Messages

Can we do something like this? I was able to get IP from my ISP to my virtual switch. But I am running into routing issues at my virtual switch.

[Modem] → hostpci0 (0000:06:00) → Virtual Switch VM
    ↓
[Virtual Switch bridges to two virtio NICs]
    ↓                           ↓
vtnet5 (opnsense1)         vtnet5 (opnsense2)
    ↓                           ↓
  [WAN]                       [WAN]

I was able to get opnsense1 as primary and opensense2 as backup. Failover etc all are working. My trouble is getting the routing done at Virtial Switch. I used Alpine Linux for my virtual switch.

All this on a Micro Firewall with 6 port - 2.5GB nics on motherboard / J6413 processor. I see CPU spiking up, but if this fix works, I won't mind throwing more cores to this.

I was interested to check did I configure my opnsense correctly, so ran some port scanner from a pen-test tool website.

All good and some recommendations were given. Now I am wondering how to eliminate the information that permits the identification of software platform, tech, server os, http headers etc... Screenshot attached.

Any help appreciated.

Check this URL
https://www.ionos.com/help/domains/configuring-your-ip-address/set-up-dynamic-dns-with-company-name/?srsltid=AfmBOoozTiBw3-h-slJm7hkcua1IwATp6HZMz0osZs_YoGM-JAjj3GuX

I am planning to switch to bridged mode for my nic. This definitely helps.

Figured the answer is here.
https://forum.opnsense.org/index.php?topic=19948.0

Just run - /usr/local/opnsense/scripts/nginx/naxsi_rule_download.php from commandline as root.