Messages

Fai check con IPS/IDS sulla WAN ?

Hello,
i have a strange issue with the eht interface used for wifi (Zyxel AP Wifi 6)
The conf is like this

eth1 --> 192.168.10.0/24 - WIFI --> AP ZYXEL WIFI 6
eth2 --> 192.168.0.0/24 - LAN --> SWITCH HPE



I had no error since 1 month but today after enabling collision detection on the HPE i had issue on the other interface (eth1)
After loggin to the firewall i saw a bunch of errors on eth1 and errors on the DHCP for the subnet

The only fix was a full reboot

I found this

https://docs.opnsense.org/manual/how-tos/nat_reflection.html#reflection-and-hairpin-nat

i will check if this helps

Firewall advanced settings port reflection

Hello,
i have a problem with muli wan setup.

I have 2 Wan with /29 IP class.

I setup port forwarding and outbound nat but there is an issue with incoming connection from LAN to the server from his public IP.

In the atached diagram i explained better the setup.



The connection flow should be this if i want to connect to https://74.125.10.27:

PC 192.168.0.45/24 ---> WAN_A1 --> internet --> WAN_B2 --> https://74.125.10.27 --> https://192.168.0.201

At the moment this is now working since the firewall know that the public server IP is on the wan and it's not routing correctly.

I tried to use Unbound to do a DNS override but it's not working like i want.

I think this will works thanks;
i deleted all the crowdsec folders and database myself and now it's working

Hello, i have a brand new DEC3850, i want to reset the firewall to default state but this is impossible throw the web interface or the CLI;
i have setup crowdsec but still after 4 "factory default" i keep seeng the config loaded.

Why you use "factory default" if the system is not reset to default state ?

If you look at the console screenshot you will see the file still intect after default restore was done 4 times....

Also wrowdsec was purged from webgui before factory reset the device