Messages

1

General Discussion / Re: Port Forward with SNAT and DNAT?

« on: July 20, 2024, 03:45:49 pm »

Ok thanks, I made it work.

It was confusing for me at first because I was thinking about the differences between port forward and outbound in a strict sense (and I wasn't able to find settings for "incoming" packets), but really the solution was quite simple, I just needed to create an outbound rule assigned to the LAN interface with the needed protocol and port, any as source and the LAN IP of the server as destination with the translation being done with the LAN address of the router.

2

General Discussion / Port Forward with SNAT and DNAT?

« on: July 20, 2024, 02:02:15 pm »

Hi, I have added a port forward configuration so that I can reach a specific LAN endpoint (server and port) from an external client (mobile smartphone, laptop, etc...), therefore the public IP of the modem/router is being "translated" into the private IP of the server (which should be DNAT, right?).

Now the problem is that, because of a particular setup I have in that server, I need the internal part of the traffic to not carry the public IP of the client connecting to the server, instead I would like it to be masqueraded with the private IP of the OPNsense router (which should be SNAT, right?), so that the server sees the connection as coming from LAN.

Is it possible to do it from the OPNsense web interface, or does it requires some manual/cli editing??

3

Virtual private networks / Unbound DNS outgoing wireguard interface

« on: March 12, 2023, 11:00:45 am »

Hi, I was wondering if it is possible to configure Unbound DNS so that every DNS query will be sent through a specific wireguard tunnel.

I can see there is the "outgoing network interfaces" setting in "Unbound DNS -> General", but even if I set it to only the wireguard interface I am interested in (in this case it's a Wireguard VPN Provider I set up following the standard OPNsense guides in the doc), those DNS queries are still going out the WAN interface (I can see they originate from my public IP).

Am I doing something wrong? Is there some Routes, Firewall or NAT rules that needs to be added?

I have a pretty standard configuration of OPNsense and I only added the wireguard tunnel (where basically the router is the client of the VPN provider acting as the server).

Thanks