OPNsense Forum

Archive => 18.1 Legacy Series => Topic started by: guest17399 on July 09, 2018, 10:02:40 pm

Title: [LAN] I can not access my web resources
Post by: guest17399 on July 09, 2018, 10:02:40 pm

There is a web server and other resources on the local network, to which I can not connect from the LAN at https://www.domen.com/.
Connecting from LAN to NAT does not work.

How can I make the resources located on the LAN network communicate with each other?
In the firewall settings for LAN there is this rule:

Title: Re: [LAN] I can not access my web resources
Post by: bartjsmit on July 09, 2018, 10:36:10 pm

You likely need to check that the NAT for the web server has reflection enabled, or you need to do split-DNS.
https://en.wikipedia.org/wiki/Split-horizon_DNS

The latter is generally preferred from a security, performance, and reliability perspective. I.e. your direct web traffic doesn't go outside your network, takes a shorter route, and works even if the firewall is down.

Bart...

Title: Re: [LAN] I can not access my web resources
Post by: guest17399 on July 10, 2018, 12:18:25 am

I can connect to a web server from any network behind NAT.
And the fact that in NAT (from the LAN) I can not connect anymore.

Decision:
Adding a gray address to / etc / hosts