Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - patrick7

#1
Since the upgade to 19.7 I get the following error above the firewall rule table (which is broken sometimes btw):

Warning: Invalid argument supplied for foreach() in /usr/local/opnsense/mvc/app/library/OPNsense/Firewall/Plugin.php on line 134

How to fix? ;-)
#4
no ideas? :-(
#5
General Discussion / IPv6 policy routing not working
January 01, 2019, 08:57:47 PM
I'm trying to set up policy routing with a he.net tunnelbroker.
The rule is matching, but the traffic is still sent to the default gateway, not to the next hop specified in the firewall rule.

pfctl -sr | grep gif0
pass in log quick on igb2_vlan104 route-to (gif0 2001:db8::1) inet6 from (igb2_vlan104:network) to ! <LocalNetworks> flags S/SA keep state label "USER_RULE: LANSALT -> Internet"


It works for IPv4 with similar config.

Is there a bug?
#6
General Discussion / Re: nginx listen ip
October 17, 2018, 01:11:52 PM
You are right, there are other ways.
But still it should be possible to bind nginx to a single IP. e.g. replace the listen port with just "listen". If someone enters 443, it listens on all IPs, port 443, if you enter 1.2.3.4:443, it listens on IP 1.2.3.4, port 443.
I don't like to bind services to all IPs even if I only need the service on one IP.  For all other services I use that's possible...
#7
General Discussion / Re: nginx listen ip
October 16, 2018, 06:58:57 PM
Will try, but even if it's possible to serve the webinterface, there should be a possibility to tell nginx to listen on which ip's.
Use case multiple servers, dedicated IP per website, ...... (endless list)
#8
General Discussion / Re: nginx listen ip
October 16, 2018, 08:11:55 AM
I see several usecases.
One is that the webinterface already listens on the same ports :-)
#9
General Discussion / nginx listen ip
October 15, 2018, 10:38:06 AM
Hi

Is there a possibility to tell a nginx server to listen on which IP?

Regards
Patrick