Messages

1

General Discussion / Re: DNS with starlink

« on: June 21, 2024, 12:03:28 pm »

Hi Casper,

As indicated, you need to tell us what are your DNS settings.

I am a newbie as well and have multiwan with Starlink and PPPOE. I am using Adguard Home (on port 53) + Unbound (on port 5353), because I used Adgaurd as filtering before an like it. Followed one of the posts on the forum for the full setup, vbut was relatively easy.

Cloudflare DNS info is in Adguard. Nothing in Settings-General-DNS Servers.

2

General Discussion / Opnsense - DMZ - Cloudflare Tunnels - issue with port 7844

« on: June 19, 2024, 12:34:36 pm »

I have moved to Opnsense last year on a Boxking N6000, 16GB, 512GB NVME, 4x i226 NIC to setup a Multiwan (Local ISP - PPPOE on DSL and Starlink) and the box has been going strong.

I am now setting up a DMZ, behind which I will have a Ubuntu Server to host my websites (mostly family photos and family stories) managed by CyberPanel.

I followed one of the posts here to setup up cloudflare tunnels for my website, but I struggle to get the communication tbetween the cloudflare tunnel and cloudflare servers, for which I need top opn either UDP or TCP on 7844. I must have overlooked or misunderstood on all the steps for how to open the needed port between my DMZ (outbound) and the cloudflare servers. UFW is not installed on the Ubuntu server - I am fully relying on OPNSense. Opnsense on 192.168.1.1, DMZ Server on 192.168.2.2

What I have done so far:
Firewall->Aliases-> Create Cloudflare_IPv4 Network with Cloudflare Servers listed (including IP adresses for Argo Tunnels + same for IPv6)
Firewall->Rules->DMZ-> DIr. Out, TCP, IPv4, Source DMZ Net, Dest. Cloudflare_IPv4, Port 7844, Default Gateway. i can telnet ports 80, 443 (also opened by a rule) but not 7844
Firewall->Rules->Lan-> DIr. Out, TCP, IPv4, Source Lan Net, Dest. Cloudflare_IPv4, Port 7844, Default Gateway.
All open ports are reachable (80, 443 and 7844)

I suppose I need to do something with Firewall -> NAT -> Outbound, but I must admit I am lost.

Any suggestion would be helpful.

Thanks