Messages

Hey nice one viragomann thanks I got them off using msata reader with freebsd laptop

And if I do manage to mount the data, what file path am I looking for to backup my config

Is there anyway to get the backup the config?

Hi all,

Running opnsense on a pcengine APU2 board and been rock solid for years and years but all of a sudden it wont boot and i got the below of serial

```
(ada0:ahcich0:0:0:0): CAM status: Auto-Sense Retrieval Failed
(ada0:ahcich0:0:0:0): Error 5, Unretryable error
, 41032026, 4103(ada0:ahcich0:0:0:0): READ_FPDMA_QUEUED. ACB: 60 01 fa ed 8b 40 02 00 00 00 00 00
(ada0:ahcich0:0:0:0): CAM status: Auto-Sense Retrieval Failed
(ada0:ahcich0:0:0:0): Error 5, Unretryable error
2027, 41032028, (ada0:ahcich0:0:0:0): READ_FPDMA_QUEUED. ACB: 60 01 fb ed 8b 40 02 00 00 00 00 00
(ada0:ahcich0:0:0:0): CAM status: Auto-Sense Retrieval Failed
(ada0:ahcich0:0:0:0): Error 5, Unretryable error
41032029, 410320(ada0:ahcich0:0:0:0): READ_FPDMA_QUEUED. ACB: 60 01 fc ed 8b 40 02 00 00 00 00 00
```
let me know

Thanks,
Rob

I have an external m2 ssd enclosure, can I put it in there and pull data off

hi all,

my firewall is toast and unfortunately i didnt keep a backup (i know) obviously i have the m2 SSD still in the garbage firewall, can i just move it into the new host and will it work that way

thanks,
rob

ok so apart from that you cant do anymore hardening on your opnsense?

Hi all,

what other steps can i take to stop my ISP eves dropping on me and seeing what im doing, i have enabled DoT, what else is there to enable to make my connections secure so they cant see what im doing apart from getting a VPN ?

Thanks,
Rob

ok thanks OPNenthu makes sense, thanks for all your help in this and now its all working, just want to say a big thank you to you!!!!!

thanks OPNenthu,

Im a bit confused then, whats the point of making an VIP for it even tho i can enter it directly in?

ok ive added the "IP Alias" thanks but i dont see it when i add the destNAT as when i click the drop down under "redirect target ip" i dont see it as an option, i can see all my "aliases" should i make it into an alias?

sorry what do you mean by this please sorry

Easiest is to add a VIP to your existing loopback device, something like fdff::1.  Any short, valid ULA will do.  Then you can use that ULA as the redirect target.

Better is to create a dedicated loopback device for redirects and assign it a static ULA in interface settings, then use that.

ok interesting

i changed both destNAT and fw rule the "dest" to "!RFC1918" and still didnt work

as soon as i changed "version" from "ipv4+ipv6" to "ipv4" under destNAT it worked

Hi,

thanks for that!

I made these rules

https://i.postimg.cc/tJRRpBjY/dest-NAT.png
https://i.postimg.cc/XJsSc3Rc/rule.png

for my destNAT i have made the "firewall rule" "pass" as you said but still doesnt work as im testing it on a vm and when i make my DNS use my opnsense DNS works but when i change it 1.1.1.1 it doesnt work i get no internet

thanks, can i get some help with how to setup this

NAT redirect rule can be used to send these requests to 127.0.0.1:53, which is the local Unbound service. This will ensure that these requests are sent over TLS.

Thanks,
Rob