OPNsense Forum

Archive => 17.7 Legacy Series => Topic started by: agustinrojen on January 13, 2018, 05:54:54 am

Title: How do I turn off OPNSense firewall? like windows firewall.....
Post by: agustinrojen on January 13, 2018, 05:54:54 am
I have an IP address on my OPNsense, 192.168.1.15 (LAN).

And another IP address for my other device 192.168.1.9 (LAN).

It seems that in my shell. I pinged my other device, 192.168.1.9 using my OPNSense. It goes through and it is pinging because my other device firewall was off.

and when I pinged my OPNSense, 192.168.1.15 using my other device. It just says request time out? I just wonder. How do I turn off my OPNSense firewall like windows firewall? Thank youuu.

newwbiee here.
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: mimugmail on January 13, 2018, 06:48:47 am
You have to check the firewall rules and eventually open ICMP.
Just post a screenshot of the LAN tab.
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: fabian on January 13, 2018, 10:29:29 am
it woks in the advanced settings - see screenshot.

Please note that you will loose NAT as well.
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: weust on January 13, 2018, 12:37:25 pm
Just to clarify, you do not turn off a firewall. That will mean no traffic will be passed at all.
For Windows Firewall not to do anything, you Disable its profiles (Domain, Private and/or Public).
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: franco on January 13, 2018, 12:38:30 pm
FWIW, you can, ending up with a routing platform. ;)
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: guest7876 on January 15, 2018, 11:06:14 pm
FWIW, you can, ending up with a routing platform. ;)

is there a guide somewhere on how to do this?

a knob in the advanced page would be handy to click and have it turn into a routing platform and not have to jump thru a bunch of steps.

i have a few locations that i still have pfsense deployed cause its a routing platform only and i couldnt figure out how to make opnsense act like a routing platform only
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: fabian on January 16, 2018, 04:39:25 pm
is there a guide somewhere on how to do this?
not really
a knob in the advanced page would be handy to click and have it turn into a routing platform and not have to jump thru a bunch of steps.

i have a few locations that i still have pfsense deployed cause its a routing platform only and i couldnt figure out how to make opnsense act like a routing platform only

see the screenshot in my previous post
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: guest7876 on January 17, 2018, 11:49:27 am
is there a guide somewhere on how to do this?
not really
a knob in the advanced page would be handy to click and have it turn into a routing platform and not have to jump thru a bunch of steps.

i have a few locations that i still have pfsense deployed cause its a routing platform only and i couldnt figure out how to make opnsense act like a routing platform only

see the screenshot in my previous post

so turning off NAT, turns off the firewall? 

on pfsense i have it setup as a routing platform but with the firewall active as certain vlans cant see the internet or certain other vlans per company policy. one of the clients has in excess of 20+ vlans that terminate on pfsense and forward to there edge device (Juniper SRX240H2) which does NAT on certain subnets and not on others.

please provide more info on how to make this work? im obviously not the only one that can make this a routing platform only. it just doesnt forward traffic out the wan port.
Title: Re: How do I turn off OPNSense firewall? like windows firewall.....
Post by: franco on January 17, 2018, 10:07:11 pm
It's really not that complicated. You can disable outbound NAT and keep the firewall rules functionality, or you can uncheck the firewall filter in the advanced settings, lose rules and NAT at the same time. It depends on your use case, throughput requirements, etc.