Messages

This is exactly what I'm looking for. Thanks!

I have the whole question in the Subject. I have a remote server (OpnSense) and I have access to it via Wireguard VPN. On that site I have a bunch of servers running different tasks. One of them feeds FlightRadar24. I got messages that the feed was dead. I attached to that network with Wireguard, and I could ping only the OpnSense server. Looking into the management GUI I discovered that the DNSMasq service was down. I started it and all my other services started to respond after a while.

So my question is: Can OpnSense react to a service not started or having gone down, and send me an email?

I must have chosen something wrong when I tries to make an alias, because it didn't like ipv6 addresses. Now it works Thanks

This is a small personal network. My ISP earlier let me get a ipv4 address that was routed, so I could reach my web server from the internet. I got a new address recently (standard good ipv4 address via DHCP) and it is not routed. However I can reach my server with ipv6 (tried ping).

What is the best strategy to let traffic in to the web server (only 443) via ipv6? I tried to make a rule and point out the servers ipv6 address, but in the alias section, there is no such possibility, it doesn't like ipv6 addresses. So what do I do?

The ipv6 address span is a /56 that I get from my IPS, and I give it out to four separate networks inside.

So Dnsmasq is still running but not responding?

It works when running, but is stopped without notification three times, causing trouble. I turned it off and am back to ISC DHCP witch never fails.

dmesg says nothing about dnsmasq! no segfaults shown

Got any weird settings on like strict interface binding (dnsmasq general settings, advanced)? If interfaces drop out I can imagine dnsmasq not liking that.

No it is very straight forward. Activated on LAN only. Nothing extra. Just a simple DHCP span from 101 to 200. about ten fixed addresses. DNS via Unbound as suggested.

I went away two days, when I come home DNSmasq has stopped again. So I gove a fixed address to my iMac, start Dnsmasq again. Tomorrow I'll activate KEA instead

I've switched from ISC DHCP to dnsmasq a few weeks ago. Followed the instructions thoroughly, and all seems to work fine. But twice since the switch the dnsmasq service has just stopped witch of course leads to clients not getting their IP-addresses.

After manually giving my main work computer a fixed address, I can connect with OPNsense server and start the service again. I see nothing in the logs.

Sorry for the spamming. Turns out it had to do with my DNS name provider. Just happened to coincide with the upgrade.

I don't know if it has something with the update to do, but after upgrading to 24.7.12 my (since long time working) client OpnSense server can no longer connect to the main site.I see lots of these messages in the log

2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: Client disconnected   
2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: CMD 'state'   
2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock   
2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: Client disconnected   
2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: CMD 'status 3'   
2025-01-23T15:38:11   Notice   openvpn_server1   MANAGEMENT: Client connected from /var/etc/openvpn/server1.sock   
2025-01-23T15:38:01   Notice   openvpn_server1   MANAGEMENT: Client disconnected   
2025-01-23T15:38:01   Notice   openvpn_server1   MANAGEMENT: CMD 'state'

I had a hard time to get it working, until I started using the "peer generator" By using that, and let the clients read the generated QR-code. The everything works nicely

The ssh keys are stored in .ssh directory in your home directory. Look at man ssh

And the question then. How do I configure interface #2?

The same way you did #1 ... except use a different value for "Assign prefix ID"

At last I understood how. Thank You!

You need also ti track WAN interface IP for the other networks. Only make sure to use another identifier for each network. Default is 0, then use 1 and 2 for the other networks.

Default is LAN OPT1 OPT etc, so how do you mean I should do?

A single interface always gets a /64, so you can in fact have up to 256 interfaces with that /56 from your ISP.

And the question then. How do I configure interface #2?