Messages

Hallo zusammen,

ich habe zwei Firewalls. Bei der einen taucht der Fehler auf, dass ich einen Portscan auf den Graylogserver nur erfolgreich vornehmen kann, wenn ich als Source-Adresse die Firewall LAN Adresse nehme. Wenn ich das Feld leer lasse, funktioniert die Verbindung nicht.
Bei der anderen Firewall erhalte ich den Fehler, dass dass der Austeller des SSL Zertifikates (Wildcard Zertifikat) nicht ermittelt werden kann. Für das Webinterface funktioniert das SSL Zertifikat ohne Probleme.

Vielen Dank im Voraus

Hallo zusammen,

wenn ich die Weboberfläche auf einen Port kleiner als 55000 stelle, ist dieser per WAN nicht erreichbar, über das LAN funktioniert jeder Port. Woran könnte dies liegen? Das gleiche Problem taucht auch bei der Konfiguration von HA Proxy auf.

Vielen Dank im Voraus

That is something i can answer, because i don't know, how the provider do this. The two interfaces are connected directly with a patch cable.

It works now. It was just my fault. There was a second firewall from my provider and it declined all the traffic from the HA interface.

Thank you for your help :)

This is the firewall rule, i have set at both firewalls:

IPv4 *   HA net   *   *   *   *   *   Default allow LAN to any rule

No i changed nothing there.

I configured HA on both firewalls. I entered the Synchronize Peer IP, the Synchronize Config to IP and the credentials. If i leave the Synchronize Peer IP empty. I see the following traffic in the firewall:
HA      2022-11-15T09:42:35   10.0.0.1   224.0.0.22   igmp   let out anything from firewall host itself   
HA      2022-11-15T09:42:35   10.0.0.1   224.0.0.240   pfsync   let out anything from firewall host itself
But if i enter the correct IP, nothing happens. The firewalls can ping each other and if i click save the master firewall call the second one on port 443.

The firewalls can ping each other. I also checked with a port scan, if the backup firewall listens on the https port on the HA interface and got a succeeded.

I was now able to ping the other firewall, but HA isn't working. In the menu is the info that the backup firewall is not accessible or not configured.

Hi, i configured the firewall rules already. I let every ipv4 traffic on that interface in.

Hello,
i have two OPNsense firewalls which are connected to a switch and also connected directly to use this port as pfsync. I have entered an ip of the same subnet, but the firewalls can't ping or reach each other. Do i need to configure something else?

Thanks i advance :)

Hey everyone, currently i am playing around with the HAproxy feature of the OPNsense Firewall. I need to redirect https://www.example.com to https://example.com and don't know, how i could achieve this.

Hopefully somebody could help me :)