Messages

1

23.7 Legacy Series / Re: Unusual Issue

« on: September 19, 2023, 04:03:21 pm »

I'm not using DHCP from the OPNsense firewall.  The firewall is just a firewall.  I'm using DHCP and internal DNS on my domain controllers.  The PiHole is set up as the forwarder from the internal DNS.  The PiHole points to Google DNS for outside lookups.  Basically it's a DNS proxy between internal and external.

My Windows machines are using domain time for time, my PDC Emulator uses the NTP server for its time, so time is all synched to NTP based on the transitive properties of domain time on the Windows boxes.  All of my Linux boxes and network devices, I am manually pointing to the NTP server.  The only one not currently getting time from the internal NTP server is the OPNsense box.

2

23.7 Legacy Series / Re: Unusual Issue

« on: September 18, 2023, 06:11:45 pm »

I was on the latest version when I installed it and up until this new version came out last week I was still on the newest version.  It wasn't a "newest version" issue.  The newest version has been out less than a week and this problem had been an issue since early August.

I am aware that the basic rule that is on the install is "the bare minimum".  It's not a permanent solution.  It is there until I get a better handle on the way the rules work.  I come from an IPTables/Cisco ASA/Checkpoint FW1 background, so I have to learn the way OPNsense does things before I start getting granular.  You know...  Crawl, walk, run.

As far as DNS and NTP, I an running my own NTP server that uses GPS for time sync.  That said, I still need to figure out how to point OPNsense to it.  My internal DNS points to my internal PiHole, which then points to external DNS.

I appreciate the input.

3

23.7 Legacy Series / Re: Unusual Issue

« on: September 18, 2023, 02:42:16 am »

Ok.  So this is going to add to the weirdness.

While I was waiting for any responses, I did the latest upgrade that just came out.  Now I can get to the Internet from boxes on the 10.8.1.x address space.  Including the 1.1.1.1 Cloudflare site.

Any ideas why that "fixed it"?  If not I will just chalk it up to "magic".

EDITED TO ADD:  This has, literally, been non-functional since early August when I replaced my old Zyxel firewall with this one.

4

23.7 Legacy Series / Re: Unusual Issue

« on: September 17, 2023, 11:55:58 pm »

These are my NAT and firewall rules.  Default generated from install.

5

23.7 Legacy Series / Re: Unusual Issue

« on: September 17, 2023, 11:51:51 pm »

I don't have any NAT rules set up, beyond the default rules from the installation of OPNsense.  This seems to work for everything else.  Why would it not work for those?  They're on the same /16 network.

6

23.7 Legacy Series / Re: Unusual Issue

« on: September 17, 2023, 11:42:38 pm »

I called it "subnet" for ease of explanation.  My entire network is utilizing a 10.8.x.x address space.  Different things are on 10.8.0.x, 10.8.1.x, 10.8.2.x etc.  All of my hosts are configured /16.  Only the ones on the 10.8.1.x space are having the issue.  All of my spaces, 10.8.2x, 10.8.3.x, 10.8.4.x, 10.8.5.x, and 10.8.200.x can get to the Internet just fine.  It's just the 10.8.1.x space having the issue.  I have nothing configured with a /24.

7

23.7 Legacy Series / Unusual Issue

« on: September 14, 2023, 09:31:15 pm »

So I have deployed an OPNsense firewall and am running into an issue.  The only traffic rule I have allowing traffic out is the default one that is LAN to Any wildcard.  My subnet is 10.8.0.0/16.

The issue is that nothing on my 10.8.1.0 subnet can reach the Internet.  No traffic at all (http/https/dns/whatever).  However, the traffic on the rest of the 10.8.0.0 subnets can reach the Internet just fine.

Does anyone have any ideas?  I'm stumped.  I'd think that the CIDR being a /16 would allow anything out that starts with a 10.8, but apparently I am missing something.  For curiosity, the LAN IP of the firewall is 10.8.0.1/16.

Thank you.