Messages

1

23.1 Legacy Series / Re: Blocks do not block anything

« on: July 04, 2023, 12:00:55 am »

I'm trying to allow .40 to only access its VPN connection, on 1197.  I have two rules (one from 1-1196 and the other from 1198-65535). Its not working and the wiki's instructions aren't blocking anything.

2

23.1 Legacy Series / Blocks do not block anything

« on: July 03, 2023, 09:08:06 pm »

Best I can tell, blocking rules don't work at all. I am trying to let through only port 1197 on a certain IP, have the rules in place, but it doesn't do anything. I've been unable to find any guides regarding OPNsense so I'm taking shots in the dark setting this up. The wiki doesn't really cover much unless I missed that page. I've attached a screenshot of my rules (first half; there is another from 1198 to max). Zenarmor shows there's plenty of 80 and 443 traffic moving on this computer. Why doesn't this work? Is there any documentation for this software? Or, can you recommend a better firewall, preferably one that can more gracefully block tormenting than this solution?

3

Zenarmor (Sensei) / Use local time on Zenarmor logs?

« on: July 03, 2023, 09:00:04 pm »

I am trying to see what my traffic is at certain times but the times reported in the Zenarmor logs are not local time. It in fact doesn't say anywhere what the timezone is but its not local. How do I get the logs to local time so I can understand them?

4

23.1 Legacy Series / Re: Reverse proxy doesn't work when on LAN, only WAN

« on: June 23, 2023, 04:09:06 am »

If you're asking if I turned on "Reflection for port forwards" in Firewall > Settings > Advanced, I didn't have it set but after turning that on it didn't work any differently. It didn't seem to create any news rules under NAT but maybe I have to create rules after enabling that setting.

5

23.1 Legacy Series / Reverse proxy doesn't work when on LAN, only WAN

« on: June 22, 2023, 04:08:58 am »

I've got a working OPNsense VM running but I'm having trouble with my Synology reverse proxy. This was working well with my Asus RT-AX89X router so I assume I have as setting wrong with OPNsense. Here's what I know:

• If I'm connected via WAN (not at home, at home using my hostspot), my reverse proxy works as expected.
• My https://router.[mydomain].synology.me properly redirects to 192.168.1.1:4343, as I set in the HTTPS only admin port.
• My Vaulwarden docker container connects normally at bitwarden.[mydomain]... you get the picture, on WAN
• On LAN (local wifi) I can always connect with IP addresses and port numbers but the reverse proxy is out. I could keep one set of links for local and one set for remote but BitWarden only lets me put in one URL for the sever. This is the main reason I need the reverse proxy as work won't let me use a VPN to get to my self hosted password manager from the work-IT managed computer.

What have I set wrong? I considered maybe I needed port forwards for LAN and WAN but I didn't want to start changing things and risk taking the work-from-home router offline... again.