Messages

Hi!

Forget it...I am as dense as a brick.

I configured the network interface for the proxmox machine as a /32 so nothing good could happen.

Sorry for wasting your time...noob issues XD

I have a proxmox fresh setup onb my LAN interface and I can't manage to get OPNSense to allow traffic...no matter what I do:

Code Select Expand

__timestamp__ 2024-01-06T21:22:00
ack 130627296
action [block]
anchorname
datalen 0
dir [in]
dst 172.25.1.202
dstport 55596
ecn
id 0
interface igc1
interface_name lan
ipflags DF
ipversion 4
label Default deny / state violation rule
length 60
offset 0
protoname tcp
protonum 6
reason match
rid 02f4bab031b57d1e30553ce08e0ec131
rulenr 4
seq 3504382277
src 172.25.1.53
srcport 8006
subrulenr
tcpflags SA
tcpopts
tos 0x0
ttl 64
urp 65160

As you can see the traffic is FROM the LAN TO the LAN. So it makes no sense it is blocking it. Anyhow, I know it is OPNSense bc as soon as I disable the firewall (pfctl -d) the connection works perfectly.

I have created a LAN rule to allow ANY traffic from ANY LAN address and another on the opposite direction and the result is always the same...

Help. I am getting crazy, can-t find why the default policy blocks the traffic...makes no sense.

[DHCP Domain Override]

Hi Monviech!

Worked perfectly fine.

I just had to set up query forwarding to the Pi (it was not configured but I assume OPNSense was using it as DNS server as it was configured that way on OPNSense) and added DHCP Domain Override to my internal domain.

Thanks!

Hi Team!

New to OPNSense and firewalls in general. Some previous experience with FortiNet but limited.

I have setup a Firewall at home behind the router:



I have set up OPNSense as DHCP server for the LAN part and DNS with Unbound DNS. So far everything is working fine. But I have a lot of temporary virtual machines on the proxmox server working on DHCP.

I wish to register these VMs name's automatically with their assigned DHCP address and name, but the information  on internet and manuals is confusing, it almost always refers to Dynamic DNS for public IPs, not for internal DHCP leases.

Maybe there is some info/tutorial/video I can check to setup this?

Thanks!