Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - jphilebiz

#1
Quote from: cookiemonster on July 06, 2025, 05:18:11 PMAre these two different locations? So how are they connected to each other, presumably over the internet? Is it a VPN ?

Using Tailscale on both ends, but should not matter? My laptop is also on Tailscale and can see local network.
#2
Quote from: viragomann on July 06, 2025, 04:36:25 PM
Quote from: jphilebiz on July 06, 2025, 12:31:00 PM
  • Both networks (home (192.168.0.0 dhcp range) & cottage (192.168.1.0 dhcp range)) run OPNSense (latest)
  • The OMV was running on dhcp and changed it to static (192.168.0.51 - outisde of dhcp range) and well, no change
This IP seems to be in the wrong subnet.
?
Good catch, but that's a typo (fixed, thanks!)
#3
Hi everybody,

Am stomped and baffled, I need a hand to fix what's happening here at the cottage. Am sensing an OPNsense issue/config item here.

Here is the summary of what led to this post:

  • I set up an Open Mediavault server for the cottage at home first and did a local rsync with the home one and brought the server to the cottage this weekend.
  • Both networks (home (192.168.0.0 dhcp range) & cottage (192.168.1.0 dhcp range)) run OPNSense (latest)
  • I connect the cottage one at the cottage and OPNsense sees the server is connected but can't locally access it but I can over Tailscale (ok server is working at least). I can't ping that IP address either, just does not want to reply.
  • So I deleted the NIC in OMV, recreated one manually (seemed like it was worth the try) and no change
  • The OMV was running on dhcp and changed it to static (192.168.1.51 - outisde of dhcp range) and well, no change

How can I make it so my OMV is locally accessible? Any suggestions of where to look with OPNSense?

Thanks!!
***SOLVED*** My ADD brains inverted the 0 & 1 in the Tunables config. Sorry and thanks all.
#4
Hi everybody,

I'm reconfiguring my home network and would like to (if it makes sense) to use vlans on multiple NICs on the firewall. Let me explain:
  • I have a 6-port Topton firewall w/ I-226v ports
  • I wish to deploy 3 VLANs: A) main B) visitors (for WiFi) and C) IoT
  • The house has 3x Unifi APs coming in the closet via two Ethernet outputs (or cables)
  • I have the Topton ports configured as is: ETH0 is WAN, ETH1-5 are LAN in a bridge in OPNSense
So can I make a VLAN work on multiple ports on the firewall? On all? If yes I think I need to create a bridge to do this correct? Am I allowed to configure two bridges (or more)? Same with the IoT network. Would I need to configure a bridge for vlans and one for IoT?

If my approach does not make sense please do tell me :)

Thanks!
#5
Hi everybody,

I've experienced something weird on my home network, I added a YoLink hub for their water-leak product (https://shop.yosmart.com/products/ys1603-4ys7903), the hub is mandatory in their product, and it takes my OPNSense unit  down for a few minutes then it comes back alive and goes down, etc. Take it out of the network and everything goes back to normal.

Version: 23.7.5

Attached is a log of downtime/uptime from my PC's view.

Any insights? I might just RMA this back to Amazon.

Thanks!
#6
**red-did everything, must have been a typo, sorry!**

Hi everybody,

1st time using/setting up WG and not the most comfortable with VPNs. I used  this guide to set things up https://www.wundertech.net/how-to-set-up-wireguard-in-opnsense/, alas cannot see the internal network when I VPN in from my mobile on the cell network to test things. This is to remote into my home network so no major security concerns once connected as I'll be the only user.

The client connects, I see traffic in Reporting:Traffic for the connected client. Been trying to figure out where my config issue is but cannot pinpoint it.

The client config is as follows:
[Interface]
PrivateKey = (deleted!)
Address = 192.168.1.10/24
DNS = 8.8.8.8, 8.8.4.4

[Peer]
PublicKey = (deleted!)
AllowedIPs = 0.0.0.0/0
Endpoint = NAME.ddnsgeek.com:51820

For the server I think I got everything right but here we are  ;D - where should I look for resolving this issue?
#7
Hi everybody,

New to the OPNSense platform and so far am really liking it, I came over from Untangle. Digging into the optional packages I ran into Zenarmor and am intrigued to see if it's worth it as it's for a home network (but only the paranoid survive!  8) ) running OPNSense on a box with a N5105 & 16GB Ram (https://www.aliexpress.com/item/1005004950894114.html).

Right now I have Suricata and ClamAV running, and have a few questions with Zenarmor:

  • At this point is ClamAV still useful?
  • Will this overtax the box? Probably not but I do have a wife approval factor to manage
  • Is Suricata still useful if you turn on Zenarmor?

I read that you use Suricata on the WAN interface, Zen on the LAN so at least that's that for the config part.

Thanks for your input!
#8
Hi everybody,

Untangle user here, and weighing my options.  This is for a home setup, where I have a teenager to manage and she can bypass the "MyCircle" device on network.  Smart kids bring in interesting challenges.  Don't know how she does it (need to look that up) but need to lock everything down solid.  MyCircle was good due to my wife's requirement to manage this, but now that has changed (she said do what you must, a bit like Yoda).

Been on Untangle for years but to do schedules/bandwidth quotas per day I need to move from the community edition to their Home plans 150$/year plus plan due to the # of IP addresses on lan aka smart home stuff https://www.untangle.com/solutions/untangle-at-home/), the price is a tad steep imho for what I need to do. and been itching for a reason to try OPNsense really.

So I need to control/block a user on LAN based on schedules and the amount of time per day allowed (you get 4 hours online per day, yada, yada).  Can this be achieved with OPNsense?  If yes, suggestions?

Unit running Untangle RN is a i7-2700 w/8Gb ram & bunch of NICs so should be able to handle whatever I turn on in OPNsense, I think, and would prefer not throw money on this box due to age. WiFi is Unifi.

Thanks!!!