wan go to a web not the gui with no problem as webgui should never be on wan only on lan
The default HTTP --> HTTPS redirect rule will catch traffic on all interfaces. Best disable it, you don't want the UI over plaintext HTTP, anyway.
Quote from: trident on Today at 07:44:46 PMhi am trying to moving from PFSense to OPnSence[...]
If you have the pfSense installation handy you could grab its raw rule configuration and compare it to what you have on OPNsense. I don't know if it's available in the GUI in pfSense; it is in OPNsense. Or there are various standard pf methods (probably the config files would be easiest).