Messages

1

Web Proxy Filtering and Caching / Re: Enable Transparent HTTP and SSL mode

« on: September 19, 2024, 08:46:13 pm »

Re-re-re-re-install went smooth, everything is back up working the way it should be except this time I haven't installed Zenarmor yet, going to give it a couple weeks and then try. 

2

Web Proxy Filtering and Caching / Re: Enable Transparent HTTP and SSL mode

« on: September 19, 2024, 03:45:14 pm »

I took a look at the php code, undid the rules and now I'm locked out of the webgui 

Also see a lot of this: configd.py   action rfc2136.reload.lan not found for user root

Going to re-install (fourth time) and start with the web proxy first.


If this was a client I'd be recommending a different solution... 

3

Web Proxy Filtering and Caching / Enable Transparent HTTP and SSL mode

« on: September 18, 2024, 02:56:19 am »

Greetings,

I was following Zenarmor instructions to setup proxy. https://www.zenarmor.com/docs/network-security-tutorials/how-to-set-up-caching-proxy-in-opnsense#3-enable-transparent-http-and-ssl-mode and I noticed "Add a new firewall rule".

Well, that didn't go so well, 80/443 access blocked now. I tried to remove those two rules and that hosed the system.

I've put the system aside until I can look at it in depth so it's not a priority. What I was wondering is if anyone else tried those links to add rules and have them work?

Thanks.

4

General Discussion / Re: Web GUI dig <opnsnes fqdn> shows multiple ip addresses?

« on: May 24, 2024, 01:59:58 am »

Thanks for the pointer.

I wound up adding a localhost ip, dns overide and the dns overide fqdn to alternate hostnames.

I might add another nic and dedicate that to managing systems.

5

General Discussion / Web GUI dig <opnsnes fqdn> shows multiple ip addresses?

« on: May 23, 2024, 08:05:43 pm »

New to OPNsense here.

Is there a howto on configuring web GUI access on only LAN segment? Following any of the search results and docs do not work as expected.

On the actual OPNsense system using the diagnostics DNS lookup I get the LAN IP only which is what I want to see returned on any system on the LAN segment. (Do not register system A/AAAA records checked)

Issuing "dig <opnsense fqdn>" on any system on the LAN segment returns all Internal IPs?


For now I've brute forced it in the hosts file on all the systems, there has to be a better way.

Any pointers?

Thanks!