Messages

You can send your logs to a remote server running elasticsearch to lower the space used on the device running the firewall.

I had the same problem. With the settings at https://forum.opnsense.org/index.php?topic=11801.0 I was able to get NAT A (was NAT D originally)

Specifically the step

create a manual outbound NAT for my switches IP but make sure you check "static port"

This was available at Firewall > NAT > Outbound. Select Hybrid and hit save.

I also removed all of my custom NAT port rules for the Switch that didn't change anything.

Now at least the outgoing connection works to another's island. I will have to have them check the incoming.

Hi, how would I go about blocking a whole domain... or at least making it more difficult to reach? For example, if I want to block access to ngrok.io sites, what could I do?