Messages

There is documented on this site an alternative install method, OS first then add Opnsense
bonne chance..Strebor

Thanks Bart, unfortunately I'm stuck with router as is, no bridge. If I were to go for a drop in TB will I still be able to OpenVpn an other functionality, in other word 'traffic shaping' aside what else will not work?

Strebor

Hi opnsensative types. I'd like to ask a question about the choices of topology available to me under  Opnsense. I'm not new to networking but see myself as more a victim than practician. I want to host a couple of very low volume web sites and some remote access software, VPN etc.

Should I go for the usual double NAT  behind the ISPs router, I could use IPv6 which is more static than the IPv4 address provided but as I can barely cope with v4 two more vs might be too many!

Or

Should I drop in a transparent Bridge to the existing LAN and let the ISP router do DHCP etc?

Do I put the internet facing servers in a DMZ from the ISP router or create a DMZ off the Opnsense host.

Answers on a postcard, thanks in anticipation Strebor

Thanks Franco, I was hoping to use my Yubikey for authentication just with OpenVPN.
Strebor

Hi opnsensonians.
Am I correct in thinking that from 17.1 I will be able to use Yubico's PAM module on OpenVpn?

Regards Strebor